Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zv5A7r1gUto4P6TG9idBLnTSfTU.roa
File: zv5A7r1gUto4P6TG9idBLnTSfTU.roa (raw, json)
Hash identifier: TpnF+WNV8vvHiKdxRqlDM0q8lwRdhKpOmIS/fzQMH/w=
Subject key identifier: CE:FE:40:EE:BD:60:52:DA:38:3F:A4:C6:F6:27:41:2E:74:D2:7D:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872C6CEEBB0435970336AF78D9E19724C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zv5A7r1gUto4P6TG9idBLnTSfTU.roa
Signing time: Wed 29 Mar 2023 08:12:29 +0000
ROA not before: Wed 29 Mar 2023 08:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:6c:ee:bb:04:35:97:03:36:af:78:d9:e1:97:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 08:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefe40eebd6052da383fa4c6f627412e74d27d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:f0:d4:35:3c:04:69:e3:3a:c8:2d:46:60:
ba:08:3a:6c:b0:71:73:55:ca:ac:d1:d0:db:3e:3a:
56:f4:17:69:81:3d:cd:01:d1:1e:8a:75:81:67:80:
31:b7:c0:40:e5:59:a9:4b:f8:3a:13:26:99:67:85:
6b:68:ed:2d:d1:2a:1f:d1:f7:10:bd:d2:ed:1c:73:
35:52:b3:83:2b:cc:de:fc:e9:66:8a:c7:48:72:bb:
00:ac:64:eb:ec:9c:18:f1:78:b3:d7:0a:80:7b:7b:
0e:8b:34:3c:72:e1:d4:2d:d2:a3:f4:7b:b1:1e:71:
ff:91:9a:ce:b9:b5:4b:50:fc:a8:ef:49:45:ea:c7:
89:c8:83:91:f2:97:27:8c:d3:36:0c:bd:6e:bb:ac:
d3:3b:be:53:40:94:f0:80:48:99:76:69:ad:ef:59:
23:49:e5:51:da:8b:e1:f2:ce:a0:37:b5:69:5c:4a:
0a:da:fe:de:6e:fc:39:7b:84:c1:c9:67:84:5d:19:
c1:61:55:67:bc:c8:1e:08:2e:af:51:c9:11:04:1d:
2b:6e:a8:04:9b:8f:a9:b2:6b:0c:d0:f4:54:3f:98:
99:60:eb:fc:13:b8:81:1c:fe:83:f3:1c:39:fa:a0:
45:62:c7:e6:60:86:d5:c2:b2:48:82:a2:a8:5d:ef:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:40:EE:BD:60:52:DA:38:3F:A4:C6:F6:27:41:2E:74:D2:7D:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zv5A7r1gUto4P6TG9idBLnTSfTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:24:1e:82:ef:64:a3:c5:6e:c4:e8:e5:c4:54:ec:2c:93:ae:
46:3e:bc:c1:5a:6d:75:0b:68:2e:29:d9:1a:dc:24:2c:2a:64:
a3:71:98:bd:b5:19:62:36:e4:f9:c4:89:d7:4e:72:b9:82:67:
8a:24:d8:0c:b3:5f:39:4f:f4:31:30:97:f8:3c:07:ee:b3:5e:
bb:0d:0d:cc:9d:e3:4a:0d:20:51:4e:a3:b8:a9:39:09:e8:a6:
8d:f3:c7:1f:00:1f:74:9c:c5:7f:bf:3c:d9:a1:e7:9a:49:bc:
35:6e:3a:c1:ea:f1:ed:24:54:ea:52:b0:fa:cc:b8:35:e9:38:
07:f5:3b:2a:e8:9b:25:77:e2:7a:29:09:fb:42:d7:24:8a:cd:
81:69:48:67:ff:6a:3b:31:ea:aa:cf:f2:d1:4e:14:94:88:95:
14:95:f5:e8:f7:7b:e5:f3:89:67:3f:c1:39:f6:5e:8c:5c:3f:
c0:08:bc:90:ff:98:06:cf:48:ee:c1:72:fc:3e:ff:1a:ba:4c:
43:df:ff:1f:f4:a5:a8:f5:f6:a0:66:80:46:19:c9:8e:38:ce:
c4:36:5a:e4:76:e8:49:49:b3:9c:b4:bb:35:7d:48:56:8d:df:
4b:1b:f7:35:b7:8f:4c:71:36:f3:18:2b:1e:56:b0:cb:37:1e:
69:1f:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:52:23 2025 by rpki-client