Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zBhbdcFxJ7feeyjqYQSVwFnmAnU.roa
File: zBhbdcFxJ7feeyjqYQSVwFnmAnU.roa (raw, json)
Hash identifier: 4iRuDil2m/g/tni0KSzpEY1BYZwe7leDEkueg1wHIho=
Subject key identifier: CC:18:5B:75:C1:71:27:B7:DE:7B:28:EA:61:04:95:C0:59:E6:02:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DD03C22E69464CDE6CBB0A32ADC7A5D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zBhbdcFxJ7feeyjqYQSVwFnmAnU.roa
Signing time: Thu 10 Aug 2023 01:15:58 +0000
ROA not before: Thu 10 Aug 2023 01:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:03:c2:2e:69:46:4c:de:6c:bb:0a:32:ad:c7:a5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 01:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc185b75c17127b7de7b28ea610495c059e60275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:02:33:0f:49:1c:45:13:0b:3a:8a:0e:75:
75:38:b0:b9:fb:c2:ba:81:63:55:90:7e:49:37:ed:
a6:db:44:f4:c4:d9:3b:46:df:05:38:8d:04:23:9a:
91:3b:b6:25:bd:e8:62:86:87:17:75:37:a4:f3:20:
4b:a4:41:42:5f:ad:36:08:c4:b0:7d:03:36:fa:9a:
75:c6:73:6c:6c:7c:d4:b1:cd:77:b9:a3:fc:4e:52:
c5:a5:23:58:83:65:f7:04:af:d4:86:d8:48:cb:3b:
8a:37:18:fa:30:81:b8:de:cb:4b:00:54:5a:05:73:
5d:87:3d:26:92:87:85:85:23:e2:6e:c7:c6:b4:ad:
3f:d7:2a:7c:f9:6b:53:c1:5c:f9:66:f0:a5:87:ff:
3e:73:59:65:21:3d:80:cc:48:79:e0:e6:7b:25:91:
2c:df:83:4d:18:61:01:20:6e:36:54:98:c1:61:23:
10:f7:84:d1:33:82:0e:f1:ae:8a:03:59:4f:f0:75:
65:ac:93:0c:fc:18:ab:3d:3f:42:aa:ba:48:bc:04:
8b:af:48:16:d7:4f:9f:59:10:4e:13:c9:75:e4:e7:
d3:6e:ba:ed:58:b7:ce:71:5a:8c:f1:64:79:5f:cb:
55:07:91:f0:13:79:73:25:29:b5:bd:f0:75:17:9b:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:5B:75:C1:71:27:B7:DE:7B:28:EA:61:04:95:C0:59:E6:02:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zBhbdcFxJ7feeyjqYQSVwFnmAnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:b8:ec:64:1e:76:a9:b2:ae:fd:21:de:d8:d1:e8:d2:05:2b:
5e:97:53:92:c3:cd:ae:69:f5:bb:0c:13:36:bf:ad:fd:59:79:
c0:4e:9e:04:c2:91:6d:f8:d3:15:fb:04:e9:bc:29:cc:30:0e:
55:21:9a:d1:98:5b:e5:00:37:63:58:79:f7:80:af:a3:21:7c:
e5:7f:60:6c:c4:0a:25:89:8b:a6:da:99:90:eb:3b:a4:7f:d7:
73:c5:7b:ac:e3:fa:06:a4:d6:e2:de:f7:f5:6d:70:3c:bb:4c:
10:7e:f7:ab:21:07:35:fb:68:eb:f1:cb:5f:78:da:cc:e4:8b:
43:df:b5:71:59:fc:e7:b9:40:1c:15:87:37:12:23:01:27:63:
84:5e:dd:59:93:17:dd:4e:a5:f7:3b:57:e2:80:8c:98:1c:1e:
ed:5f:ab:06:29:9f:cc:33:85:6d:fe:6b:5b:c5:02:06:d1:50:
86:f5:f8:ff:f2:82:0b:70:cd:19:59:2b:53:85:65:e4:71:1f:
4c:cb:05:4f:12:f0:a6:0e:45:4b:3a:fa:e4:06:8e:59:d4:f4:
ae:55:58:09:fa:a5:ff:98:74:c9:9c:e3:e1:e4:0a:5a:aa:94:
f9:5d:e2:d6:62:90:3e:3c:09:6d:a8:e2:0e:57:ee:c4:1a:6d:
46:3e:58:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:43:31 2025 by rpki-client