Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8n2Ynip4hE39P-gI_1MxgrUo5U.roa
File: M8n2Ynip4hE39P-gI_1MxgrUo5U.roa (raw, json)
Hash identifier: oNMvDFwVT2IoZCbFglq44hm+8zp0UqNgB1eUG6w34sk=
Subject key identifier: 33:C9:F6:62:78:A9:E2:11:37:F4:FF:A0:23:FD:4C:C6:0A:D4:A3:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68BBEFDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8n2Ynip4hE39P-gI_1MxgrUo5U.roa
Signing time: Mon 07 Feb 2022 15:09:22 +0000
ROA not before: Mon 07 Feb 2022 15:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757147100 (0x68bbefdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 15:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33c9f66278a9e21137f4ffa023fd4cc60ad4a395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:d0:c3:d7:f4:79:7a:79:e6:6b:03:27:ab:
cb:31:29:58:76:f8:78:32:cf:cb:4a:25:ce:72:ba:
27:72:85:0d:be:ab:f1:8a:94:a4:59:27:20:f6:24:
b6:9d:0c:a0:27:c4:8c:d7:db:36:4b:12:1a:05:39:
c2:53:ed:9b:a3:fb:ca:ab:43:4f:b8:d3:91:69:b6:
94:9c:ee:d0:d5:a9:64:2c:3a:67:6f:da:00:a2:aa:
78:25:44:6b:26:fb:cf:a3:12:8f:14:6d:3e:6e:37:
3a:7c:0d:90:49:a7:fe:b0:0b:b6:51:cb:3a:75:5b:
6a:a7:36:e2:f8:bd:ca:b6:3c:c4:67:4e:7d:1e:62:
9f:78:6f:64:36:cc:76:6a:d5:f5:8f:d1:f0:d3:88:
49:cf:57:8f:85:f7:14:9f:f8:27:b9:27:ff:89:43:
9f:17:4e:24:35:bb:92:91:1b:01:90:65:bc:3c:78:
1c:d4:7e:e6:bb:5e:fe:38:d0:bf:b7:4c:5d:61:92:
64:77:0a:3c:90:1a:24:8f:f9:17:67:be:77:9a:f1:
20:ca:37:d2:8c:35:be:75:e0:ff:c7:1c:31:32:92:
e5:45:6e:47:d1:ff:c4:e2:00:52:7b:a2:98:4a:f1:
73:93:ad:d9:dc:55:55:19:73:0b:c9:c9:0b:fc:c2:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:F6:62:78:A9:E2:11:37:F4:FF:A0:23:FD:4C:C6:0A:D4:A3:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8n2Ynip4hE39P-gI_1MxgrUo5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:ca:1c:2c:71:eb:56:ab:8f:38:07:ba:48:9a:bd:92:b2:89:
b5:d6:7f:39:39:94:f9:2e:16:3b:93:15:85:a1:10:03:6e:ed:
4e:c1:f3:e2:68:a7:da:63:ab:68:57:ee:f7:c8:0b:26:b8:d1:
ff:2b:78:5c:f7:60:bc:8b:e7:4a:5c:ec:ae:67:24:0b:bc:75:
b7:27:47:f0:33:d9:7a:62:49:d4:36:e1:5c:95:cf:de:73:9f:
a8:42:31:5f:33:07:de:69:c0:4f:c4:15:c0:ba:da:52:3d:9c:
62:65:26:3f:84:da:e1:89:e1:18:1f:32:10:32:5a:33:bc:42:
8d:f0:3c:b0:f4:2c:4f:46:ac:b9:bd:82:3b:2b:2e:bb:09:15:
fc:1a:cd:aa:7c:e0:cd:7d:37:05:76:04:95:99:3b:1e:d3:1c:
99:94:ae:30:7a:2d:3c:fd:b4:f8:b1:f7:92:b0:81:d1:b3:2c:
14:d4:40:0f:bb:fa:71:c0:d7:d2:2f:21:e2:b6:bf:f1:72:f5:
70:16:94:6e:2b:65:a3:03:2d:5b:37:38:1d:e0:e9:ed:ca:d9:
43:cb:21:01:90:09:c2:e0:ab:1c:3e:a2:5a:dc:52:e6:16:8c:
8e:73:d5:9f:23:8d:14:0d:e3:9c:2f:1c:8b:49:65:d7:63:90:
71:20:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:35 2025 by rpki-client