Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M66ooT0CAZ4vitjQdQpArtg44bE.roa
File: M66ooT0CAZ4vitjQdQpArtg44bE.roa (raw, json)
Hash identifier: 8G6hILxSPEafmzuNpHtoY1w7AuOC76X3rLlqgZnPkwE=
Subject key identifier: 33:AE:A8:A1:3D:02:01:9E:2F:8A:D8:D0:75:0A:40:AE:D8:38:E1:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018856AE30C5B068F956B53C62002ED1BDCA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M66ooT0CAZ4vitjQdQpArtg44bE.roa
Signing time: Fri 26 May 2023 06:10:36 +0000
ROA not before: Fri 26 May 2023 06:10:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:ae:30:c5:b0:68:f9:56:b5:3c:62:00:2e:d1:bd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 06:10:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33aea8a13d02019e2f8ad8d0750a40aed838e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:3a:57:63:b0:b0:c7:af:97:89:53:5a:10:
9e:42:2a:9b:8b:da:c4:29:c5:b2:98:80:34:67:dc:
83:de:53:86:71:34:bd:65:d2:05:b5:d9:b4:fc:79:
01:9d:8e:ca:9d:e0:5c:4e:fe:79:5c:26:ff:6d:01:
e2:8c:3a:de:91:a8:6c:0a:16:a4:ec:9b:28:45:55:
b1:a4:5a:b0:8c:7a:6b:88:fc:45:ab:5e:16:20:f0:
37:3d:28:d2:4e:95:2d:1f:76:48:0c:9c:37:24:24:
02:5d:e3:bd:0d:e4:3c:4d:46:25:d2:da:3c:3c:36:
1e:5c:f3:fa:83:c9:0f:1b:fb:5a:f7:27:3e:cb:03:
7a:67:fc:b0:80:af:54:2a:11:0e:8c:ba:fc:81:7f:
31:95:f4:43:95:43:63:7c:74:91:f0:e5:12:67:ad:
59:41:af:7c:f1:13:56:e1:64:39:1b:36:e7:2c:8a:
2c:5f:63:1b:0f:18:9b:f6:eb:c5:4f:47:4e:68:70:
25:d7:20:39:93:f8:17:ba:76:57:fd:71:66:34:1e:
93:ee:e1:c7:f0:00:91:ad:4e:85:be:44:f3:7f:fc:
a7:e6:25:36:d6:c9:18:fa:fe:3d:74:62:64:93:0a:
b7:2b:3f:b0:31:0a:5a:dd:28:29:bf:ad:f3:a1:54:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:A8:A1:3D:02:01:9E:2F:8A:D8:D0:75:0A:40:AE:D8:38:E1:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M66ooT0CAZ4vitjQdQpArtg44bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:41:ac:a1:e1:d7:ae:fe:6e:4b:1b:c3:7f:ca:db:7c:92:06:
17:c1:fe:f2:08:67:91:c7:a4:3f:20:86:67:cb:ce:95:1c:31:
80:88:4a:73:25:6b:41:1a:6e:06:b5:9c:9b:2f:d7:b7:52:d0:
d3:ff:d6:7a:41:67:44:c7:29:ba:40:0a:cd:6b:2c:2d:c9:9c:
d2:06:c4:58:1a:33:32:f3:71:dd:be:27:76:88:25:8c:2e:8b:
9c:2c:2c:55:de:3c:25:a0:82:00:f6:85:24:b0:31:d8:07:59:
52:71:38:b4:ff:ce:1c:97:3b:f1:8d:2c:54:81:61:f7:75:4d:
a0:df:b4:f4:b7:87:eb:e7:54:5e:e9:a2:18:37:e6:fd:a3:3e:
82:73:cb:f6:79:a0:92:9c:b0:08:f6:a0:a7:83:46:a5:d4:5d:
22:36:04:3d:9b:7f:17:a4:87:bb:3d:42:69:01:1b:b1:58:00:
ba:37:60:e5:93:e2:fc:6e:d2:fc:3f:a0:a5:42:20:5a:d4:fd:
1b:aa:15:4b:2f:f0:f9:6c:20:b0:66:9b:2f:ec:b0:e8:28:dd:
3e:77:27:cc:b0:cb:a1:8d:5c:a2:6c:09:aa:73:80:38:f4:d6:
aa:56:64:a4:00:eb:c0:30:fd:59:13:7a:fb:a9:e3:9c:f2:8a:
06:92:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:17 2025 by rpki-client