Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M75LLM6dx3HEDkkAB4f5D0tDgQY.roa
File: M75LLM6dx3HEDkkAB4f5D0tDgQY.roa (raw, json)
Hash identifier: cCKdTEt/yh0TYaSL6SFlRhsZ6XNQBmFRRw8rsZbMSrk=
Subject key identifier: 33:BE:4B:2C:CE:9D:C7:71:C4:0E:49:00:07:87:F9:0F:4B:43:81:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881DD0E6A5D8908D2A1C4E6CC9D21B03E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M75LLM6dx3HEDkkAB4f5D0tDgQY.roa
Signing time: Mon 15 May 2023 05:10:09 +0000
ROA not before: Mon 15 May 2023 05:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:d0:e6:a5:d8:90:8d:2a:1c:4e:6c:c9:d2:1b:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 05:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33be4b2cce9dc771c40e49000787f90f4b438106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:9a:40:09:42:16:3f:6b:7b:17:9b:ff:b3:
f1:0d:a5:e0:7a:b3:c2:b6:43:fb:f0:7d:40:19:0d:
d5:88:37:88:01:77:27:cb:9b:bd:97:35:76:8a:ea:
56:4c:e9:ba:4a:f6:67:9a:eb:80:a9:f9:42:bd:00:
a2:93:a3:e8:fa:ac:81:6b:6b:5b:61:71:7e:1e:7b:
a5:af:78:9c:f6:94:f0:e5:62:ba:c9:80:08:ab:32:
4a:c3:d2:f7:e7:d7:54:24:9f:a5:48:71:b5:47:a6:
17:5b:71:d5:3f:4e:76:9e:b1:8b:3f:5b:90:01:ca:
9b:28:56:55:0d:5e:a5:2b:7c:c5:72:3e:92:20:cf:
39:94:81:02:75:b6:56:0b:6c:8f:47:b5:c1:a5:40:
f2:85:44:8e:b1:e5:8b:61:0f:63:77:f4:2d:ae:56:
bb:d6:6c:44:94:26:4a:a5:60:01:7f:50:4b:c7:7d:
dd:0b:00:b3:10:62:89:8c:f2:77:2c:de:b7:31:1e:
0d:e3:f2:dc:f2:d0:56:22:8a:c0:1d:28:20:df:89:
68:3c:cb:a2:6e:ef:32:a7:ea:c2:21:70:73:31:c7:
a4:54:4d:6f:52:e9:c6:97:b7:ec:9a:0b:92:e1:46:
bc:40:e9:48:85:e6:3e:86:86:e9:28:43:64:57:4d:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:4B:2C:CE:9D:C7:71:C4:0E:49:00:07:87:F9:0F:4B:43:81:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M75LLM6dx3HEDkkAB4f5D0tDgQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:68:80:14:ae:f7:27:55:7d:b4:4f:99:58:a6:33:c7:24:2c:
ce:ad:fc:74:a1:ac:99:9b:6e:83:03:f3:7a:fe:1f:c8:68:72:
dd:f8:0c:94:9d:4c:78:cc:a1:c3:57:95:97:ba:06:79:d8:1b:
ba:18:af:22:d7:f2:08:73:d4:73:33:3b:ac:db:cf:35:ed:4b:
cc:0e:5f:47:75:77:bf:a4:94:be:a5:0b:47:73:67:1d:6a:45:
d1:d9:a0:17:6b:4b:cb:5e:3e:f0:ab:3d:bb:9f:ad:cc:f4:42:
0f:69:0b:63:07:79:ff:ba:f6:e0:45:21:6c:be:8f:9d:10:8c:
56:d2:99:9d:86:91:05:08:11:39:2b:4e:d9:e7:cf:f9:6d:6c:
45:0a:25:72:d7:fd:9c:c3:ae:ad:e3:23:96:20:80:dd:ca:50:
ed:d0:17:97:20:84:a6:79:a9:0e:51:aa:ce:6c:26:bf:ec:c1:
e6:2f:f6:01:61:b7:b6:d5:e2:51:3d:8f:eb:84:60:67:d1:3c:
e7:37:20:1e:94:73:c2:a3:39:77:5a:78:57:d5:b7:58:d3:cf:
e3:5c:5b:c4:56:68:08:97:54:77:f6:ee:2e:f6:fe:5f:47:59:
17:ad:8c:33:88:96:71:f0:a7:d1:55:92:3e:a5:0a:70:bd:3d:
18:95:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:13:40 2025 by rpki-client