Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0F0fMp6tI-ooSlWm0T5Y5XLNw0.roa
File: M0F0fMp6tI-ooSlWm0T5Y5XLNw0.roa (raw, json)
Hash identifier: 3t0zjZ643XrF5FRH7lLFKzrn9K9nGnNxWo7UIRPXDK8=
Subject key identifier: 33:41:74:7C:CA:7A:B4:8F:A8:A1:29:56:9B:44:F9:63:95:CB:37:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018779E0B193BC0758E5A33D662D5EF679A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0F0fMp6tI-ooSlWm0T5Y5XLNw0.roa
Signing time: Thu 13 Apr 2023 09:09:41 +0000
ROA not before: Thu 13 Apr 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e0:b1:93:bc:07:58:e5:a3:3d:66:2d:5e:f6:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3341747cca7ab48fa8a129569b44f96395cb370d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:eb:8a:52:f2:ad:12:07:c5:23:e8:2b:00:
5d:57:c4:64:d9:49:51:21:bd:42:92:2d:04:b6:d2:
37:06:bb:89:e6:2b:bb:a0:16:b6:1b:ba:d7:b7:e0:
fc:9f:50:44:5b:e1:df:3b:e9:14:bb:09:9a:c7:9c:
5e:7b:24:db:51:25:5f:09:a4:7b:88:ac:13:f5:16:
b2:3b:42:d3:81:67:09:1d:90:53:da:eb:15:c3:db:
77:de:82:1b:f9:fc:2e:2e:2f:95:7a:23:e6:f1:a5:
13:ac:8d:79:3c:44:dd:6c:09:16:e8:23:a2:e9:a7:
a1:fa:e7:4c:80:d3:a7:be:d1:71:b7:a5:9f:97:87:
89:2a:eb:c6:d8:45:bf:10:ae:00:30:13:bf:ff:89:
f3:0c:46:c4:d2:f1:cd:1f:b7:44:bd:0c:a4:63:90:
fd:bf:9d:32:01:ea:5b:66:25:e1:32:91:95:e6:e9:
b3:e3:5b:f0:db:ab:f1:9f:b9:47:9c:dd:ae:6f:86:
a8:05:2b:e7:54:dc:0b:cb:83:1c:55:b9:8a:82:f3:
33:76:4a:3e:28:15:ff:53:1d:34:5c:f0:16:a5:3d:
61:22:a1:0b:52:7a:7e:fd:51:80:6b:a1:ec:72:bc:
f0:7f:46:33:fe:60:87:63:5e:69:b0:84:7e:b0:50:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:74:7C:CA:7A:B4:8F:A8:A1:29:56:9B:44:F9:63:95:CB:37:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0F0fMp6tI-ooSlWm0T5Y5XLNw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:08:3f:47:3f:55:25:34:3d:51:58:db:b1:2d:da:95:8f:1d:
65:2b:11:87:62:9a:be:b8:21:54:53:d2:2e:23:92:a5:a7:17:
a2:e6:d8:fe:c5:91:89:ab:1b:8d:cc:36:40:d4:36:a9:e4:54:
b1:c8:88:e7:6f:68:5b:3a:46:4d:0a:dd:71:15:5f:41:69:e8:
5b:99:ce:09:c8:f4:6a:98:8b:93:25:2f:7f:da:d2:1e:4b:42:
50:68:03:53:b0:f6:9d:91:a4:0c:8f:18:28:a9:38:d6:fc:76:
a8:f6:5c:f2:a4:e6:7e:4d:47:3d:9e:8d:44:14:1d:6f:12:99:
28:1f:1f:94:c1:76:87:1c:87:f9:09:03:9f:85:4a:d8:18:6d:
58:49:fa:f2:e9:38:90:1b:6f:ce:eb:71:9d:46:34:98:41:f9:
cc:68:b9:01:a5:90:b8:db:f1:46:28:52:71:2a:32:bd:9f:68:
93:8f:28:58:87:8a:c3:32:72:89:ba:cd:87:55:83:28:9d:58:
ba:b4:e9:8b:60:42:81:12:80:5e:28:43:af:de:f2:72:71:d2:
ff:b7:73:8f:ba:6d:58:5b:95:30:84:90:59:67:70:d5:46:3f:
fa:0f:e4:64:23:4f:10:bd:2a:f7:d7:71:22:64:8b:2a:22:41:
a7:5e:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:48 2025 by rpki-client