Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CsMMR6jRhC0vQbCnZDsjEzQz23U.roa
File: CsMMR6jRhC0vQbCnZDsjEzQz23U.roa (raw, json)
Hash identifier: QwL95qqWrzrwTOKrU8N9f3S6WS41Q0K3Huax/TA32iQ=
Subject key identifier: 0A:C3:0C:47:A8:D1:84:2D:2F:41:B0:A7:64:3B:23:13:34:33:DB:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CCEAF8486F9C12BF619B9739F9A79A6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CsMMR6jRhC0vQbCnZDsjEzQz23U.roa
Signing time: Sun 06 Aug 2023 22:14:58 +0000
ROA not before: Sun 06 Aug 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:ea:f8:48:6f:9c:12:bf:61:9b:97:39:f9:a7:9a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac30c47a8d1842d2f41b0a7643b23133433db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:a0:6b:a0:5b:de:ef:37:21:08:5e:37:22:
3d:6e:61:30:08:55:48:57:67:f2:1f:38:8e:18:d8:
65:53:1e:4b:a8:9a:00:29:35:cd:cb:06:45:e7:94:
c0:72:5d:3a:95:9f:9e:94:af:db:ba:92:0a:a7:83:
19:d8:f0:69:71:c0:4a:1d:12:f3:62:3c:61:12:be:
73:65:68:2f:64:fc:03:5d:e7:d1:e8:e7:08:dc:e1:
e0:4a:ba:0b:be:bd:2a:3c:a1:03:67:4b:af:c7:51:
e9:77:20:9b:10:e7:1d:7e:7d:c6:22:76:08:a6:23:
d7:ed:58:f7:53:bb:cf:dd:04:50:75:62:cc:bc:21:
c9:78:fb:da:09:ce:f9:74:26:bb:b9:59:e7:09:3c:
0e:70:e2:80:af:b3:51:d4:01:7c:8d:b8:8d:37:a9:
35:49:88:10:0d:95:f9:c1:eb:f3:ee:e8:8a:25:51:
48:fa:59:07:e2:c7:be:90:5d:4c:a6:1e:7e:cb:c1:
65:61:c4:5d:2a:9f:de:17:d1:4d:48:41:f8:f0:cb:
f9:06:c9:c7:33:9d:5f:3c:8a:e6:15:bb:8d:a6:e9:
1d:c3:69:89:a7:e7:a6:20:d7:1c:87:ec:4b:53:af:
1d:b7:1f:c4:d2:4a:d9:e7:f9:6b:e4:55:79:d1:c2:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:0C:47:A8:D1:84:2D:2F:41:B0:A7:64:3B:23:13:34:33:DB:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CsMMR6jRhC0vQbCnZDsjEzQz23U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:f7:52:4d:ee:ed:a8:1f:99:8b:b1:c2:ee:aa:29:a7:61:f9:
88:38:43:7d:7b:2f:d8:f3:49:66:b4:2b:79:f3:d2:f3:62:11:
ef:69:10:60:4a:7d:4c:7b:7b:74:43:b9:03:d6:ea:d9:02:02:
5d:0f:e2:27:f3:a8:54:f2:ba:45:94:40:15:6a:4b:48:d0:1d:
c5:1f:ba:79:0f:40:86:f9:8a:d9:e8:75:fc:37:fd:89:27:cf:
c6:11:1a:4e:d3:b5:93:a3:e8:8d:b2:f2:e8:f8:20:5c:a9:42:
d2:8e:07:3d:72:ee:e4:fd:5a:64:ca:a8:29:96:89:db:3b:c1:
c5:5f:59:b5:f8:f8:e3:a0:70:b7:de:23:39:d1:ca:62:4f:c0:
a0:97:4c:07:1d:fb:2d:5d:2d:77:1d:c0:04:2c:7d:b8:f4:d2:
47:a3:5e:2e:ad:35:81:04:77:98:07:ec:5f:3d:38:7e:57:b6:
cf:46:31:58:5c:18:cd:bf:9b:31:f8:a0:8f:50:2f:b4:d9:45:
34:29:cd:5a:4e:26:69:ab:37:0c:46:ce:6e:b3:d8:bb:b4:e1:
ff:bd:05:21:db:e9:9c:61:cf:1b:b9:88:e9:c8:c5:0b:a0:99:
80:6e:1d:1b:ae:49:81:cb:69:e3:40:9f:28:5d:62:fc:65:94:
ad:d0:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:31:19 2025 by rpki-client