Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M25a9OzXx3wNyRL4ZgGZcjMa6oA.roa
File: M25a9OzXx3wNyRL4ZgGZcjMa6oA.roa (raw, json)
Hash identifier: PAYFI4O2sZU8nn1+K/NB9BSWMt3IXQePuBacyIj2s60=
Subject key identifier: 33:6E:5A:F4:EC:D7:C7:7C:0D:C9:12:F8:66:01:99:72:33:1A:EA:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184436F7C7D51537CBA1C429A40527E6F69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M25a9OzXx3wNyRL4ZgGZcjMa6oA.roa
Signing time: Fri 04 Nov 2022 16:18:10 +0000
ROA not before: Fri 04 Nov 2022 16:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:6f:7c:7d:51:53:7c:ba:1c:42:9a:40:52:7e:6f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 16:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=336e5af4ecd7c77c0dc912f866019972331aea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:89:2a:d2:55:15:d9:c7:5d:2d:43:21:07:
2b:5b:9d:d0:87:d7:88:90:5f:06:0b:d7:1c:f8:d2:
ef:73:c0:9e:4a:a5:20:14:e4:27:b1:d9:4b:d4:a2:
55:b1:db:6a:93:0d:9a:6a:b6:d8:f9:0c:7d:5e:71:
68:8e:cb:45:88:89:e7:5e:ea:bc:81:ef:0a:e1:cd:
b1:8f:26:02:e8:c0:41:78:ac:7d:59:78:61:b6:6e:
08:e2:54:8c:38:13:64:1a:fe:a7:30:c4:f4:ab:f7:
4b:15:a0:4e:5a:99:cf:d4:ca:53:90:90:88:cd:1d:
f6:fd:e1:ce:fb:f5:fc:42:c1:08:5e:14:87:c8:e6:
35:6c:46:23:4d:1b:ff:78:e5:fc:5f:44:eb:f5:de:
cd:c3:3a:96:eb:cf:e6:2e:9b:f3:43:ed:9c:d0:c5:
ba:36:c0:d7:8e:a3:ea:47:45:c2:c7:77:05:8a:24:
fe:4d:a1:c7:9d:cc:56:1f:c0:ee:92:15:5f:17:f1:
d3:b4:95:c8:51:9d:d7:d6:de:e5:b0:bd:69:21:2b:
eb:4f:23:33:8c:37:c6:7b:27:2d:33:e5:2b:13:26:
06:a2:48:46:a7:42:5f:67:17:f7:c5:82:9c:e9:c6:
e8:0e:3f:84:23:33:82:2e:87:24:eb:53:94:fe:2a:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:5A:F4:EC:D7:C7:7C:0D:C9:12:F8:66:01:99:72:33:1A:EA:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M25a9OzXx3wNyRL4ZgGZcjMa6oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:25:e2:31:b9:33:39:57:f9:76:3b:96:e2:cf:b1:1c:fd:09:
86:48:69:46:40:06:2d:d6:fb:a3:6c:25:54:f0:cb:ce:65:63:
e3:4f:f7:4b:80:ca:65:7a:ae:59:1f:03:f1:45:50:9d:3a:a8:
96:76:0e:a8:a6:c5:d0:e4:52:7f:80:b0:49:ce:ee:0b:1c:ad:
4a:54:62:7d:70:7d:17:8d:9c:1b:81:b1:72:d5:4a:71:f2:10:
35:c2:cf:ef:95:e2:00:ec:ef:67:d8:09:3d:9d:8e:f5:17:98:
31:47:24:94:10:9c:0c:90:f0:a3:98:59:4f:86:e3:94:de:a0:
63:a8:7a:88:82:e0:72:45:4b:74:0c:9e:27:7b:0a:70:72:a2:
49:2e:05:f2:3a:c6:31:62:db:f9:97:4f:66:83:99:a8:3c:84:
a1:6b:2e:9e:97:d4:9c:6c:ec:95:77:2b:1b:82:71:70:ed:d5:
63:a3:16:64:4b:9a:ba:b0:c7:2b:a3:79:8f:19:e9:9d:0e:5a:
c5:7d:9c:38:55:90:9f:78:0c:55:50:6e:03:1e:7e:54:6e:b4:
e3:4e:a9:98:78:a8:8b:79:05:9a:4c:b9:42:f5:f0:71:cd:2b:
b6:42:01:4c:df:56:07:61:00:12:23:c4:8a:b0:62:d0:5e:3a:
d3:fb:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:23:53 2025 by rpki-client