Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nZ1ZEYRtq2tRkjRg_PLlieYRV2A.roa
File: nZ1ZEYRtq2tRkjRg_PLlieYRV2A.roa (raw, json)
Hash identifier: 4DTG9dfvj39814v3oxt2wH9UeMpRqqTa2FI8wMqOWhQ=
Subject key identifier: 9D:9D:59:11:84:6D:AB:6B:51:92:34:60:FC:F2:E5:89:E6:11:57:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182ED2BC9D1EA233CA8FC3A1FB6B2CF900A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nZ1ZEYRtq2tRkjRg_PLlieYRV2A.roa
Signing time: Tue 30 Aug 2022 05:14:06 +0000
ROA not before: Tue 30 Aug 2022 05:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:2b:c9:d1:ea:23:3c:a8:fc:3a:1f:b6:b2:cf:90:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 05:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d9d5911846dab6b51923460fcf2e589e6115760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:0c:f1:90:02:f6:9e:f3:ba:2e:dc:8e:3b:
f1:3b:8e:77:cf:22:a1:54:6e:18:57:3a:90:33:2b:
8c:88:65:5d:c2:82:c0:e9:6e:c0:9e:0d:c0:fa:c8:
27:33:56:05:54:20:f3:a5:b2:1a:79:12:c1:22:17:
e1:54:dd:8f:cb:02:21:27:45:1d:fc:10:15:2b:67:
6c:77:1f:76:77:3f:25:73:cf:cc:5d:05:54:25:56:
48:26:19:c1:e9:2b:66:83:b4:1d:c8:5a:4c:92:e2:
aa:33:df:7b:48:74:1b:3e:f4:a3:3d:ba:75:97:01:
3a:53:d3:dc:47:d1:21:45:68:31:00:25:22:f3:76:
9b:2c:82:14:24:3f:2b:25:a6:5e:f1:ef:cc:a0:b7:
70:90:31:9f:0a:09:c6:0c:ea:11:6b:43:7b:a9:6c:
92:e3:fd:6e:08:3b:5d:ed:ad:25:b9:8f:c6:1f:cc:
45:1b:b7:33:1a:ed:b7:de:d0:f3:2f:1b:fd:10:96:
76:36:fb:34:a1:b5:c1:59:f1:71:da:f3:25:88:fb:
9c:77:75:81:48:9d:34:56:d6:d9:fb:3a:fd:a6:54:
87:4b:01:87:42:39:22:90:4d:c7:0a:e5:91:d7:e9:
be:33:88:b0:35:55:fb:fa:f5:90:9b:35:d9:b6:58:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9D:59:11:84:6D:AB:6B:51:92:34:60:FC:F2:E5:89:E6:11:57:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nZ1ZEYRtq2tRkjRg_PLlieYRV2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:f6:46:a3:70:69:c3:cf:6a:96:d9:6c:bf:b9:6a:24:2f:5f:
19:9a:cb:f7:7d:37:08:b2:be:1c:51:7b:db:b8:c2:26:da:62:
58:a8:0b:f4:1a:18:fa:3e:48:83:cc:b4:fd:38:f5:b5:a4:95:
fb:5b:43:e7:aa:8b:c7:58:19:0b:27:10:f3:e4:5f:92:da:35:
02:2a:e7:9a:e7:6c:da:53:24:cb:3b:ea:ac:d1:e9:18:f6:66:
81:b2:7e:3d:47:35:06:ca:c7:7d:1b:96:6f:8b:88:a0:83:d0:
44:b3:71:37:d0:9c:c3:5b:16:cd:6c:6e:12:4a:99:b3:6a:95:
78:14:b3:a7:8f:94:81:a8:35:a3:f8:59:42:16:1d:15:2a:3d:
4a:08:b9:b0:7c:49:db:28:af:c0:79:a0:50:99:86:cd:bf:b8:
ce:eb:08:8c:41:66:f5:46:b2:51:92:14:82:b6:2b:19:c9:2b:
2e:2e:73:4c:4b:c5:32:86:be:0a:71:9a:9c:81:57:5f:e5:a4:
98:06:81:f3:3b:04:10:79:42:70:54:d3:5f:90:61:1f:8d:b5:
94:15:15:75:67:cc:6c:db:6e:bf:8e:58:74:24:c0:d2:d4:0d:
6f:41:4b:24:38:99:69:3e:e5:ce:9c:e7:9b:a1:77:6f:bd:70:
0f:6b:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:40:23 2025 by rpki-client