Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRZXRQAK1mj7cZh4O8kwMHUywEU.roa
File: cRZXRQAK1mj7cZh4O8kwMHUywEU.roa (raw, json)
Hash identifier: zEYgFIOMrjTgqsdMMjCk+rKBmoY2AzStALUcmGfr+l4=
Subject key identifier: 71:16:57:45:00:0A:D6:68:FB:71:98:78:3B:C9:30:30:75:32:C0:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018269A2F5D0E8D07ADB841142BD0BB3E317
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRZXRQAK1mj7cZh4O8kwMHUywEU.roa
Signing time: Thu 04 Aug 2022 16:14:23 +0000
ROA not before: Thu 04 Aug 2022 16:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:a2:f5:d0:e8:d0:7a:db:84:11:42:bd:0b:b3:e3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 16:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71165745000ad668fb7198783bc930307532c045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:71:c7:de:22:ea:2e:b0:e6:3f:c2:a9:a1:69:
bf:bd:0f:f4:91:49:9b:2e:9e:76:f5:61:39:8a:50:
3f:02:54:cc:ca:6f:51:98:49:bd:db:3a:6f:ba:14:
1c:54:3a:18:aa:12:fc:62:bf:60:49:02:3f:a0:56:
4a:5b:8a:2b:27:5c:66:6d:73:df:96:8d:27:02:77:
b0:f8:e9:fa:82:11:0a:cb:a3:cc:81:6c:60:3b:bd:
8f:46:bb:c4:48:48:27:7b:12:a8:f1:bf:73:d5:2b:
7b:94:29:70:39:21:5b:c9:0c:8e:cd:92:91:a5:ac:
d4:ea:fe:17:7a:6f:ee:c2:5d:04:71:9d:1d:76:01:
e5:75:c2:67:de:e5:c7:3f:ae:42:80:73:5a:ef:58:
c9:57:f5:62:93:d1:aa:2a:cd:4b:ee:79:e6:e1:9f:
fa:00:5f:8b:75:91:1c:4c:de:31:54:92:6f:ed:bb:
d2:cb:cf:dd:08:69:47:10:e5:f5:ea:51:05:af:04:
a2:21:b5:38:67:8d:43:d0:48:e9:e0:99:34:c6:c4:
3d:a1:28:60:60:dc:6c:98:ef:c8:90:06:7c:7f:17:
39:e2:a8:1b:fc:2a:1c:1a:c3:06:4f:6e:8c:bb:02:
37:aa:9f:ea:63:ab:07:30:1b:c0:98:02:8e:d7:21:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:57:45:00:0A:D6:68:FB:71:98:78:3B:C9:30:30:75:32:C0:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRZXRQAK1mj7cZh4O8kwMHUywEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:32:81:de:16:d1:78:dd:ea:5f:30:e4:d7:77:a2:9f:2d:38:
d9:a7:fa:4e:07:3c:29:02:14:86:9f:9f:a3:a3:82:e4:3b:ac:
a6:09:e6:a0:af:e6:56:8b:9b:dd:1f:51:20:12:96:87:a5:7c:
6c:24:08:0b:95:b1:00:e2:b0:41:0e:ab:44:1a:24:44:5e:1b:
d7:83:71:80:2b:db:88:31:5b:c1:ae:ae:0b:84:18:a7:35:7d:
71:96:f1:48:44:e1:03:90:d7:ed:11:2d:37:04:b4:e7:0c:df:
ca:31:51:9f:13:0f:0d:76:50:13:a9:c4:ec:44:45:1e:f2:b6:
47:1f:1e:e6:19:05:7e:bf:d9:39:7b:52:1d:fc:da:ad:20:52:
be:44:d4:c4:c2:82:4b:9f:5f:c6:68:6b:ea:dc:05:52:24:89:
b5:33:c4:44:99:e7:c2:d2:df:90:a1:76:70:81:94:d4:33:dd:
e7:fe:57:83:77:7d:37:bf:72:4a:22:95:4a:96:51:2a:c7:19:
66:27:39:f3:7f:d6:62:ad:41:ae:86:8d:78:54:f7:69:4b:0c:
93:be:eb:bf:3f:c1:f6:c6:1d:c7:e8:8b:14:f8:f3:01:7a:e0:
47:24:aa:5d:4b:77:e2:84:94:3f:ef:cd:7c:69:c6:78:51:83:
9b:9f:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:24 2025 by rpki-client