Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zhVy6Vj7GF4caxQqIalX6S7mT8A.roa
File: zhVy6Vj7GF4caxQqIalX6S7mT8A.roa (raw, json)
Hash identifier: haL6fXa+mlMcIhIOIwyNOjsCx9ypcHMKagok4xr54qM=
Subject key identifier: CE:15:72:E9:58:FB:18:5E:1C:6B:14:2A:21:A9:57:E9:2E:E6:4F:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822FEB42354CEF724CE4AA72B1B9D4627A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zhVy6Vj7GF4caxQqIalX6S7mT8A.roa
Signing time: Sun 24 Jul 2022 11:15:23 +0000
ROA not before: Sun 24 Jul 2022 11:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:eb:42:35:4c:ef:72:4c:e4:aa:72:b1:b9:d4:62:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 11:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce1572e958fb185e1c6b142a21a957e92ee64fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:59:47:eb:0c:27:ae:64:cf:0b:d4:ae:f5:
01:fd:be:23:28:5a:5a:fc:46:4b:1b:f0:09:a5:c2:
e7:6e:ee:15:72:23:a1:d1:5c:3e:c4:2d:b5:a0:9f:
ea:16:2b:8c:36:ec:81:63:5c:d1:99:ed:d6:c7:fc:
39:4c:71:48:7b:7d:97:d9:29:9f:3b:aa:84:17:18:
22:25:f5:aa:4b:e5:ae:8d:c8:fc:5e:00:3b:71:67:
a1:6b:f3:d9:95:77:2a:c5:f3:9b:4f:cc:e7:ea:95:
e1:c3:d0:83:a6:c1:b7:fb:89:d1:cf:a5:70:21:23:
cc:0c:49:5a:04:fe:59:21:9d:61:73:6f:e2:c7:3e:
11:1e:dd:10:01:1f:41:cc:79:3e:71:47:b6:3e:4f:
25:de:b6:05:d3:34:1a:33:bf:54:9b:c5:f5:f5:78:
5d:d1:48:9f:f7:cd:8f:14:1f:ba:31:95:32:bf:0e:
a2:a7:ae:33:db:3d:99:52:2a:f3:ba:27:88:e1:42:
6a:1c:4a:87:fa:73:9d:1b:be:2d:bd:86:7e:71:08:
a8:5f:40:1a:dd:8a:4d:d3:90:8a:90:4c:ac:78:4d:
d4:b2:0a:b5:ca:2b:09:b3:8a:94:a6:68:3a:af:0f:
0d:a0:9a:fb:7a:d1:0b:4f:1e:f5:7e:5e:97:34:88:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:72:E9:58:FB:18:5E:1C:6B:14:2A:21:A9:57:E9:2E:E6:4F:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zhVy6Vj7GF4caxQqIalX6S7mT8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:74:4a:dd:fe:55:63:34:bf:91:af:21:3b:57:63:95:14:fa:
c1:c9:53:33:3e:82:36:2f:31:72:41:e3:b7:69:5e:26:55:4f:
ed:b5:9d:eb:de:da:4d:fb:86:2f:f4:7f:c4:99:e7:c7:59:de:
52:5d:ca:c5:81:c1:9a:ba:9e:5a:2a:d6:d0:1a:ab:88:c5:36:
26:78:5f:9d:e2:47:cb:57:ec:3f:7b:52:3a:66:6b:8b:0d:d9:
0c:75:42:b1:bd:a2:b6:20:43:c9:38:9f:17:56:0f:48:98:90:
ae:e2:93:c3:e2:6c:9c:41:0d:10:6f:bc:88:36:b8:01:0c:d2:
ab:65:35:0c:bd:f1:52:1b:d4:f6:47:28:37:ff:ac:b8:0b:9d:
30:9c:dc:74:17:dd:c9:e1:64:01:e6:a1:b3:f0:5e:9a:3a:35:
13:02:cf:e2:b1:ee:88:b3:f6:6d:7b:c4:52:12:54:b8:23:af:
3e:04:74:8b:f8:07:57:0f:0f:c9:e4:d7:71:39:44:b6:18:bd:
2d:cd:fd:dc:e7:18:69:91:b7:55:be:ed:77:4a:6a:91:82:2b:
8c:b0:4c:34:8a:bb:7b:96:eb:92:c5:e3:4b:75:11:7f:58:1e:
b2:87:58:b4:f1:ed:90:f6:5c:4e:0d:84:8a:b3:c2:db:9b:89:
56:45:f7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:27:34 2025 by rpki-client