Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mij0W3NO8n8k7O0HjDVdwvQ1ntc.roa
File: mij0W3NO8n8k7O0HjDVdwvQ1ntc.roa (raw, json)
Hash identifier: a2ty9iHc3geMe4m/uybMiQBXa2uIY1urnQGFKxGJe2k=
Subject key identifier: 9A:28:F4:5B:73:4E:F2:7F:24:EC:ED:07:8C:35:5D:C2:F4:35:9E:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018854BFA0CD4A6D2386A0BE3EDE679983E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mij0W3NO8n8k7O0HjDVdwvQ1ntc.roa
Signing time: Thu 25 May 2023 21:10:24 +0000
ROA not before: Thu 25 May 2023 21:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:bf:a0:cd:4a:6d:23:86:a0:be:3e:de:67:99:83:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 21:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a28f45b734ef27f24eced078c355dc2f4359ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:0c:c8:e0:d9:19:b8:85:89:c9:f8:71:f8:
7c:42:40:ee:9c:18:8a:e6:95:80:ef:48:d9:a2:92:
8e:c3:74:97:07:75:14:c0:9b:b4:da:48:36:1c:fb:
92:52:62:49:98:a4:44:a4:a6:41:3d:c4:16:79:1c:
db:8b:d4:56:c1:00:43:c8:f7:40:bd:9f:38:5b:31:
09:e8:28:b5:bd:09:e5:72:f7:c3:59:cb:29:13:4f:
95:3d:1d:68:1c:bf:17:66:6f:cb:f4:24:15:1e:98:
33:79:23:19:c0:12:f1:db:17:c7:cb:51:f8:12:a8:
1b:a1:ce:c3:18:8f:74:d2:7a:8f:0c:b0:da:e3:22:
00:3b:8c:88:54:4e:c6:1f:e1:ff:41:20:fb:08:7d:
d3:e2:a2:de:be:97:67:9b:24:60:7a:e1:f8:90:66:
d4:c2:c3:50:38:0c:a9:1a:d7:46:8c:f2:e6:0b:f9:
75:4f:13:f9:28:4e:6f:8b:53:d3:ed:aa:75:b3:24:
d5:3d:65:4c:8c:8e:e2:f4:24:e6:9f:34:79:ba:31:
51:0a:80:ee:24:5f:fc:18:9e:bd:05:cc:41:d0:ec:
24:30:96:01:ce:77:ed:6a:17:45:a1:9e:98:cd:53:
41:f3:a9:f7:8d:16:72:3e:a6:6a:91:e0:c7:53:46:
cd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:F4:5B:73:4E:F2:7F:24:EC:ED:07:8C:35:5D:C2:F4:35:9E:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mij0W3NO8n8k7O0HjDVdwvQ1ntc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d2:b7:16:f6:48:ad:c3:f4:78:ee:09:82:e7:b7:85:a2:a3:
96:4e:e1:78:02:69:c0:ed:49:8c:11:42:92:99:f1:38:4f:f3:
68:5f:0d:33:4b:30:d9:03:88:a0:83:27:dd:32:17:1e:c1:79:
af:70:df:d1:ed:f0:43:e1:24:d5:2e:f2:a9:ff:0d:ca:57:6e:
7b:21:b8:48:a8:b3:d7:d8:67:0b:63:da:21:9d:1e:d2:57:36:
4c:5c:b0:e5:8f:8f:0c:b8:b5:eb:61:20:bb:f3:cc:cf:5f:b5:
9b:32:9e:31:87:c8:b0:1b:11:fa:f1:de:b3:55:d5:d2:24:14:
ca:c0:8d:19:e2:a4:e4:16:8a:31:da:7e:9d:04:c7:f4:bc:c9:
bb:7f:cc:c4:e2:d8:e9:bf:b5:70:e4:8a:6b:b9:d2:b5:48:d9:
7b:de:f2:0b:1d:ae:94:dd:cf:3b:1a:3a:60:82:53:fe:42:c1:
08:9c:3c:39:ac:81:cb:28:42:5b:1a:dc:7d:09:a6:06:90:3b:
3a:40:c3:12:08:5d:9e:4f:82:6b:59:e9:f8:6d:3d:90:c3:5d:
12:77:f4:01:ba:18:87:f4:51:3b:0c:7f:77:70:28:5d:c6:6c:
d7:c7:07:f1:c9:9c:7d:24:54:23:35:ab:e8:a6:1f:a2:ce:d2:
1d:ea:32:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhUv6DNSm0jhqC+Pt5nmYPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI1MjExMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTI4ZjQ1YjczNGVmMjdmMjRlY2VkMDc4YzM1NWRjMmY0MzU5ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx40MyODZGbiFicn4cfh8QkDunBiK
5pWA70jZopKOw3SXB3UUwJu02kg2HPuSUmJJmKREpKZBPcQWeRzbi9RWwQBDyPdA
vZ84WzEJ6Ci1vQnlcvfDWcspE0+VPR1oHL8XZm/L9CQVHpgzeSMZwBLx2xfHy1H4
Eqgboc7DGI900nqPDLDa4yIAO4yIVE7GH+H/QSD7CH3T4qLevpdnmyRgeuH4kGbU
wsNQOAypGtdGjPLmC/l1TxP5KE5vi1PT7ap1syTVPWVMjI7i9CTmnzR5ujFRCoDu
JF/8GJ69BcxB0OwkMJYBznftahdFoZ6YzVNB86n3jRZyPqZqkeDHU0bNXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJoo9FtzTvJ/JOztB4w1XcL0NZ7XMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbWlqMFczTk84bjhrN08wSGpEVmR3dlExbnRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABrStxb2SK3D9HjuCYLn
t4Wio5ZO4XgCacDtSYwRQpKZ8ThP82hfDTNLMNkDiKCDJ90yFx7Bea9w39Ht8EPh
JNUu8qn/DcpXbnshuEios9fYZwtj2iGdHtJXNkxcsOWPjwy4tethILvzzM9ftZsy
njGHyLAbEfrx3rNV1dIkFMrAjRnipOQWijHafp0Ex/S8ybt/zMTi2Om/tXDkimu5
0rVI2Xve8gsdrpTdzzsaOmCCU/5CwQicPDmsgcsoQlsa3H0JpgaQOzpAwxIIXZ5P
gmtZ6fhtPZDDXRJ39AG6GIf0UTsMf3dwKF3GbNfHB/HJnH0kVCM1q+imH6LO0h3q
MgY=
-----END CERTIFICATE-----
Generated at Sat May 3 01:52:16 2025 by rpki-client