Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_TgQY7-Ry3626YcOQH41gzeVZg.roa
File: M_TgQY7-Ry3626YcOQH41gzeVZg.roa (raw, json)
Hash identifier: KVteHuXbeErp8800qGPV8A8Xx8Jv3zNUTn7ZQYDVbbE=
Subject key identifier: 33:F4:E0:41:8E:FE:47:2D:FA:DB:A6:1C:39:01:F8:D6:0C:DE:55:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73FF9E3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_TgQY7-Ry3626YcOQH41gzeVZg.roa
Signing time: Sun 20 Mar 2022 01:10:21 +0000
ROA not before: Sun 20 Mar 2022 01:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946132027 (0x73ff9e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 01:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33f4e0418efe472dfadba61c3901f8d60cde5598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:dd:78:33:c5:b7:f3:f7:9f:86:7e:79:14:
d2:31:f8:1e:e5:14:c9:85:8c:5a:28:4e:ad:42:7a:
09:d8:2e:33:66:84:58:0e:d9:c1:14:d0:31:11:ea:
6d:ea:d5:62:67:8f:27:30:57:1f:27:5d:f6:f1:8f:
6f:e7:72:49:b5:14:62:1a:ca:45:40:2f:54:cc:97:
cc:72:44:07:d4:a9:9b:fd:af:57:b9:e6:22:83:55:
0d:bd:9d:57:16:bb:8a:ea:a7:0a:20:fb:a0:e4:6a:
9b:67:b2:41:8e:ce:f4:c9:ce:a8:f2:1d:2a:f2:a2:
e1:f5:ad:30:8f:82:53:0f:9e:1c:d5:e0:48:c5:ad:
11:ec:17:4b:97:5f:de:af:83:75:76:3c:b4:64:0b:
fd:ee:47:d4:cd:1c:26:3e:22:5e:3a:1c:d5:05:3d:
fb:21:74:b0:22:36:12:40:f3:a8:60:76:f6:1f:15:
5a:a9:f4:5a:f5:a0:95:09:9e:d8:e2:66:ef:f5:ba:
07:8d:6a:50:d5:28:ba:16:aa:c9:a8:9d:8e:6e:a5:
b1:da:32:cf:72:e0:fa:92:8c:79:7c:22:a5:7b:9b:
94:e0:6d:7f:a0:dd:92:9c:af:67:37:4e:31:96:c0:
79:c3:48:4b:89:01:2f:78:c6:9d:74:cf:29:a5:33:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:E0:41:8E:FE:47:2D:FA:DB:A6:1C:39:01:F8:D6:0C:DE:55:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_TgQY7-Ry3626YcOQH41gzeVZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:d9:52:65:f0:06:4a:ba:f6:75:fc:0f:8e:aa:44:ff:b8:e9:
94:9e:d5:c1:67:5c:41:a0:cd:63:86:43:ac:6d:fe:99:05:a3:
cd:84:7d:3f:33:7d:e9:b2:5d:81:0f:51:34:e0:22:30:12:e6:
4d:5d:6f:41:40:df:7d:d2:1e:17:21:e8:41:21:08:27:d9:ee:
46:5b:29:70:05:03:15:5f:17:a5:11:86:51:45:68:bf:60:f9:
ad:93:ed:18:d3:b2:04:9f:fe:76:d0:fd:5a:e5:dd:10:24:e8:
f5:5c:6d:07:45:d4:4d:5b:ab:06:e2:ce:28:ed:e4:ab:33:0b:
29:b9:ae:78:e1:5a:2b:d2:cc:8c:5a:9a:5c:de:40:50:01:61:
f3:95:7c:92:6b:16:e4:50:aa:c5:f8:d0:4e:72:ca:d9:ba:ca:
08:73:0a:68:cc:c1:a9:1b:8a:eb:04:f5:e9:d8:02:17:54:be:
b7:c3:59:4d:8e:b0:8d:ef:b6:d9:f9:bc:9d:a6:61:a3:3d:b2:
d6:59:d4:19:ea:9d:f0:11:93:9a:19:5d:b3:53:a5:0f:d0:48:
82:6c:55:e8:06:ef:6d:0b:83:6e:e7:c7:d0:90:70:e4:20:ea:
6e:f3:02:ee:ac:c7:7d:a0:4f:ea:7a:f2:bd:a8:69:f4:19:3d:
16:8e:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:00:16 2025 by rpki-client