Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0-92m18n4fYSArGgrTFVpJVZ_s.roa
File: M0-92m18n4fYSArGgrTFVpJVZ_s.roa (raw, json)
Hash identifier: 7fwODgnx7dww8qmQkLOu3qmcupjnuLgVM3PF7jKxyCA=
Subject key identifier: 33:4F:BD:DA:6D:7C:9F:87:D8:48:0A:C6:82:B4:C5:56:92:55:67:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FDA6B8917C8B8BD8C83070B67679076B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0-92m18n4fYSArGgrTFVpJVZ_s.roa
Signing time: Mon 20 Mar 2023 06:13:27 +0000
ROA not before: Mon 20 Mar 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:a6:b8:91:7c:8b:8b:d8:c8:30:70:b6:76:79:07:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=334fbdda6d7c9f87d8480ac682b4c556925567fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:f3:24:48:dc:6d:58:c4:02:3e:71:1f:f4:
a8:42:c5:d5:ae:83:f2:4f:3f:9e:1e:a2:c4:78:34:
a8:34:47:3d:dc:36:1b:66:2f:39:ee:15:89:58:13:
3b:ee:e6:6a:bd:7a:69:d8:b0:1c:30:e1:23:1c:3a:
4c:a3:4f:63:3f:40:59:13:14:5f:9f:3c:db:04:18:
3b:8e:48:04:12:a2:d0:d5:af:c8:83:7a:bb:e7:6f:
d5:37:ae:b6:d4:5a:be:a2:67:94:dc:bd:d1:88:e1:
66:c9:d5:8e:cf:fc:fa:d5:da:69:62:a9:43:a5:78:
90:df:fd:0a:01:88:92:6b:6d:4a:8d:a9:6f:2f:19:
80:b1:1f:bd:db:cf:27:04:56:d2:60:6f:66:a1:86:
1e:34:41:7f:a6:eb:db:b5:08:f3:24:10:e5:de:94:
be:84:96:18:0e:76:0c:ab:7a:1a:92:08:84:5d:14:
0b:a2:64:e9:f8:9d:54:30:59:09:c8:a4:d6:48:44:
e9:3c:d2:6a:8a:dc:c1:fd:f4:ad:e5:a9:4b:47:ee:
32:2b:33:c0:35:c4:b5:6a:32:f7:05:dd:67:fe:ca:
47:77:b7:aa:6c:ff:8f:ac:89:05:53:a6:1a:04:dc:
f5:e2:92:88:99:fe:dd:14:60:6f:54:e7:6a:5a:c8:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:BD:DA:6D:7C:9F:87:D8:48:0A:C6:82:B4:C5:56:92:55:67:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0-92m18n4fYSArGgrTFVpJVZ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:98:e6:43:58:e4:ba:9f:2e:63:62:2b:85:50:2a:97:f2:fa:
ca:88:10:28:61:74:b1:79:9c:31:e1:55:35:7b:bb:f7:40:25:
1e:c6:a1:1e:75:9f:e2:6a:30:d0:18:49:4a:e7:5f:ba:f9:8b:
b6:9a:cf:f6:41:7d:25:15:32:39:f0:28:e6:7e:37:7b:35:ab:
ea:84:60:a6:c7:be:22:80:a2:02:02:43:6d:c1:72:5e:23:c6:
b0:c4:a3:e1:0c:36:54:31:ed:1f:1e:c1:83:cf:b3:a5:36:6a:
0f:37:f6:d6:ef:df:22:f7:b7:c1:dc:a5:09:72:bf:77:af:66:
ed:c3:c6:72:64:10:a8:80:18:7e:0a:a5:01:1c:ac:e2:99:db:
70:53:6a:00:8e:3f:6c:f2:c1:1f:b7:cc:f7:ba:e8:52:a3:51:
94:3e:9a:ff:9f:27:1d:ed:09:ec:55:61:4a:eb:3b:69:38:c6:
1d:d6:8c:ee:12:24:c0:11:a9:75:af:5e:3d:39:7a:3e:2a:e5:
3a:1f:80:30:e0:83:fe:f5:ff:f0:77:5a:be:b2:e4:b1:a2:53:
bf:3a:94:91:d3:2e:53:bc:0d:3e:66:f7:94:ae:b6:2d:93:95:
31:6e:c5:68:6a:f2:9e:34:43:e3:76:34:0f:1c:26:81:ae:8a:
fa:30:56:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:22 2025 by rpki-client