Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0ZN7xUe3xUqcoDecWBjx16W1is.roa
File: m0ZN7xUe3xUqcoDecWBjx16W1is.roa (raw, json)
Hash identifier: celsbhkD5HCqbGRj9adgzCdQYcHoqQhmsDwpC7qJT/I=
Subject key identifier: 9B:46:4D:EF:15:1E:DF:15:2A:72:80:DE:71:60:63:C7:5E:96:D6:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186ABA71A80E7ED0F084B999D9FDFCB09A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0ZN7xUe3xUqcoDecWBjx16W1is.roa
Signing time: Sat 04 Mar 2023 08:05:00 +0000
ROA not before: Sat 04 Mar 2023 08:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:aba6:804e/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:a7:1a:80:e7:ed:0f:08:4b:99:9d:9f:df:cb:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 08:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b464def151edf152a7280de716063c75e96d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:b3:cf:38:73:da:1c:4e:2d:9a:7a:73:b7:
6b:81:41:01:21:29:2f:97:90:59:66:c1:e4:fc:4b:
c8:99:39:70:fc:57:eb:11:fb:45:6d:59:49:b9:c3:
61:cf:7f:3f:ea:24:a9:8a:6d:37:af:f1:55:81:3f:
ef:7e:60:08:c5:cc:1d:67:d3:28:81:a3:3c:7a:26:
56:6a:5b:79:8f:61:66:52:36:fd:f9:99:e0:69:68:
0c:44:96:92:9d:88:07:bc:19:6b:15:59:8c:ba:64:
23:74:0d:7e:0e:f9:2d:09:b4:3d:fc:26:00:79:73:
bf:60:85:f7:9d:dc:8d:9f:6b:dc:02:41:34:6c:62:
4b:68:e7:98:6d:69:4d:dd:0c:2e:b1:c1:54:da:23:
a7:b2:e1:c4:ca:0c:83:d0:01:c1:da:f2:de:33:2e:
b0:f0:2d:26:8d:92:08:d7:1f:c7:e4:b3:0f:ff:b7:
73:35:03:73:e5:89:ba:9e:8f:c3:5f:9b:82:58:78:
62:05:9f:f4:ea:2f:5a:b2:d7:c5:8b:1e:6f:c9:ba:
0a:03:86:26:be:50:2e:40:76:24:41:06:51:4a:86:
7a:43:94:e8:4f:31:cd:12:7d:5a:9b:d9:52:11:65:
c6:24:b5:10:1a:77:90:8a:58:7b:42:36:78:41:d9:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:46:4D:EF:15:1E:DF:15:2A:72:80:DE:71:60:63:C7:5E:96:D6:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0ZN7xUe3xUqcoDecWBjx16W1is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:86:9f:24:37:97:bc:47:b3:46:cb:46:cb:82:01:50:4c:e2:
e0:3c:14:8a:27:59:9f:fa:c9:c6:9f:0e:d9:47:3c:20:8b:14:
61:2c:75:af:47:da:eb:d9:eb:cc:f3:5b:b8:bf:dc:62:b8:67:
9f:cb:54:12:6f:28:08:f3:f4:27:4c:cc:48:e7:a9:46:8f:24:
f2:92:ab:e2:8b:a3:5d:c4:d5:40:ef:41:ad:c0:d4:a3:f7:27:
a7:07:55:3e:7b:87:b5:bf:57:79:8f:59:3d:9e:60:21:ab:56:
a0:bb:5c:11:c0:90:7a:90:b7:22:25:c8:d8:96:64:d4:8d:85:
fd:41:c4:f3:1f:00:96:39:ff:ef:b7:af:08:1e:58:6c:53:5b:
59:fa:da:94:77:3d:54:07:c3:e5:b8:4c:1a:eb:e0:54:d9:dd:
79:d5:5d:f4:f5:d2:1c:33:04:6e:73:ca:7f:06:85:c3:b8:9f:
61:f8:d2:cf:86:35:2c:71:55:15:d6:b6:09:62:22:41:1c:49:
c8:d5:70:2e:29:d4:ca:d8:36:d3:6c:24:7f:34:99:a6:70:43:
62:0d:f8:15:93:67:eb:32:e5:2a:59:e3:12:82:aa:95:78:31:
2f:6f:01:88:17:a1:4a:6f:a5:ff:ee:c1:dd:d9:81:a7:26:d9:
07:ec:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:39:20 2025 by rpki-client