Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aM0poWJRvMWBSs2AzgfkHav4I5Y.roa
File: aM0poWJRvMWBSs2AzgfkHav4I5Y.roa (raw, json)
Hash identifier: XA2hhGXzOua/yTEI/Rom0EWJg0TM4KaI7U168DJng84=
Subject key identifier: 68:CD:29:A1:62:51:BC:C5:81:4A:CD:80:CE:07:E4:1D:AB:F8:23:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BE54CF0F65EFF9112ED249F4C7869D16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aM0poWJRvMWBSs2AzgfkHav4I5Y.roa
Signing time: Wed 26 Apr 2023 16:10:41 +0000
ROA not before: Wed 26 Apr 2023 16:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:54:cf:0f:65:ef:f9:11:2e:d2:49:f4:c7:86:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 16:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68cd29a16251bcc5814acd80ce07e41dabf82396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:57:05:fa:08:a0:f4:cb:39:22:79:de:9b:
1c:40:6f:34:44:4b:c1:99:2b:0f:62:a6:d9:1c:61:
d2:e3:e7:ea:ef:8e:52:be:40:66:f1:63:3f:b2:59:
d5:66:e6:13:fa:44:2f:27:05:63:9c:0f:2f:6d:86:
0a:8a:b8:68:70:b4:e5:dc:e0:18:22:04:01:98:63:
89:5b:e0:88:3c:d3:59:2b:8d:b5:ef:b2:52:a4:75:
dd:69:a6:84:82:cc:e3:e3:d4:e0:86:af:6e:0e:f2:
20:dc:54:7f:56:f0:fe:88:96:dd:2d:f8:18:6f:3a:
c0:2f:a2:ae:77:14:1e:93:e3:60:cc:44:b9:de:55:
da:9b:3d:94:2e:d6:72:bf:72:52:3a:0b:b3:e5:7a:
2e:fd:88:4c:4a:95:5d:02:1b:74:e0:ce:ed:71:86:
e6:f7:42:bf:db:b0:45:02:21:53:8d:2c:d2:3c:d2:
12:a2:43:91:a9:b9:22:08:70:ff:91:23:83:78:47:
a9:57:b0:72:bb:7b:e7:fb:32:48:eb:3c:f2:bd:69:
33:26:f5:3f:5a:13:45:7a:a7:4a:f9:84:c9:ab:03:
c2:12:f1:93:4b:5e:f0:f5:5b:b9:70:be:6f:92:3a:
76:58:a6:e7:be:ca:8b:85:ca:92:1f:34:40:6e:90:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:29:A1:62:51:BC:C5:81:4A:CD:80:CE:07:E4:1D:AB:F8:23:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aM0poWJRvMWBSs2AzgfkHav4I5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:52:d3:d4:dc:22:5e:01:07:fb:1e:74:65:79:3b:65:b8:5e:
08:09:75:c0:91:e0:70:d4:15:0c:b0:24:d8:5c:06:2a:97:8b:
5c:3e:f9:bc:ef:c6:33:e0:ad:82:73:22:34:12:38:fc:6e:0f:
ee:f3:09:95:2f:ad:49:0c:13:d7:a6:22:a4:c4:86:e0:47:16:
ad:9d:31:6a:ec:73:ff:ef:36:32:b1:1f:4d:61:c4:f1:23:cf:
06:67:8a:20:3b:72:1d:aa:97:5e:71:5b:de:de:dc:a4:a4:af:
7b:e0:ba:ed:6d:0c:22:17:b3:f3:49:b1:35:83:27:d6:4e:df:
d6:ab:72:68:86:e4:fe:10:79:85:a0:8d:07:76:db:ce:39:b6:
6a:af:e5:4c:cb:88:27:77:56:d5:6a:86:aa:e0:49:1c:b1:75:
24:a8:a8:4b:f6:9d:9c:8b:28:09:a5:b4:60:85:57:12:99:0f:
4f:4b:02:cf:5e:b0:24:e2:b0:5a:40:05:0c:e2:a7:9f:cf:6e:
46:79:f7:a6:99:9e:bc:6b:0c:15:78:a1:ca:a6:d0:07:58:8c:
f8:b5:60:b8:cb:54:a7:2e:4e:43:df:15:1c:d2:93:05:2e:32:
5b:1f:f4:a2:42:9c:1f:dc:7a:5c:d0:0d:d8:f9:bc:13:68:64:
5d:9d:58:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe+VM8PZe/5ES7SSfTHhp0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI2MTYxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGNkMjlhMTYyNTFiY2M1ODE0YWNkODBjZTA3ZTQxZGFiZjgyMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1XBfoIoPTLOSJ53pscQG80REvB
mSsPYqbZHGHS4+fq745SvkBm8WM/slnVZuYT+kQvJwVjnA8vbYYKirhocLTl3OAY
IgQBmGOJW+CIPNNZK42177JSpHXdaaaEgszj49Tghq9uDvIg3FR/VvD+iJbdLfgY
bzrAL6KudxQek+NgzES53lXamz2ULtZyv3JSOguz5Xou/YhMSpVdAht04M7tcYbm
90K/27BFAiFTjSzSPNISokORqbkiCHD/kSODeEepV7Byu3vn+zJI6zzyvWkzJvU/
WhNFeqdK+YTJqwPCEvGTS17w9Vu5cL5vkjp2WKbnvsqLhcqSHzRAbpA7YQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGjNKaFiUbzFgUrNgM4H5B2r+COWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYU0wcG9XSlJ2TVdCU3MyQXpnZmtIYXY0STVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAhS09TcIl4BB/sedGV5
O2W4XggJdcCR4HDUFQywJNhcBiqXi1w++bzvxjPgrYJzIjQSOPxuD+7zCZUvrUkM
E9emIqTEhuBHFq2dMWrsc//vNjKxH01hxPEjzwZniiA7ch2ql15xW97e3KSkr3vg
uu1tDCIXs/NJsTWDJ9ZO39arcmiG5P4QeYWgjQd22845tmqv5UzLiCd3VtVqhqrg
SRyxdSSoqEv2nZyLKAmltGCFVxKZD09LAs9esCTisFpABQzip5/PbkZ596aZnrxr
DBV4ocqm0AdYjPi1YLjLVKcuTkPfFRzSkwUuMlsf9KJCnB/celzQDdj5vBNoZF2d
WFw=
-----END CERTIFICATE-----
Generated at Thu May 1 08:27:47 2025 by rpki-client