Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_FRj1tRqSCwdpaGd7L2Jomrhw0.roa
File: M_FRj1tRqSCwdpaGd7L2Jomrhw0.roa (raw, json)
Hash identifier: 44kc5b/VCOBmB1D974chXcuD98He2tRPaCCOVz43OAQ=
Subject key identifier: 33:F1:51:8F:5B:51:A9:20:B0:76:96:86:77:B2:F6:26:89:AB:87:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BA4C3129B605F5E7B662AD2CB9D910D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_FRj1tRqSCwdpaGd7L2Jomrhw0.roa
Signing time: Tue 07 Mar 2023 04:20:00 +0000
ROA not before: Tue 07 Mar 2023 04:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:4c:31:29:b6:05:f5:e7:b6:62:ad:2c:b9:d9:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 04:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33f1518f5b51a920b076968677b2f62689ab870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:1d:f5:47:e7:a9:b3:93:49:87:53:53:e9:
33:e2:40:8a:0a:6f:dd:41:0b:43:4e:a9:7b:d8:3c:
67:fc:14:6f:e9:0d:92:82:fd:e4:60:e0:89:41:6c:
be:cf:4a:ad:97:b8:ba:4c:4b:61:36:1d:38:43:9f:
a3:6b:0a:e0:c9:99:94:1a:bc:03:a5:b6:95:7f:48:
ae:23:c6:f2:e4:19:ea:53:f9:85:73:c1:b6:46:a7:
a2:50:9e:4f:44:a1:10:46:f4:9c:22:cf:06:cd:d0:
0e:da:7b:ca:3d:de:70:fa:93:61:45:32:b8:34:a0:
83:3a:35:35:32:46:b5:03:df:65:08:d9:fa:c9:f5:
2c:a6:f5:96:3d:d4:26:c0:c1:8f:4d:28:ca:43:93:
63:0c:b8:f9:2e:4d:44:48:4c:ea:86:e1:9e:cc:50:
7f:89:d7:7e:47:cb:64:33:d3:d0:49:f4:83:78:75:
21:15:0b:5b:2b:3d:d3:d7:86:fb:aa:cd:82:9e:a0:
2d:e8:c2:82:7a:c9:f9:b4:71:77:27:fe:6d:8c:0b:
82:51:11:01:d6:41:91:0a:49:04:b4:a1:71:af:5c:
09:09:5b:f0:e4:4d:bd:83:02:e7:42:64:84:d5:5f:
fb:b4:65:28:96:06:30:92:c2:aa:d7:8a:e4:49:15:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:51:8F:5B:51:A9:20:B0:76:96:86:77:B2:F6:26:89:AB:87:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_FRj1tRqSCwdpaGd7L2Jomrhw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:da:07:e3:11:e3:b6:e1:c5:77:00:ca:4f:b0:59:07:c5:52:
12:5a:a1:00:e1:e8:29:e9:0d:75:22:41:d1:a9:ee:81:7d:5d:
f9:8a:83:be:46:fc:d1:4f:de:2c:a3:8e:88:91:8f:7e:34:7f:
0d:26:fb:70:f3:d0:c9:46:50:18:f5:13:d1:10:be:a2:85:66:
fd:42:28:bf:ea:9c:f3:46:85:31:16:90:a3:41:8c:1a:62:3b:
3f:3b:0c:1b:12:29:b1:a6:c4:7e:13:8c:d1:64:ee:a9:0e:25:
a2:ba:37:a5:12:a8:ce:c2:1e:bc:21:d2:8a:c2:56:10:b1:29:
34:89:8d:bd:ae:c1:05:9b:16:75:8e:36:65:bc:c1:d9:93:5a:
16:92:4c:3b:88:8d:16:99:e3:e8:10:3a:1c:bf:15:38:ee:2a:
f5:cc:08:de:d4:f2:d6:1b:b7:8d:ba:a0:4c:9c:b3:33:de:17:
af:85:f3:a2:28:6e:71:dd:10:af:d1:a0:9c:9b:27:87:d5:08:
fe:b3:d2:99:a1:e1:ff:c2:9b:0f:30:3a:11:2d:02:85:f3:e6:
4b:10:c5:2b:07:fd:fd:99:df:f5:12:02:bd:d2:04:d5:24:a5:
58:c0:c5:56:cf:29:1a:f8:6b:36:d5:19:25:29:8d:21:37:f8:
f6:5d:fb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:00:48 2025 by rpki-client