Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_X1LuRydampJQs4xru1Q1cRGOM.roa
File: M_X1LuRydampJQs4xru1Q1cRGOM.roa (raw, json)
Hash identifier: l4WnPQ2vZrT+1waKbubLFnHSfUEfZUjh27hA0qtnii8=
Subject key identifier: 33:F5:F5:2E:E4:72:75:A9:A9:25:0B:38:C6:BB:B5:43:57:11:18:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018971E651B921EBCF3728C3E22AE45716D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_X1LuRydampJQs4xru1Q1cRGOM.roa
Signing time: Thu 20 Jul 2023 06:04:26 +0000
ROA not before: Thu 20 Jul 2023 06:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:189:71e6:3b48/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:e6:51:b9:21:eb:cf:37:28:c3:e2:2a:e4:57:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 06:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33f5f52ee47275a9a9250b38c6bbb543571118e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:fb:c3:b5:e3:cd:ef:be:49:53:0e:ed:87:
83:7d:94:f4:34:18:78:e0:8f:bd:ff:aa:46:b0:c7:
31:1a:b6:9b:1a:e8:fd:f5:25:3b:fb:de:0d:24:9b:
41:96:d8:30:90:8e:dd:55:73:52:25:29:37:74:1d:
d9:5c:1c:77:4f:2b:bd:c5:21:c9:67:4f:5a:b0:47:
41:f2:fb:14:f6:cf:d2:da:d8:42:c7:02:19:ab:dd:
1b:e5:87:30:35:5e:eb:04:18:b9:4e:ad:5f:cd:59:
dd:df:33:8b:ed:52:7a:6e:59:02:58:19:c0:13:33:
62:5f:2d:0b:13:69:f8:d6:b8:ad:1d:aa:c0:ee:87:
5b:0b:ab:50:47:11:23:d7:ec:6c:de:11:a4:d3:5f:
96:d6:25:02:55:ea:7c:0c:ba:1b:f3:18:e4:77:f3:
e4:7e:ba:95:34:81:11:e4:23:2f:aa:ad:bb:6f:4c:
7c:9b:ee:5b:c2:47:e5:49:f6:7b:ea:24:16:0a:b0:
d3:42:5b:85:db:7d:a6:ef:01:8d:ea:4c:52:54:0f:
be:36:6f:bb:32:25:3f:5f:1c:27:69:d1:da:84:c6:
20:67:23:6f:d3:3b:92:5c:5a:61:f9:4d:8c:93:16:
ce:4c:6d:3e:4e:a1:1e:98:46:1f:7c:7e:22:ff:1b:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:F5:2E:E4:72:75:A9:A9:25:0B:38:C6:BB:B5:43:57:11:18:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M_X1LuRydampJQs4xru1Q1cRGOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ac:83:06:0a:c9:f5:7e:a0:84:32:02:51:16:97:52:85:b3:
b1:34:01:2a:3b:77:ad:25:e4:9a:3e:92:b9:f2:bd:a9:a9:26:
7d:31:88:4a:93:22:2e:46:3d:d3:96:51:bc:f8:ae:2a:bb:23:
5c:73:57:9c:bc:8b:5b:22:69:a3:51:37:26:bc:30:26:92:4b:
39:db:f6:87:24:24:fc:5a:36:2c:37:3f:2c:18:12:df:fb:63:
2a:a4:8d:f7:1a:6f:37:51:5a:05:36:6d:6a:52:a4:c4:f3:1b:
8d:39:24:46:6c:77:3d:38:22:a5:2c:a7:52:33:fc:7d:89:ab:
a4:4a:c7:3d:66:0a:a0:2d:23:89:1e:ac:6d:d5:4d:5b:e9:74:
0a:0d:21:4c:84:86:91:5b:77:c5:c0:41:2d:05:67:83:5f:cf:
f9:8b:15:a9:91:68:32:45:bc:62:7a:0e:b5:f9:c8:8a:55:ef:
3a:bd:93:1c:06:6c:96:d7:65:08:49:c0:ff:66:71:52:71:6f:
b2:d0:1c:9a:27:b3:8b:a9:70:ed:e3:de:57:40:04:9a:ca:b1:
73:21:28:71:56:a5:55:db:5a:6c:2e:04:96:af:82:d8:9e:3d:
da:77:15:b6:5e:72:15:95:73:3a:04:0f:f4:df:f0:5c:85:ce:
1b:15:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:05 2025 by rpki-client