Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-ZV2HO1E5rW-4dNlCJDsAqBVOo.roa
File: N-ZV2HO1E5rW-4dNlCJDsAqBVOo.roa (raw, json)
Hash identifier: saXCG157tIa1hD7hOKKv2dP9xXs5pHldbh0yO7o2Ot0=
Subject key identifier: 37:E6:55:D8:73:B5:13:9A:D6:FB:87:4D:94:22:43:B0:0A:81:54:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825E0E7A044BFE6B09FF1AC6AB85ACECAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-ZV2HO1E5rW-4dNlCJDsAqBVOo.roa
Signing time: Tue 02 Aug 2022 10:16:23 +0000
ROA not before: Tue 02 Aug 2022 10:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:0e:7a:04:4b:fe:6b:09:ff:1a:c6:ab:85:ac:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 10:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37e655d873b5139ad6fb874d942243b00a8154ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:47:c5:1d:79:a1:71:46:49:7e:a1:f9:5a:
10:b1:78:f9:28:1e:85:14:4b:11:ab:33:cf:56:c8:
d6:d7:c6:dd:df:8a:91:23:51:5f:1f:bf:9c:b5:9e:
d6:ab:82:3e:dd:43:6d:cc:a4:67:ac:0c:44:f5:62:
36:89:ee:a5:a6:a5:32:29:60:40:d3:b8:13:69:ae:
83:c9:fe:c2:cf:a2:95:3b:bd:fa:a5:3a:99:18:60:
13:ab:e6:b5:b9:12:b2:68:f2:82:0c:27:cf:04:86:
63:95:d9:5b:fd:12:45:83:90:0b:c9:fe:94:06:ad:
24:06:23:4b:ed:36:5b:4c:66:ee:39:78:0f:8f:ed:
9b:6a:b9:24:37:de:13:67:fe:98:34:7d:15:a6:59:
37:30:b4:39:8a:c1:f0:5d:0e:a7:b8:1d:3b:3a:38:
47:d6:8b:fe:16:89:35:9f:0d:4c:e2:04:2d:2d:d9:
d5:61:c3:d1:13:20:46:73:23:cd:01:d8:38:77:9e:
fd:2e:1e:f0:d6:c3:e0:d8:07:d2:60:58:71:e4:7c:
03:6b:f0:1f:5e:77:65:38:df:20:5d:d9:3a:0c:f7:
a7:1a:10:13:2e:11:87:e8:ef:67:0f:19:3c:53:64:
56:5a:a4:d9:92:d5:86:db:eb:81:a8:64:f2:b8:a9:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:55:D8:73:B5:13:9A:D6:FB:87:4D:94:22:43:B0:0A:81:54:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-ZV2HO1E5rW-4dNlCJDsAqBVOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:e1:16:3e:c9:b5:0a:64:c2:b3:6e:87:b7:95:37:1f:25:f9:
e1:2b:52:7c:b3:1b:cc:07:33:82:1e:bf:be:51:ee:12:fd:25:
15:6a:bb:9b:16:98:85:f1:16:b4:c1:a3:bf:ce:b7:38:14:42:
49:81:5b:54:c9:b9:8f:98:1f:c4:78:8e:dc:97:77:92:b5:f7:
df:73:88:ad:7a:89:d2:8a:d1:2d:85:6a:5b:12:e5:81:7a:2c:
7a:34:93:d9:e2:ca:9d:32:12:9e:f3:71:b5:66:04:f3:81:53:
ed:66:27:26:51:7a:62:ca:3c:a6:1a:0a:be:5b:46:1d:d3:9d:
1b:d9:41:bc:76:60:38:72:ab:ac:30:c3:34:e1:31:55:f3:5c:
f8:2b:42:93:f0:fc:14:0c:b8:6a:8a:d3:36:d5:fb:d2:05:c6:
8a:74:8f:81:7a:9d:91:66:7c:1c:87:71:06:ec:b9:08:c5:20:
b8:40:84:99:35:34:62:48:15:97:70:36:ce:54:af:c6:15:65:
11:07:d2:53:c9:25:a4:93:86:4d:3e:6f:8b:54:9b:86:55:ed:
b4:fe:30:cf:58:7d:1c:83:bb:4f:56:17:c0:be:47:fe:20:de:
66:71:f2:bf:98:d5:73:21:2a:1f:9d:64:27:4a:f5:76:d4:c9:
ee:01:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:54:54 2025 by rpki-client