Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZoasIUJSdfolbZabnR9xldx1r34.roa
File: ZoasIUJSdfolbZabnR9xldx1r34.roa (raw, json)
Hash identifier: P+gnJeWryABtmUR77J08Y3p0wR3VPBC/9kCr5wX/cyI=
Subject key identifier: 66:86:AC:21:42:52:75:FA:25:6D:96:9B:9D:1F:71:95:DC:75:AF:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81280360
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZoasIUJSdfolbZabnR9xldx1r34.roa
Signing time: Wed 04 May 2022 18:04:28 +0000
ROA not before: Wed 04 May 2022 18:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:903e:ac1d/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166883168 (0x81280360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 18:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6686ac21425275fa256d969b9d1f7195dc75af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:c8:13:4b:ab:d5:dc:d9:72:93:41:bc:48:
eb:88:8d:d6:dc:99:67:33:ce:52:2f:86:2a:16:10:
d4:f8:fc:0f:10:84:a8:95:ad:47:34:35:a5:61:e6:
70:41:ab:a5:fe:5a:e3:0d:45:7e:c3:95:d5:20:4a:
d4:fa:38:5e:d1:56:b0:fc:8a:4d:b8:7e:55:ff:ee:
0e:5f:c8:c5:58:19:84:81:58:e9:84:2e:04:b9:1c:
3d:42:ac:29:6b:94:2f:cc:ba:eb:c9:9e:7d:fe:58:
f9:2d:a0:87:02:8f:a5:d8:bf:d5:f3:26:ff:3b:a4:
12:fe:a1:2f:d2:4b:e6:b6:7e:a9:c4:4d:80:a3:c1:
6f:e0:d8:3a:14:bf:4d:81:f4:14:88:4b:33:ee:8c:
e4:72:bc:d3:3f:44:b8:42:34:f3:32:c6:12:ba:33:
81:fc:ee:1f:49:58:22:3c:02:55:b7:6f:af:f6:05:
26:19:fc:3d:53:84:a9:90:cb:63:f8:26:49:05:96:
b7:34:e1:ad:ca:1a:f3:58:fb:0d:cd:f8:d1:26:94:
fc:22:f5:cd:9b:0c:85:f3:ab:a4:0d:22:be:6e:3e:
c5:e2:51:63:b8:46:2d:b4:47:e3:96:6c:00:12:56:
8c:9d:f2:90:cf:bf:cf:34:d3:f2:2a:09:84:bc:d3:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:AC:21:42:52:75:FA:25:6D:96:9B:9D:1F:71:95:DC:75:AF:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZoasIUJSdfolbZabnR9xldx1r34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:41:02:3e:7c:47:aa:13:62:aa:13:bd:96:ae:82:8d:b3:6b:
4e:50:67:e2:f9:31:47:b1:df:a5:5d:e5:e9:95:45:6b:eb:35:
9c:fd:c6:3e:08:7b:e2:cc:63:33:c7:95:81:fe:9e:e3:95:3e:
77:7e:3e:d4:7d:94:40:15:89:e3:c3:3d:d6:92:06:5f:9b:71:
e8:f0:12:65:66:38:f8:0d:8b:c0:a5:bb:a4:9d:f5:ed:aa:3e:
8a:3e:b7:fa:05:ce:7f:49:23:bf:22:c0:cd:29:27:da:a8:a9:
50:ba:25:64:9a:1f:58:e8:c7:6b:b9:7a:20:ec:a0:79:a2:f0:
63:eb:b7:b2:a4:63:07:d1:33:5f:06:7b:5f:1c:a9:7b:c3:ae:
ec:14:30:18:c1:a5:4f:bc:75:9d:1c:ce:8f:3c:cd:fd:c1:8c:
f8:56:b3:5f:14:d6:b0:8c:1e:a4:a3:00:23:6d:5c:17:84:29:
1a:83:00:a6:9b:c9:01:ec:0b:4e:97:4e:ec:66:df:88:36:09:
fe:1f:74:de:55:6d:39:ef:bc:74:56:7c:d3:db:6f:36:67:8e:
57:39:69:08:b1:aa:d3:ad:41:bf:8a:51:9a:d8:1e:3e:47:88:
97:f8:3f:4b:9e:6c:ef:bb:d6:c5:ab:fa:19:d4:40:1a:8c:90:
71:b5:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:20 2025 by rpki-client