Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1JXFsdnhCx4fW_7W90GiE-GWL0.roa
File: M1JXFsdnhCx4fW_7W90GiE-GWL0.roa (raw, json)
Hash identifier: pNw5vJHse4B+5YeAXsfSAvNbAoLwkAjVCPqecxO/OqY=
Subject key identifier: 33:52:57:16:C7:67:84:2C:78:7D:6F:FB:5B:DD:06:88:4F:86:58:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018841339CA39F1B275B97950005DE005AA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1JXFsdnhCx4fW_7W90GiE-GWL0.roa
Signing time: Mon 22 May 2023 02:04:41 +0000
ROA not before: Mon 22 May 2023 02:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:4133:64a4/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:41:33:9c:a3:9f:1b:27:5b:97:95:00:05:de:00:5a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 02:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33525716c767842c787d6ffb5bdd06884f8658bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:23:85:ce:95:ef:cb:88:9d:25:b7:f9:96:
f8:fe:c3:95:ad:d4:97:20:c5:bf:8a:19:0b:ba:8a:
25:7a:a1:83:d5:6a:8a:f1:84:47:b1:86:ec:99:43:
4e:ff:9c:3a:73:3e:6b:4e:74:12:ff:d6:33:00:80:
21:bc:39:39:b6:ef:f2:bf:ad:94:4e:e2:55:53:bd:
1a:bc:6b:08:a2:16:f4:c2:dd:42:24:ce:14:fb:3b:
00:8f:ff:12:3c:c4:54:4b:3b:06:6b:22:cc:bb:de:
5f:a7:aa:ea:ab:45:3b:ce:3b:80:30:a9:aa:31:dc:
9c:fd:5e:4d:3d:92:43:e4:06:37:0a:d1:6a:fd:0f:
47:45:62:90:e3:ba:fe:ea:32:65:e6:7e:7f:7b:9d:
76:66:f6:3d:24:cb:79:81:83:bd:53:5b:da:47:64:
c0:d8:cd:be:6f:c4:4b:ef:15:00:8d:98:3e:41:af:
25:18:37:cf:df:2e:35:d5:3f:9f:a6:9f:0e:e5:1a:
c7:17:34:d4:9a:72:3f:d4:b5:89:cd:a7:b8:50:40:
fa:85:a9:a9:e3:44:ee:58:1b:58:cf:96:72:c2:f1:
78:fc:4a:da:be:29:80:8c:54:c3:db:98:e8:88:44:
17:2d:0c:66:e3:6b:f9:a7:c4:5b:61:67:1c:e6:99:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:57:16:C7:67:84:2C:78:7D:6F:FB:5B:DD:06:88:4F:86:58:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1JXFsdnhCx4fW_7W90GiE-GWL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:58:b4:6e:a6:f7:29:37:bb:0d:aa:b6:af:1c:bf:c7:ed:50:
9f:b2:6d:f4:46:23:1c:23:1b:c4:cc:6d:6c:5b:df:7d:45:87:
25:15:17:d7:a3:98:a1:c8:30:a1:50:9d:f3:59:7a:43:1a:25:
17:34:26:af:08:e6:79:43:d4:e8:e0:b1:aa:31:8c:9c:4d:73:
41:e4:0b:b8:39:9d:ec:05:f4:52:a0:ed:a6:6e:67:e7:bf:77:
e2:8e:34:77:68:cd:93:cf:de:13:24:c7:78:13:c2:2e:ee:48:
9c:15:17:0e:35:e4:e7:4e:f3:73:fc:ee:42:ac:ad:91:48:6d:
0a:bd:9b:80:ae:aa:7e:22:54:96:32:24:d5:ab:90:14:a5:6f:
94:bf:f7:09:b9:b6:71:ac:76:aa:85:b0:c4:e0:74:30:56:29:
64:a0:3d:64:eb:75:58:6c:5e:1c:32:d0:99:ee:ec:ad:e0:91:
31:88:1d:83:ca:4e:ca:23:68:d1:b4:42:b4:d7:b3:02:e5:83:
ed:6d:42:b7:7d:31:a9:87:c0:89:ef:c2:be:06:57:df:24:2a:
4e:d5:02:cd:17:f6:40:ff:58:a9:11:17:8b:3d:81:47:21:3c:
1b:c5:43:30:0a:68:78:ff:36:df:9c:0e:e6:fe:7f:fc:18:87:
b2:df:c4:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhBM5yjnxsnW5eVAAXeAFqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIyMDIwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzUyNTcxNmM3Njc4NDJjNzg3ZDZmZmI1YmRkMDY4ODRmODY1OGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vEjhc6V78uInSW3+Zb4/sOVrdSX
IMW/ihkLuooleqGD1WqK8YRHsYbsmUNO/5w6cz5rTnQS/9YzAIAhvDk5tu/yv62U
TuJVU70avGsIohb0wt1CJM4U+zsAj/8SPMRUSzsGayLMu95fp6rqq0U7zjuAMKmq
Mdyc/V5NPZJD5AY3CtFq/Q9HRWKQ47r+6jJl5n5/e512ZvY9JMt5gYO9U1vaR2TA
2M2+b8RL7xUAjZg+Qa8lGDfP3y411T+fpp8O5RrHFzTUmnI/1LWJzae4UED6hamp
40TuWBtYz5ZywvF4/EravimAjFTD25joiEQXLQxm42v5p8RbYWcc5plsvQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDNSVxbHZ4QseH1v+1vdBohPhli9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTTFKWEZzZG5oQ3g0ZldfN1c5MEdpRS1HV0wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD9YtG6m9yk3uw2qtq8c
v8ftUJ+ybfRGIxwjG8TMbWxb331FhyUVF9ejmKHIMKFQnfNZekMaJRc0Jq8I5nlD
1OjgsaoxjJxNc0HkC7g5newF9FKg7aZuZ+e/d+KONHdozZPP3hMkx3gTwi7uSJwV
Fw415OdO83P87kKsrZFIbQq9m4Cuqn4iVJYyJNWrkBSlb5S/9wm5tnGsdqqFsMTg
dDBWKWSgPWTrdVhsXhwy0Jnu7K3gkTGIHYPKTsojaNG0QrTXswLlg+1tQrd9MamH
wInvwr4GV98kKk7VAs0X9kD/WKkRF4s9gUchPBvFQzAKaHj/Nt+cDub+f/wYh7Lf
xG4=
-----END CERTIFICATE-----
Generated at Fri May 2 02:05:17 2025 by rpki-client