Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zNYEnPSdWbUDk0xZYbEdMWyriY.roa
File: 1zNYEnPSdWbUDk0xZYbEdMWyriY.roa (raw, json)
Hash identifier: JRi9llxlsPtzGPDSwQdL21fcoaPrdZsyiFirE7Re3xA=
Subject key identifier: D7:33:58:12:73:D2:75:66:D4:0E:4D:31:65:86:C4:74:C5:B2:AE:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BADE30783F5CA37B80D6AFA614E0F257
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zNYEnPSdWbUDk0xZYbEdMWyriY.roa
Signing time: Wed 14 Jun 2023 17:05:03 +0000
ROA not before: Wed 14 Jun 2023 17:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:badd:849d/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:de:30:78:3f:5c:a3:7b:80:d6:af:a6:14:e0:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 17:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d733581273d27566d40e4d316586c474c5b2ae26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:99:a6:76:09:c2:ee:32:80:e7:1f:eb:6f:
3a:c8:0c:d1:76:bf:cc:1a:26:de:7d:42:0e:73:79:
5e:a6:43:72:25:2d:28:e8:d1:56:9e:41:b8:2d:48:
7c:a0:6e:42:63:41:69:88:f9:50:a5:50:4b:5e:78:
dd:e4:a9:d0:8f:93:19:13:ba:2f:f0:8c:fa:09:99:
5b:01:f3:f1:d7:74:79:81:37:d1:d4:f5:cd:2c:a9:
2e:54:6d:e2:f5:46:37:83:0f:da:f4:a9:09:4a:7c:
02:42:33:e6:5b:a6:71:b3:c8:26:3f:1f:53:9d:4e:
23:0c:1b:7f:6d:97:35:8f:48:ee:16:e9:d3:9f:24:
81:4a:c2:a3:55:01:74:b2:85:32:ed:d5:39:8f:99:
f0:d4:a5:eb:eb:b7:db:19:0e:ca:e7:17:04:a7:62:
9e:83:9a:d6:4b:be:d1:38:4f:55:e5:cf:3f:9e:a7:
ed:24:6f:02:08:e1:01:b3:8f:9c:b0:9c:e2:82:11:
ed:5d:e9:a4:48:23:21:33:6d:a3:d8:82:dd:fa:c7:
d8:84:1b:af:c4:c1:14:64:4f:7a:fa:c4:b2:22:28:
58:a1:ce:de:4e:49:34:b8:9e:95:95:a7:c5:f3:0e:
76:52:c8:5f:5c:0e:cf:e5:cf:b4:1c:2a:ef:20:b6:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:58:12:73:D2:75:66:D4:0E:4D:31:65:86:C4:74:C5:B2:AE:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zNYEnPSdWbUDk0xZYbEdMWyriY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:93:35:2c:2f:4f:94:44:59:d7:6a:9b:05:21:61:4f:ec:d0:
da:38:4a:6c:2d:fd:cd:2a:87:93:06:38:95:15:e6:3c:39:83:
4a:25:13:b5:b6:2b:f5:c3:1a:00:52:0b:fd:ad:fb:8f:43:31:
71:9e:2b:18:7e:20:50:9c:5c:fe:ef:2e:ad:d5:6e:5e:de:44:
69:32:32:ac:43:c1:ae:f1:08:b4:83:a0:8b:a0:e7:e9:cd:a0:
71:0c:96:af:3c:27:af:64:73:ad:18:38:58:38:80:2e:01:67:
09:7e:dd:ff:13:4a:a0:6d:5f:3c:72:32:36:fb:61:76:bc:b0:
b7:b2:97:8a:da:d2:b3:90:02:c4:a0:c6:2d:81:54:c6:f1:00:
22:62:a9:75:af:2c:2f:04:bf:1a:b5:da:c9:df:69:fe:4c:a5:
46:25:5d:79:2b:38:0c:8a:62:ae:3f:06:d3:52:f3:32:fc:68:
2c:ad:e3:ba:93:df:03:46:80:f6:9e:b1:96:82:de:67:3d:37:
9c:77:f9:1b:e8:bb:5b:b3:88:89:9c:b1:1f:95:fd:b4:47:27:
28:26:50:1b:d0:81:5d:2c:dc:b7:ca:73:57:b9:d1:58:83:29:
56:76:4c:5e:d5:9d:9a:c3:1c:b9:39:34:38:aa:40:4e:4f:b0:
f5:3e:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:01:29 2025 by rpki-client