Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrm6crsCls9HpdGJNJv2G5p_YaE.roa
File: zrm6crsCls9HpdGJNJv2G5p_YaE.roa (raw, json)
Hash identifier: x8Z08nAVhK3S7i+B0afBsyg9pD9/l1v3Pqd+O9Dbje8=
Subject key identifier: CE:B9:BA:72:BB:02:96:CF:47:A5:D1:89:34:9B:F6:1B:9A:7F:61:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DFCA369540476315EEC505C0B6F1CD10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrm6crsCls9HpdGJNJv2G5p_YaE.roa
Signing time: Thu 10 Aug 2023 14:11:58 +0000
ROA not before: Thu 10 Aug 2023 14:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:ca:36:95:40:47:63:15:ee:c5:05:c0:b6:f1:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 14:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb9ba72bb0296cf47a5d189349bf61b9a7f61a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:83:c6:ab:8c:55:9f:ae:c2:23:5a:90:17:
79:4b:d1:a4:4b:7d:c0:e4:e9:30:aa:1a:dd:d5:fa:
16:c6:14:86:da:d9:af:4a:e6:5e:9e:f0:fc:ed:2e:
b5:17:0d:48:13:91:25:7c:83:80:f1:9b:ea:00:9a:
52:25:44:9a:09:fa:b0:f3:3a:61:35:ae:db:5d:47:
d4:d9:35:6f:7e:80:f0:e6:59:29:0e:eb:4c:fc:69:
36:28:f6:ed:25:eb:0c:e6:cd:be:0e:7c:b9:52:9b:
1c:d3:de:12:9d:6d:93:c6:1d:73:38:90:ab:7f:a3:
f8:43:54:f9:75:3d:27:c3:7b:eb:c7:af:c3:5f:0a:
3c:4f:0e:4d:3a:57:2e:e8:e2:91:82:7e:18:be:c5:
98:f9:20:9d:ab:4e:62:06:4c:e5:5f:19:59:8f:35:
ff:83:19:f7:08:9f:a3:84:85:66:e6:a4:83:88:f3:
9c:3f:5f:8a:f9:73:35:8a:00:b3:22:d6:4f:9c:6c:
8a:e8:dc:90:6a:9c:c5:0d:d8:cd:b1:57:69:cf:4d:
da:fc:fe:20:3e:17:a0:2c:9c:7e:5c:ed:b2:f9:22:
ff:c6:73:71:bf:b6:19:14:c2:0b:fd:86:40:ca:e2:
29:63:4d:31:e1:27:19:36:0c:09:16:70:92:32:3e:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:BA:72:BB:02:96:CF:47:A5:D1:89:34:9B:F6:1B:9A:7F:61:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrm6crsCls9HpdGJNJv2G5p_YaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:f1:58:71:66:04:5e:f8:22:cb:81:9a:b1:65:a2:c5:59:91:
8f:7d:cf:c8:ad:5b:02:2a:19:c4:6c:67:85:ce:75:10:f4:d3:
61:6e:e9:3d:bc:68:b0:2c:1d:9f:8c:c1:e2:61:79:2e:f8:39:
32:2f:8b:ca:e3:17:19:09:cb:23:fa:fd:95:5b:c4:c8:3f:31:
5d:da:ef:31:84:a0:13:e3:64:a1:14:31:6e:3c:fc:cd:7b:11:
8d:83:cf:8d:1b:70:c9:a9:9b:a5:c8:f6:f6:75:d5:14:7a:14:
b8:db:27:0b:97:d1:a9:cb:72:f4:44:ef:4e:86:ea:a6:e7:46:
87:f8:df:3a:c0:38:14:23:b3:0d:46:c4:5d:70:fe:28:eb:7e:
c7:20:27:8f:51:93:19:dd:9c:2c:53:15:52:d7:8e:83:9e:e3:
45:17:43:9d:d2:c5:46:6a:61:0b:5a:e5:d9:01:4b:c0:b9:29:
20:e7:74:15:20:f3:85:9b:0d:e0:82:32:41:d5:79:ea:0d:a3:
0f:9a:fc:ce:e9:41:44:00:b5:71:66:40:c9:a2:6d:36:f8:77:
e7:85:c9:32:81:0a:e9:36:c2:81:b1:a8:a6:8c:cf:e2:87:d0:
b6:40:29:57:9e:9c:2e:2c:e5:5d:1a:99:7e:2e:0e:2a:00:5e:
bd:30:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:47 2025 by rpki-client