Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mv-6F3WqyQQlmC_Fd9ekuJAbuDU.roa
File: Mv-6F3WqyQQlmC_Fd9ekuJAbuDU.roa (raw, json)
Hash identifier: p5ZjbpPCNpP4tqWft7193ehgU8vZXlFGBIcfhGEcSOc=
Subject key identifier: 32:FF:BA:17:75:AA:C9:04:25:98:2F:C5:77:D7:A4:B8:90:1B:B8:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187ECAF5191E1AC188D7443057605C8B1D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mv-6F3WqyQQlmC_Fd9ekuJAbuDU.roa
Signing time: Fri 05 May 2023 16:12:05 +0000
ROA not before: Fri 05 May 2023 16:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:af:51:91:e1:ac:18:8d:74:43:05:76:05:c8:b1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 16:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32ffba1775aac90425982fc577d7a4b8901bb835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:09:b2:90:7d:b5:61:cd:2b:10:b8:f0:90:
c9:98:22:51:67:48:3c:5c:89:f6:25:7f:b4:fd:f9:
68:01:d3:e4:87:1b:77:bf:d4:23:73:e2:30:82:42:
12:7a:98:23:d3:60:34:cb:b8:21:d1:a5:4a:22:fe:
b2:24:05:b3:b9:28:fc:d4:0f:ad:9f:ce:b5:f9:a0:
7c:c7:4d:b3:1d:54:60:7e:86:a3:a0:cb:3e:88:e8:
0e:81:38:6c:1a:c8:a2:5d:03:db:17:8b:ba:9c:22:
a5:2d:0c:c8:cb:4e:5a:71:c7:c9:b9:60:a7:d7:9a:
0e:4d:e2:78:fc:9b:cb:df:a2:51:1c:90:23:bc:c5:
d2:9c:d4:31:8d:cd:e4:bc:2a:bc:f4:61:f1:98:07:
45:e5:35:a3:f7:4b:89:a7:4e:5a:f4:9f:61:8b:3d:
97:8f:06:16:ce:e4:12:7a:15:64:74:be:65:a4:14:
ef:20:5f:ca:bd:8a:5e:c8:ce:a8:e1:e4:2f:e5:7f:
57:7d:49:6b:a8:0c:96:69:aa:41:95:40:cf:12:be:
57:9e:8c:07:5b:cb:22:95:da:41:25:15:cb:37:b0:
ad:64:0b:35:87:86:b9:c4:33:5c:5b:25:7f:74:43:
6f:f9:f9:a0:5f:34:7b:7e:bf:ac:e4:25:81:89:5f:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:BA:17:75:AA:C9:04:25:98:2F:C5:77:D7:A4:B8:90:1B:B8:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mv-6F3WqyQQlmC_Fd9ekuJAbuDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:cd:9f:c6:52:2e:e4:09:02:90:ee:06:e9:59:48:89:00:18:
a5:70:ea:5d:bf:2d:5a:dd:70:9b:76:ca:47:bc:90:ca:05:a9:
a5:86:95:4f:96:ea:89:68:55:37:ab:a7:01:17:a6:d5:f8:96:
9b:fe:86:c1:95:13:c5:f3:23:6b:d6:a7:c1:77:ec:94:6f:d7:
36:d6:eb:cb:92:35:8c:60:e0:6e:51:71:e9:ff:b5:36:d1:6f:
96:12:4e:60:68:c2:a1:4e:53:7f:b0:b7:45:39:8e:c4:05:62:
98:1c:cd:f4:dc:51:95:e1:91:c3:04:f1:fd:df:42:f4:ed:41:
d4:19:36:da:d4:bf:0d:e5:7a:b5:1b:fc:f2:82:cb:b2:a5:a2:
8d:e5:ab:ef:2c:bf:4f:e9:bc:84:6c:1f:2e:08:04:f2:7b:24:
e8:1c:24:ab:c6:c2:e1:8c:54:6c:53:ec:c9:b9:da:55:3d:8d:
cf:0e:5c:6a:bc:c5:5e:4e:d0:76:ef:80:80:40:07:d3:c5:33:
aa:dc:a6:0c:2d:71:2c:1f:7a:1f:0d:eb:fb:9a:19:57:9b:5e:
e8:4b:2c:48:96:a7:61:1e:aa:d0:50:d7:09:d9:58:b6:70:f9:
9f:8e:91:e0:a1:79:12:73:b4:4b:8c:dc:ad:71:b0:ea:f4:df:
0e:e8:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:57 2025 by rpki-client