Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjYDiUAWiumSRDqyTgSRgJlQ2Bo.roa
File: mjYDiUAWiumSRDqyTgSRgJlQ2Bo.roa (raw, json)
Hash identifier: Qmuk9jrhhb2mx7iAeRhN5LrlSHRZzioxM1Si2OXoM+I=
Subject key identifier: 9A:36:03:89:40:16:8A:E9:92:44:3A:B2:4E:04:91:80:99:50:D8:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A94B6AE9BA0C8071531A05D0D4234868
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjYDiUAWiumSRDqyTgSRgJlQ2Bo.roa
Signing time: Sun 11 Jun 2023 07:11:12 +0000
ROA not before: Sun 11 Jun 2023 07:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:4b:6a:e9:ba:0c:80:71:53:1a:05:d0:d4:23:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 07:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a36038940168ae992443ab24e0491809950d81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:ea:09:37:20:74:82:be:50:cf:61:44:bf:
99:45:7b:5f:69:5d:84:b7:16:99:6a:1a:05:41:51:
e0:4f:74:9a:12:6a:d9:f1:9b:d4:e5:48:13:91:3b:
0b:97:2f:ec:c6:31:1b:9c:0c:15:f9:65:f0:ac:b9:
b9:14:ca:d8:ee:f2:7c:bc:45:56:51:c8:d2:63:c6:
df:89:49:be:68:f0:a5:78:61:a2:8e:85:07:fd:f8:
b1:88:0d:1f:e7:bb:41:e1:e1:28:e9:96:63:7f:a1:
0c:3d:9f:d8:0d:d3:69:93:d8:e8:d0:71:f1:aa:d7:
82:b0:e2:9d:1e:6a:02:63:eb:92:a2:3b:3e:09:e3:
1c:1a:d9:90:93:85:a1:40:e4:7f:1e:66:9c:aa:de:
dd:a5:5a:fd:6e:5b:26:41:61:8b:e9:2a:ab:ed:44:
7d:8a:b6:43:2d:a6:ac:50:fa:eb:72:6d:c6:76:6f:
eb:ab:17:20:56:60:00:84:9f:50:7c:95:76:2f:65:
b7:98:7c:a6:5d:39:0b:37:20:a2:c3:cc:f6:6d:a3:
5b:74:2f:d2:8f:cd:69:ac:2b:57:ca:71:0c:4f:17:
3e:f4:53:bf:6d:84:d0:19:19:03:77:57:1d:ff:04:
3d:61:ef:30:85:9d:9c:dd:1f:a7:b7:d1:13:81:34:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:03:89:40:16:8A:E9:92:44:3A:B2:4E:04:91:80:99:50:D8:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjYDiUAWiumSRDqyTgSRgJlQ2Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a8:b0:c8:39:95:53:b2:12:ba:5b:5e:98:66:ed:c3:e0:29:
2c:15:e3:0b:b0:bb:36:8e:98:56:7e:fd:4a:e0:6a:8b:e3:d6:
42:ba:55:99:b9:83:65:a3:a9:a5:06:69:55:d7:85:65:c0:dc:
84:9b:62:c1:69:95:fd:1e:09:08:1b:58:11:92:8b:37:20:72:
b8:cf:6b:3f:59:61:a5:83:39:3f:01:c0:33:76:0c:3a:74:0d:
f6:51:21:9a:79:3a:ed:fc:56:08:ec:87:04:97:77:30:70:2b:
b0:9a:ae:60:ea:82:64:75:04:ad:3b:a3:ea:a1:e9:c0:1f:57:
de:09:40:5a:dd:1b:f3:f9:2d:6d:21:bd:f0:fe:e2:13:b3:06:
97:94:ce:96:2f:cb:ec:4e:00:8d:ef:b6:f7:24:a6:88:82:da:
3c:5e:cc:8f:76:e3:32:71:10:37:57:16:0f:9f:e7:d2:80:73:
6f:92:20:fd:0c:c4:06:f4:31:dd:0e:fa:36:f6:81:b7:92:d7:
3c:bb:23:8e:a3:10:84:83:0f:db:97:d6:62:79:62:72:d1:89:
4f:42:29:bf:d3:cc:f8:2a:26:e5:9c:89:b0:36:f4:ce:32:e0:
72:f3:e8:6e:72:cd:4d:e1:75:1f:0a:a4:ff:ae:d4:21:3a:b6:
6d:d8:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:24:25 2025 by rpki-client