Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRkm6yu8gEDa6xEBRiRG7SQeJRE.roa
File: MRkm6yu8gEDa6xEBRiRG7SQeJRE.roa (raw, json)
Hash identifier: 3j9axk3Ng0q8uNmzh3D9iXSWP5vUW3gOssmbiniSzsk=
Subject key identifier: 31:19:26:EB:2B:BC:80:40:DA:EB:11:01:46:24:46:ED:24:1E:25:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895FB2AAD8E291FB8D4E20062CE3A9411F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRkm6yu8gEDa6xEBRiRG7SQeJRE.roa
Signing time: Sun 16 Jul 2023 17:14:51 +0000
ROA not before: Sun 16 Jul 2023 17:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5f:b2:aa:d8:e2:91:fb:8d:4e:20:06:2c:e3:a9:41:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 17:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311926eb2bbc8040daeb1101462446ed241e2511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:70:f2:a7:42:19:1e:ad:9d:6a:5f:92:bf:
23:a6:ce:04:69:5d:20:b1:0f:99:eb:00:c6:0f:b4:
af:63:c6:95:d8:92:6f:a0:f9:0e:d0:5a:df:ba:17:
71:13:c5:eb:d3:08:9c:e6:83:89:0f:44:17:4e:a2:
ea:01:98:ea:22:ca:aa:1b:0f:0a:a9:1e:4e:9e:42:
d8:40:b8:b0:aa:29:e1:fc:07:ee:80:a9:06:77:bc:
4d:11:62:ba:e2:83:d6:fd:c3:24:21:54:10:83:8c:
0e:32:ef:88:a8:97:3f:24:5e:1c:ca:5f:1a:87:6a:
d6:2d:48:7a:20:9c:84:2e:9e:ce:96:43:b3:20:a0:
7b:f0:5d:93:c1:77:26:60:24:ae:61:26:f7:8a:f8:
3b:af:45:34:66:8f:28:ba:0b:fe:10:dc:31:1c:00:
e0:48:b9:cc:70:bb:25:c6:ee:9c:55:0d:2a:7b:46:
4d:e1:1c:82:54:ed:cd:0d:09:17:fb:8c:e3:a7:dc:
b2:f4:78:7f:87:6b:d1:bf:e6:c5:b4:7e:12:13:b7:
dd:66:ca:8b:d2:22:6b:44:07:dd:d4:3b:1d:49:8a:
85:c8:95:59:cf:ff:51:2c:c1:50:4f:94:7d:74:6f:
11:ea:a7:aa:ea:2e:9f:5d:43:e5:fb:f6:5b:bb:ef:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:26:EB:2B:BC:80:40:DA:EB:11:01:46:24:46:ED:24:1E:25:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRkm6yu8gEDa6xEBRiRG7SQeJRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:12:62:8a:4c:8e:3b:0d:63:8d:f3:7a:e1:71:f8:f4:64:c7:
c5:f4:12:58:c6:cc:14:60:ea:e5:bc:9d:f8:3e:19:71:3d:49:
64:37:a8:3b:ae:e9:41:ea:9d:48:75:e8:40:85:97:fc:00:7a:
3b:89:d8:cb:dc:94:d2:b0:a6:e0:da:b7:87:39:d9:16:41:3f:
a6:96:d1:4f:0c:6b:35:96:18:c6:8f:54:9c:54:4a:12:17:c0:
ee:08:05:d0:b9:ad:c8:7e:77:71:ef:e9:8f:f5:60:a1:db:28:
5d:32:a2:39:d6:64:2f:21:13:a7:d4:5b:e9:c0:f4:5a:10:a8:
80:14:55:22:4a:55:7e:af:ff:f6:06:88:89:40:69:3d:d9:15:
0a:e1:57:1f:16:af:4d:6e:3c:5f:00:da:9a:83:e6:50:37:37:
3f:94:e1:f8:ca:50:af:92:91:ad:1e:4a:1e:62:ff:59:f9:57:
6d:22:33:04:f6:71:b7:e3:5e:17:c0:a5:84:3f:61:5e:ab:d1:
c4:bb:c7:13:40:de:92:b2:69:22:e4:e9:50:14:d7:5c:e6:92:
9c:b3:e1:13:4c:df:ed:9e:36:bd:7b:ab:8d:08:d2:3d:c9:b5:
1a:e3:6e:be:ce:fb:04:64:df:fd:bd:08:33:94:b6:bc:ad:04:
d7:6a:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:01:11 2025 by rpki-client