Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jmZZIwXoxmjsJ-QEQ80SO4isRLM.roa
File: jmZZIwXoxmjsJ-QEQ80SO4isRLM.roa (raw, json)
Hash identifier: KyYXp3FNw4xVW43+lbr28KOznaXKu1WCUyPnVArcXB0=
Subject key identifier: 8E:66:59:23:05:E8:C6:68:EC:27:E4:04:43:CD:12:3B:88:AC:44:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F38C37F1F57DDD51D7415BABC7A151CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jmZZIwXoxmjsJ-QEQ80SO4isRLM.roa
Signing time: Sun 07 May 2023 00:11:05 +0000
ROA not before: Sun 07 May 2023 00:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f3:8c:37:f1:f5:7d:dd:51:d7:41:5b:ab:c7:a1:51:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 00:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e66592305e8c668ec27e40443cd123b88ac44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:8d:fb:bc:4f:32:d4:14:58:32:86:a4:ad:
4d:9a:4a:d5:a4:40:c5:86:1d:aa:b1:e1:bf:6b:d6:
39:65:06:a7:bf:e4:eb:38:be:2c:3b:88:e7:7f:d3:
ff:3d:0a:40:7f:96:8e:b8:18:e0:4c:05:ce:15:26:
56:60:38:11:b1:0e:34:3c:65:d6:f9:9e:96:d3:c1:
24:4d:01:ae:e3:75:d0:6e:30:15:bf:54:fa:03:b6:
ed:d8:3c:75:3a:27:08:e7:62:a2:e0:49:e3:bb:0c:
3d:2d:07:5a:46:c5:33:ea:fa:da:98:e6:90:aa:82:
eb:ad:f1:25:e9:9f:e3:a7:9d:ab:fe:bf:70:1c:ed:
22:c1:11:7c:00:20:92:5b:68:b1:20:9e:f2:24:f1:
15:35:e5:12:24:fe:a8:ac:f4:32:c6:35:dd:59:99:
00:3e:a8:29:80:5d:16:c0:9d:5a:30:00:6c:bd:6f:
c1:24:99:56:b3:2c:62:cc:21:e8:e1:5b:2d:be:65:
a5:1a:07:ca:b2:47:ca:68:41:c7:a5:ea:be:23:51:
da:d9:d8:62:be:27:a6:bf:bc:38:ad:3e:39:67:71:
4f:26:92:b3:a5:1b:ed:96:76:9b:bb:e0:47:98:45:
16:72:93:e8:8e:99:22:00:01:b7:1c:ce:ea:2c:d8:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:59:23:05:E8:C6:68:EC:27:E4:04:43:CD:12:3B:88:AC:44:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jmZZIwXoxmjsJ-QEQ80SO4isRLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:40:4b:55:d2:37:25:5b:e9:bb:20:3a:26:a8:4b:ad:aa:55:
ac:9e:d4:dd:47:76:60:b8:c7:d1:2a:93:72:39:19:8a:2c:bc:
ba:f3:ae:33:5d:a3:23:33:99:aa:33:32:2c:9c:cc:d4:43:56:
aa:41:d8:09:7b:1c:63:96:5e:96:65:f9:de:9e:6c:89:bc:c3:
b3:f6:7e:b9:10:9b:e9:47:a2:ff:b6:e2:76:ec:dd:9c:e4:f2:
9c:1b:d8:6a:26:73:e1:05:72:ac:e8:91:81:85:9b:1d:36:46:
f6:02:cb:3b:7b:bd:33:32:5d:09:c4:3e:3a:cf:58:3d:f6:28:
f3:9b:86:85:e1:ad:06:35:1f:8e:72:29:e8:e1:30:35:0d:6b:
f4:05:b7:eb:5c:1f:bf:3c:ca:17:27:19:17:65:ab:15:50:ec:
52:36:d3:29:63:84:2c:4a:f1:7e:0c:b4:20:77:53:89:f1:8a:
41:14:97:86:35:be:98:a1:d1:10:e0:37:2a:81:9b:34:83:9c:
57:17:cc:56:13:90:fb:11:8d:32:bb:29:a4:17:8d:8c:63:4a:
c5:7e:05:60:e2:51:bd:75:08:36:ba:bd:91:3e:0a:3d:80:65:
c2:e6:05:05:0a:dc:78:32:96:a7:ae:71:85:1c:b4:19:3b:f9:
a8:7a:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:26 2025 by rpki-client