Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a205_mtu_L1dzvUc6dl3zxA0XKU.roa
File: a205_mtu_L1dzvUc6dl3zxA0XKU.roa (raw, json)
Hash identifier: Vj4/l7BZZDINJn1N40x3AUvqfEX2oc2ga3zo/UBY1aA=
Subject key identifier: 6B:6D:39:FE:6B:6E:FC:BD:5D:CE:F5:1C:E9:D9:77:CF:10:34:5C:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018972C788C86209F0CB7D1E07155108CDC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a205_mtu_L1dzvUc6dl3zxA0XKU.roa
Signing time: Thu 20 Jul 2023 10:10:26 +0000
ROA not before: Thu 20 Jul 2023 10:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:c7:88:c8:62:09:f0:cb:7d:1e:07:15:51:08:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 10:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b6d39fe6b6efcbd5dcef51ce9d977cf10345ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:78:56:3b:e9:e8:ab:93:76:90:96:c0:5c:
58:fe:0d:af:5f:99:03:d6:bd:b2:bf:63:7b:a8:3c:
10:19:fb:30:97:7f:4d:60:d4:a6:9e:b5:31:66:70:
06:e6:55:ea:a4:a9:63:1b:17:47:b1:77:3a:72:98:
2b:d4:92:3a:4c:dc:3d:80:9b:5e:30:35:aa:ae:11:
e4:9f:ad:09:d2:22:2a:6d:15:fa:52:de:c0:8e:63:
ed:69:49:73:3a:c3:56:d9:6a:34:7b:cb:70:83:bf:
80:10:7d:53:93:25:b3:19:96:b2:ce:51:b3:d1:42:
39:22:91:32:ab:00:9a:d0:70:c9:ca:88:f4:df:9b:
79:04:19:a0:cc:f6:19:fb:cd:f9:55:3e:7a:7e:94:
15:35:60:e9:bb:3d:26:a4:e1:94:89:27:44:3f:26:
d1:1d:9a:09:34:65:e0:0d:49:bc:8e:c3:a1:a9:07:
94:b6:4f:35:db:18:6a:2d:4d:2b:44:35:db:12:d0:
58:2f:16:16:e9:7a:49:07:b1:02:9a:19:1b:f2:bc:
ee:fb:a6:00:14:26:88:33:6b:a6:d8:79:30:47:08:
f1:38:ff:86:25:8d:ec:8e:75:28:c5:9a:07:49:15:
d0:ce:9c:1a:9a:45:47:d8:04:73:d2:bf:54:31:62:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6D:39:FE:6B:6E:FC:BD:5D:CE:F5:1C:E9:D9:77:CF:10:34:5C:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a205_mtu_L1dzvUc6dl3zxA0XKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:61:55:9c:30:a9:5f:56:dd:e7:18:b3:f8:86:8d:49:ad:ab:
c2:ed:2a:32:59:80:66:13:24:b3:2d:83:b0:a1:a3:ee:0a:f5:
67:e5:cb:ff:18:01:c1:01:48:fa:72:bb:d0:72:65:11:4e:ec:
df:e7:bd:3b:bf:0f:37:95:b4:44:7a:e6:74:32:2a:cd:3e:ac:
c2:99:cf:96:12:eb:e2:1a:89:d2:22:b1:0c:aa:08:5c:bb:d8:
ba:6c:f2:3d:05:47:36:34:ed:da:58:7b:f7:f3:30:85:0a:9c:
5e:cf:44:2d:e8:ef:c6:ab:eb:0d:fc:c9:ef:f6:3e:34:84:50:
82:23:aa:60:a9:79:a0:70:68:cb:db:bb:07:55:df:07:15:ee:
56:3a:00:30:ba:72:e8:e5:1b:29:87:82:f8:00:1e:80:55:eb:
74:40:f1:15:18:99:e2:58:09:4f:08:e1:23:a0:a9:ed:09:a2:
cc:8d:e0:c5:a6:da:a0:bb:12:02:bf:37:82:12:98:f5:c8:38:
59:2c:bf:64:81:18:08:3f:19:dc:89:11:97:3f:2c:98:9a:b5:
7a:b9:32:29:f4:cb:92:22:3e:08:67:f0:ab:34:04:e2:6b:17:
d6:cd:2b:c1:0f:64:c1:9e:6c:04:7c:bb:cc:87:c7:7b:0b:72:
cc:b2:8b:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlyx4jIYgnwy30eBxVRCM3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIwMTAxMDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjZkMzlmZTZiNmVmY2JkNWRjZWY1MWNlOWQ5NzdjZjEwMzQ1Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZ4Vjvp6KuTdpCWwFxY/g2vX5kD
1r2yv2N7qDwQGfswl39NYNSmnrUxZnAG5lXqpKljGxdHsXc6cpgr1JI6TNw9gJte
MDWqrhHkn60J0iIqbRX6Ut7AjmPtaUlzOsNW2Wo0e8twg7+AEH1TkyWzGZayzlGz
0UI5IpEyqwCa0HDJyoj035t5BBmgzPYZ+835VT56fpQVNWDpuz0mpOGUiSdEPybR
HZoJNGXgDUm8jsOhqQeUtk812xhqLU0rRDXbEtBYLxYW6XpJB7ECmhkb8rzu+6YA
FCaIM2um2HkwRwjxOP+GJY3sjnUoxZoHSRXQzpwamkVH2ARz0r9UMWJPSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGttOf5rbvy9Xc71HOnZd88QNFylMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYTIwNV9tdHVfTDFkenZVYzZkbDN6eEEwWEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABdhVZwwqV9W3ecYs/iG
jUmtq8LtKjJZgGYTJLMtg7Cho+4K9Wfly/8YAcEBSPpyu9ByZRFO7N/nvTu/DzeV
tER65nQyKs0+rMKZz5YS6+IaidIisQyqCFy72Lps8j0FRzY07dpYe/fzMIUKnF7P
RC3o78ar6w38ye/2PjSEUIIjqmCpeaBwaMvbuwdV3wcV7lY6ADC6cujlGymHgvgA
HoBV63RA8RUYmeJYCU8I4SOgqe0JosyN4MWm2qC7EgK/N4ISmPXIOFksv2SBGAg/
GdyJEZc/LJiatXq5Min0y5IiPghn8Ks0BOJrF9bNK8EPZMGebAR8u8yHx3sLcsyy
i7Y=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:55:40 2025 by rpki-client