Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0hhR-oQm2UkXwJNOj71Gll1vMI.roa
File: M0hhR-oQm2UkXwJNOj71Gll1vMI.roa (raw, json)
Hash identifier: G4XpxJi7pPsVcoxz1isMscANeAa1TTHh7i7g/xxrf90=
Subject key identifier: 33:48:61:47:EA:10:9B:65:24:5F:02:4D:3A:3E:F5:1A:59:75:BC:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889E8FEB3E284C64C38E0B42ED2020161A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0hhR-oQm2UkXwJNOj71Gll1vMI.roa
Signing time: Fri 09 Jun 2023 05:10:11 +0000
ROA not before: Fri 09 Jun 2023 05:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:8f:eb:3e:28:4c:64:c3:8e:0b:42:ed:20:20:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 05:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33486147ea109b65245f024d3a3ef51a5975bcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:b9:6f:19:a8:8e:48:6a:2c:56:fe:18:88:
58:05:db:fd:64:11:e8:3e:84:51:3d:56:1e:24:a8:
17:49:47:10:63:91:27:88:0a:60:87:76:8e:77:b1:
51:fa:f5:12:54:50:39:b7:07:8b:89:9c:3d:ac:f6:
e2:db:73:63:5e:f3:e8:45:57:2c:32:b5:2c:5a:f9:
15:44:c4:93:bd:0d:fd:ce:94:ed:1e:cf:11:65:d3:
fd:b1:b9:df:76:76:cc:20:9c:79:98:45:41:fe:87:
15:5d:55:25:fa:5c:08:82:5e:63:85:17:33:ef:5b:
c0:79:b0:9d:4e:dd:d6:cf:af:30:4d:ea:3c:fd:dc:
c1:06:9b:86:01:1f:8c:c1:3f:a0:d1:40:7e:74:70:
9c:97:85:ab:5e:6a:92:f5:93:7d:78:bd:59:50:c6:
33:10:a1:d0:b5:d3:34:44:ef:37:32:b9:a3:c0:9d:
d7:ff:64:4d:3e:21:69:de:f5:5e:d8:dc:c8:66:36:
99:94:60:95:5d:22:87:77:18:ce:5d:96:df:b8:92:
dd:1e:6e:1c:14:3c:4c:07:33:ad:74:71:7c:82:32:
d2:b5:88:59:1d:39:8d:44:52:18:ec:e4:45:e4:a3:
29:57:c4:f5:5b:b1:1c:99:bf:4e:36:d8:4b:b0:aa:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:61:47:EA:10:9B:65:24:5F:02:4D:3A:3E:F5:1A:59:75:BC:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M0hhR-oQm2UkXwJNOj71Gll1vMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:6f:df:3e:b9:ad:09:ef:1f:5b:81:16:f8:a1:4e:27:47:09:
9e:f0:4a:8c:69:c2:1a:80:85:6d:9f:d3:21:69:2f:6c:97:ab:
ea:6a:fd:5b:4a:ef:b7:1e:a0:53:ff:98:e7:f2:8c:32:8a:20:
e6:e3:63:71:2b:77:38:ca:c5:d4:43:e8:3b:73:51:02:1f:98:
08:6a:a5:c8:4f:7a:7a:b2:9d:d8:2e:b2:a8:9e:1b:20:20:32:
c1:00:cb:ba:6f:99:6b:c2:f3:0b:63:4b:28:52:c1:4a:98:0e:
5b:ff:92:30:b5:a4:dc:00:6f:8b:09:56:94:52:a3:32:b5:b3:
7e:e1:03:d8:39:ff:bc:ac:5f:e1:0c:f3:92:40:56:34:1c:f7:
f2:3d:d3:2d:7f:30:4c:73:d0:bc:42:ff:33:96:ed:c6:d6:e3:
bb:fa:3d:83:2d:38:94:ca:2b:a6:00:30:24:59:60:e5:6f:93:
cd:b5:f1:17:a9:bb:61:d1:b1:86:41:e6:07:04:3d:43:66:6b:
ce:02:6a:63:ae:fe:b2:df:38:7e:5d:a8:47:04:cd:9d:56:b1:
0e:4f:39:38:01:7d:12:8e:51:9b:78:6a:57:e7:7c:21:14:6b:
6a:e8:d2:ed:5c:c9:7d:2c:59:ea:78:38:46:52:b2:d0:46:e7:
4f:35:08:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:23 2025 by rpki-client