Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_yOK4av_fOMpPUehuBtZ1QMNqs.roa
File: m_yOK4av_fOMpPUehuBtZ1QMNqs.roa (raw, json)
Hash identifier: D59HZEMIODk7hP/FKBncF6tWNlcRwOWFhQTvZypVk1g=
Subject key identifier: 9B:FC:8E:2B:86:AF:FD:F3:8C:A4:F5:1E:86:E0:6D:67:54:0C:36:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018671EFAA6A92E3AC0ACC275A3EDA3CFAF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_yOK4av_fOMpPUehuBtZ1QMNqs.roa
Signing time: Tue 21 Feb 2023 03:06:17 +0000
ROA not before: Tue 21 Feb 2023 03:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:71ef:176d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:ef:aa:6a:92:e3:ac:0a:cc:27:5a:3e:da:3c:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 03:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bfc8e2b86affdf38ca4f51e86e06d67540c36ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:eb:72:bb:c2:86:ce:fc:a8:83:11:05:9a:
7d:93:8f:2a:2a:1e:29:a0:10:17:85:ed:af:2f:9c:
0b:c6:66:8e:dd:12:8e:5e:e7:55:ec:4b:27:0f:18:
f2:3e:da:07:91:58:fe:c1:63:99:4e:25:3a:81:d5:
80:8c:b0:70:cb:dd:73:62:69:bd:8c:2a:ad:66:50:
b8:7f:ef:29:39:3c:de:db:4f:b4:f9:62:05:62:f0:
cc:6f:11:70:0e:fe:35:98:9e:15:a3:5b:16:8d:c5:
00:2b:ad:2b:04:ad:0a:79:f8:c5:bf:c4:26:01:37:
a9:3d:98:31:bb:8b:e3:9d:3b:da:4f:52:36:c5:b5:
22:55:d8:63:e7:30:96:0f:d9:d7:d1:11:d3:9e:64:
1b:af:0e:73:38:bf:9b:19:63:14:68:c2:f2:5a:69:
24:68:89:43:26:b9:67:3a:b3:88:cb:f9:cf:ee:ef:
f5:4b:cc:76:9b:68:81:f9:e3:96:2b:89:3e:38:3a:
12:71:10:8b:43:41:b6:db:ee:e8:36:ea:b3:46:8c:
68:dd:0d:ea:f1:aa:93:27:0d:f7:99:27:2e:10:bf:
fc:42:04:05:2b:58:7b:93:13:d7:d4:89:11:11:b7:
ed:e7:32:77:1a:1d:f2:19:6e:e1:29:d2:fa:6d:d8:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:8E:2B:86:AF:FD:F3:8C:A4:F5:1E:86:E0:6D:67:54:0C:36:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m_yOK4av_fOMpPUehuBtZ1QMNqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:4a:f8:5c:c7:9f:8c:7a:07:fe:21:9f:e8:07:4b:d6:c1:5f:
64:88:ee:58:a4:c3:41:7e:59:cd:d2:48:71:3b:01:b5:91:34:
ee:59:f4:67:88:f4:f2:8f:26:2e:f6:41:6e:de:ac:2d:e7:d2:
d2:ac:e1:c9:3c:df:1d:1c:9e:9b:c2:13:99:c2:eb:59:0d:aa:
ab:69:c2:9c:da:c4:89:9a:da:0b:44:7b:d2:fb:1a:c5:41:b9:
0e:7a:9b:bf:b7:62:f8:4d:0b:b3:52:53:1d:5c:67:3a:f5:0d:
69:51:47:ab:b7:0a:67:d9:3e:5a:72:ff:19:41:ee:4c:e7:87:
3c:ef:23:b0:74:69:8f:13:87:50:b8:3c:b4:b1:69:72:e2:53:
9f:66:84:73:e7:10:06:97:fd:09:f6:5b:ff:c2:c9:8c:21:cf:
5f:99:0c:0e:4f:5b:12:38:19:b4:9d:5c:69:ce:6b:c7:8a:47:
57:39:d5:4e:cf:58:bc:58:54:5e:bf:c3:b7:72:25:e9:ab:df:
58:11:bc:71:b4:4e:a0:d6:90:6c:3f:e0:3f:d5:40:34:69:64:
d4:a8:52:85:54:c3:46:68:16:10:8b:94:fb:91:33:89:20:43:
f3:46:bf:26:81:64:32:07:6b:de:8a:31:2e:3b:ad:ac:bf:48:
ad:a0:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:03 2025 by rpki-client