Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Mjwy7JviN5QgWu0ADH5-Nu644s.roa
File: 1Mjwy7JviN5QgWu0ADH5-Nu644s.roa (raw, json)
Hash identifier: HYPsBu9B0EcP5GFeM2cHpWr06K+wXzY96ZqLc9LfO/M=
Subject key identifier: D4:C8:F0:CB:B2:6F:88:DE:50:81:6B:B4:00:31:F9:F8:DB:BA:E3:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882FA1D21413D87644BF4D577871019C22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Mjwy7JviN5QgWu0ADH5-Nu644s.roa
Signing time: Thu 18 May 2023 16:11:54 +0000
ROA not before: Thu 18 May 2023 16:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:a1:d2:14:13:d8:76:44:bf:4d:57:78:71:01:9c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 16:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4c8f0cbb26f88de50816bb40031f9f8dbbae38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:77:fd:a0:ca:fb:6c:54:da:9f:81:8f:33:
a7:a6:c2:e0:34:61:e1:b6:59:13:6c:8f:fa:1f:2b:
1c:00:8b:ae:29:d8:40:6d:98:e7:82:db:b3:04:a1:
5c:b7:29:e1:7a:70:c1:ed:31:ac:1f:b6:c0:a2:da:
35:a2:fa:e3:e3:10:36:c4:31:e8:e1:8d:b6:40:b2:
7f:29:b1:d6:16:a2:dd:df:c8:21:23:d5:8d:0d:a3:
ae:67:4e:05:a4:41:a5:ae:5b:20:c6:20:05:a7:e5:
46:8d:c7:5b:60:65:c9:7d:d8:03:0c:8d:1b:1b:73:
05:de:0b:be:f0:48:70:64:60:43:f6:15:47:14:70:
04:be:3e:06:09:30:6e:32:58:58:73:b8:25:db:f9:
16:d7:9b:92:89:85:d9:b0:f3:a3:84:3a:8e:47:17:
30:d1:6c:6d:bc:f9:36:2a:2c:d1:8f:6e:fc:05:64:
80:7b:80:2d:2e:a8:eb:f5:f1:02:ad:bf:c6:9f:53:
b4:64:ae:2d:a0:1f:0d:19:9e:40:1c:55:65:c4:88:
1e:87:ae:83:53:89:0a:9d:ef:95:fa:98:36:15:b0:
d7:9f:a9:e2:29:39:d5:16:5d:15:40:00:f1:51:30:
f1:b0:bf:7f:3b:b3:f4:c6:f5:cf:54:66:1a:70:a0:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:F0:CB:B2:6F:88:DE:50:81:6B:B4:00:31:F9:F8:DB:BA:E3:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Mjwy7JviN5QgWu0ADH5-Nu644s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:97:7e:be:2f:1f:42:f4:29:d3:ee:55:c3:74:59:d8:61:f4:
11:ff:e3:25:fc:a7:8f:49:13:ed:c5:23:69:87:6a:98:7e:3f:
60:c8:c7:c8:9f:72:86:a6:fb:3b:0d:7c:a1:77:c8:fa:4a:50:
6e:64:e6:6b:34:17:3c:cc:af:21:71:db:aa:7a:b4:88:0b:dc:
0b:fd:76:78:b2:1b:19:b5:c1:c9:90:b0:0a:09:f8:02:4c:d9:
e0:3d:5c:67:a1:b5:80:c1:0a:22:de:44:13:07:fb:64:d6:b0:
84:25:ef:4e:55:86:06:2c:c3:c9:db:70:2e:d8:e5:b6:c1:c7:
74:be:97:90:e4:47:cb:3a:64:61:b0:d2:e4:5a:e7:4e:b0:7e:
a2:32:d3:ab:0c:6e:7f:68:fa:73:0d:ec:35:bf:5c:90:44:4c:
cd:b1:a9:e8:e4:c9:2f:ab:7e:4f:c2:e3:ba:ad:25:97:4b:79:
fd:44:0e:06:03:24:e0:b3:88:d8:6a:4c:40:84:da:f9:44:b4:
95:b0:8f:15:de:76:6c:a8:de:45:2d:d1:13:bb:cb:9e:73:9a:
3a:d5:9f:5b:b2:92:17:4f:8a:10:ec:f0:fb:b3:f9:64:a6:6d:
12:8e:f6:75:f5:c2:d4:38:f9:c9:b8:c7:ee:43:af:cb:ad:25:
0f:2b:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:57:56 2025 by rpki-client