Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sMMLWH9J__B1rLyl4vn90jzf7f4.roa
File: sMMLWH9J__B1rLyl4vn90jzf7f4.roa (raw, json)
Hash identifier: Qt8nrWaSoGfgWPMz2qoP8wMJq5G2f6zjyMeegAsmytM=
Subject key identifier: B0:C3:0B:58:7F:49:FF:F0:75:AC:BC:A5:E2:F9:FD:D2:3C:DF:ED:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018720A1CBB82C0E1AAD15F7D8AA7940CE62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sMMLWH9J__B1rLyl4vn90jzf7f4.roa
Signing time: Mon 27 Mar 2023 01:14:46 +0000
ROA not before: Mon 27 Mar 2023 01:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:20:a1:cb:b8:2c:0e:1a:ad:15:f7:d8:aa:79:40:ce:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 01:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c30b587f49fff075acbca5e2f9fdd23cdfedfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:3a:d4:3c:a1:46:89:32:c2:5f:2a:78:98:
7b:2f:3f:4a:57:aa:00:5d:5c:8a:2c:68:e2:00:8c:
19:6e:3f:b7:8d:b3:32:14:70:cb:ff:5f:83:e4:76:
62:5f:4a:72:b8:82:a2:a5:c5:63:9d:5b:30:f0:9e:
d7:49:7c:1f:67:90:2a:66:dd:18:b4:cd:e5:8a:f9:
e2:90:3d:ee:f7:59:51:08:bf:94:c8:32:2e:de:92:
a5:01:91:ae:c5:d2:95:68:73:fe:3c:e8:1e:c0:31:
73:b4:0e:eb:ff:90:2c:ca:3b:87:e4:00:25:b6:9c:
de:2c:b5:e8:a8:db:8a:23:4c:43:7f:bd:4c:25:39:
95:84:78:46:d5:ab:d3:6f:69:b4:2e:27:2b:a6:5b:
40:66:23:6e:e3:8e:0b:3c:3e:25:ab:a7:19:49:1a:
cf:4c:c9:2e:8a:d2:24:d2:86:45:79:be:bf:b2:09:
f6:3e:0c:8b:38:df:ff:cd:5c:af:13:5b:d5:a6:50:
76:51:00:92:df:73:53:9a:0d:8f:96:c5:ad:24:fd:
2f:c2:7b:0e:53:ee:80:7c:3d:33:d8:6c:b9:fa:e2:
ac:c1:d4:f6:38:09:34:fa:e7:59:87:ea:aa:74:a3:
ef:b9:00:8f:88:dd:4d:4e:43:14:36:67:fa:fa:a7:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:0B:58:7F:49:FF:F0:75:AC:BC:A5:E2:F9:FD:D2:3C:DF:ED:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sMMLWH9J__B1rLyl4vn90jzf7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f2:b7:72:9c:c0:93:31:b3:a9:0e:3a:b7:c0:17:62:f5:32:
c3:25:24:3e:0f:58:94:9a:13:da:87:50:fc:de:31:f4:6f:06:
72:50:45:62:e6:25:df:25:5b:99:ec:dc:fb:9e:e3:88:7b:bb:
0a:97:5e:85:4b:05:04:c0:a4:9c:50:aa:bb:60:2d:7c:1a:3d:
15:f4:35:4f:cf:de:e9:3a:35:be:4b:94:31:00:08:fe:a4:4d:
1d:5c:27:ac:3a:1a:6b:61:07:81:4e:31:3e:6d:2d:b3:b7:83:
6e:37:4f:99:75:3f:75:71:03:dd:5a:1e:19:bf:39:99:13:17:
f4:ab:7f:f5:4b:54:6a:4b:0c:63:e8:63:74:7a:cc:f9:f1:04:
6f:eb:f8:21:2e:97:64:be:df:65:0a:23:72:99:5d:c2:5a:99:
23:46:a1:e0:0a:27:2b:08:c2:34:33:c7:be:6e:87:65:6b:cd:
35:0a:94:02:96:f9:0d:79:3f:0e:12:ad:31:99:76:8a:4e:98:
19:e0:f7:de:8a:28:55:9f:67:bb:f6:ca:81:62:45:0c:88:50:
70:15:a2:17:6e:37:b2:21:a9:e2:35:f1:7c:9b:a7:ff:f9:59:
ee:60:2e:3d:2a:61:cc:eb:7f:8d:e3:1b:74:08:32:da:5d:54:
59:47:9a:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcgocu4LA4arRX32Kp5QM5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI3MDExNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGMzMGI1ODdmNDlmZmYwNzVhY2JjYTVlMmY5ZmRkMjNjZGZlZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNk61DyhRokywl8qeJh7Lz9KV6oA
XVyKLGjiAIwZbj+3jbMyFHDL/1+D5HZiX0pyuIKipcVjnVsw8J7XSXwfZ5AqZt0Y
tM3livnikD3u91lRCL+UyDIu3pKlAZGuxdKVaHP+POgewDFztA7r/5AsyjuH5AAl
tpzeLLXoqNuKI0xDf71MJTmVhHhG1avTb2m0LicrpltAZiNu444LPD4lq6cZSRrP
TMkuitIk0oZFeb6/sgn2PgyLON//zVyvE1vVplB2UQCS33NTmg2PlsWtJP0vwnsO
U+6AfD0z2Gy5+uKswdT2OAk0+udZh+qqdKPvuQCPiN1NTkMUNmf6+qeubQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLDDC1h/Sf/wday8peL5/dI83+3+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc01NTFdIOUpfX0Ixckx5bDR2bjkwanpmN2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHzyt3KcwJMxs6kOOrfA
F2L1MsMlJD4PWJSaE9qHUPzeMfRvBnJQRWLmJd8lW5ns3Pue44h7uwqXXoVLBQTA
pJxQqrtgLXwaPRX0NU/P3uk6Nb5LlDEACP6kTR1cJ6w6GmthB4FOMT5tLbO3g243
T5l1P3VxA91aHhm/OZkTF/Srf/VLVGpLDGPoY3R6zPnxBG/r+CEul2S+32UKI3KZ
XcJamSNGoeAKJysIwjQzx75uh2VrzTUKlAKW+Q15Pw4SrTGZdopOmBng996KKFWf
Z7v2yoFiRQyIUHAVohduN7IhqeI18Xybp//5We5gLj0qYczrf43jG3QIMtpdVFlH
mvc=
-----END CERTIFICATE-----
Generated at Fri May 2 14:24:39 2025 by rpki-client