Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M2fg0SWOgswfvifP0lNkk9AI7O4.roa
File: M2fg0SWOgswfvifP0lNkk9AI7O4.roa (raw, json)
Hash identifier: npGbUJJEHBjidsx6gZPXa893rWGGT+VoTSmOYWrLoII=
Subject key identifier: 33:67:E0:D1:25:8E:82:CC:1F:BE:27:CF:D2:53:64:93:D0:08:EC:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189714704B4D206A67FAA2707D670371083
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M2fg0SWOgswfvifP0lNkk9AI7O4.roa
Signing time: Thu 20 Jul 2023 03:10:26 +0000
ROA not before: Thu 20 Jul 2023 03:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:47:04:b4:d2:06:a6:7f:aa:27:07:d6:70:37:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 03:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3367e0d1258e82cc1fbe27cfd2536493d008ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:cf:38:29:ae:42:19:02:51:01:68:2c:33:
95:1c:7d:20:32:3a:5a:10:c6:17:10:61:f8:a0:e5:
5a:98:ba:a5:fa:d2:f6:31:6b:b0:62:2f:12:fa:9b:
51:de:45:d4:17:38:de:15:7e:cf:da:ac:20:62:44:
2a:2c:e4:23:5e:4b:f4:c9:f7:77:66:de:b5:af:ed:
74:e8:f9:db:cb:03:9f:ae:a7:d1:29:fa:53:76:45:
80:a7:90:6b:18:b8:23:54:a4:64:42:18:c5:93:6d:
b0:38:5b:fc:71:44:f8:7b:c3:6d:33:8f:44:67:6b:
f3:30:b5:54:1e:ad:58:d0:3f:b7:0c:0e:14:e5:25:
16:5c:90:af:2f:c9:84:d6:ee:c3:87:33:d2:0c:21:
7b:56:95:1f:b5:5a:50:99:8d:92:74:0a:5b:79:0b:
ca:61:43:9d:7d:3e:85:68:8e:59:2f:ad:02:76:fd:
db:14:5d:76:82:9e:7c:53:dd:20:dd:ee:39:a6:fb:
88:5e:b6:e4:9a:72:72:f2:97:6a:9d:9b:61:cf:8b:
7b:a8:ac:1e:70:94:84:c8:90:89:e4:ae:a7:fc:82:
46:9d:64:62:03:da:3f:91:68:b0:ca:01:88:be:ac:
63:43:a2:4a:02:ef:31:f7:53:44:1f:4b:4f:4c:3f:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:67:E0:D1:25:8E:82:CC:1F:BE:27:CF:D2:53:64:93:D0:08:EC:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M2fg0SWOgswfvifP0lNkk9AI7O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:2d:8b:55:38:ef:dd:60:64:a9:42:eb:94:55:ce:6b:1f:a4:
11:49:14:6e:8b:8a:9b:c5:21:88:75:da:3d:79:63:25:b7:e8:
8a:03:56:fc:9c:2f:fd:28:6a:39:33:70:4d:8c:4b:41:6f:b4:
a4:88:c4:8e:a4:86:9d:56:59:1a:5a:bc:ae:21:61:42:ac:d7:
3c:e1:ee:dc:75:c3:97:ad:a3:db:67:22:68:8b:17:3f:33:8d:
05:1a:c9:96:d0:31:60:3f:cb:05:7f:97:5f:74:78:8d:da:4b:
4b:5d:24:4b:36:25:4f:1f:e2:0d:56:cf:4c:bc:27:6d:a9:d7:
7e:9d:51:3d:52:6b:34:43:89:e3:15:ec:8a:56:ae:4b:9f:0b:
71:e2:72:4d:79:ee:5b:a9:fa:5c:f1:cd:9c:d9:a1:fe:fe:1d:
b6:ea:16:45:83:99:60:39:9f:7f:9b:b4:e0:0e:ec:58:7c:d2:
a1:e5:92:bb:64:4b:18:bb:4b:e3:6c:c5:af:a5:1c:f3:2b:13:
0a:f0:57:d4:32:6d:e6:75:f6:c9:55:10:8c:29:c5:ad:af:4f:
e6:f4:f6:3c:c8:aa:2e:ea:21:70:0c:23:30:2e:24:2d:45:0d:
b6:2f:e0:72:70:77:d2:52:ee:ae:06:5e:b5:7e:8d:37:48:08:
74:fa:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:57:25 2025 by rpki-client