Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMM2lQxkKe4tKF0S2_M3qncE6Gk.roa
File: yMM2lQxkKe4tKF0S2_M3qncE6Gk.roa (raw, json)
Hash identifier: KL9BZLc/d+rkqfcrclc01nOm1jHSievVnraMduqNXbM=
Subject key identifier: C8:C3:36:95:0C:64:29:EE:2D:28:5D:12:DB:F3:37:AA:77:04:E8:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188544FF01ECB458721DD4EF974DCC7862A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMM2lQxkKe4tKF0S2_M3qncE6Gk.roa
Signing time: Thu 25 May 2023 19:08:24 +0000
ROA not before: Thu 25 May 2023 19:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:4f:f0:1e:cb:45:87:21:dd:4e:f9:74:dc:c7:86:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 19:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8c336950c6429ee2d285d12dbf337aa7704e869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:54:0a:48:95:0a:cf:43:8e:18:90:9d:78:
a6:f8:08:b6:bf:85:86:62:66:6c:25:5e:bb:cb:2d:
50:38:e1:61:26:d1:81:34:00:f8:4e:c4:9f:00:40:
78:bf:24:9e:9a:49:ca:1b:b3:64:3b:b3:c0:12:1d:
2e:6b:6d:54:4b:1c:b7:86:0a:5d:8a:e1:5e:ad:86:
7c:0f:b0:b0:53:39:88:49:ac:1c:79:55:87:a7:f2:
0b:7e:1f:5f:38:d7:0f:0c:1f:85:6b:f8:52:7c:2b:
05:2b:36:6a:51:92:e3:f5:d6:10:94:38:f1:23:3e:
91:4e:f7:49:61:c6:0f:31:71:78:c8:b7:01:95:dc:
b1:d7:28:f9:22:a9:f4:4c:16:4b:00:e8:05:c0:de:
e6:5d:d1:1a:93:e8:1a:1a:4f:cd:b5:64:f3:ad:ee:
0c:4e:75:5c:4c:e1:b9:41:6b:80:df:dd:d8:1f:69:
20:c2:5d:0f:56:0c:d0:7a:9f:07:2a:07:39:8e:f8:
da:f2:93:1f:b0:81:dc:68:46:d2:cc:92:0e:f4:e4:
a4:4b:e2:f0:2d:a9:91:00:05:f2:cb:87:24:05:ec:
23:85:d9:60:6b:6e:8d:53:8c:bd:13:85:05:fe:b8:
4e:bc:0f:6d:e5:d8:fc:d8:e7:51:d3:f5:93:97:6a:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:36:95:0C:64:29:EE:2D:28:5D:12:DB:F3:37:AA:77:04:E8:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yMM2lQxkKe4tKF0S2_M3qncE6Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:20:49:f2:fa:34:42:d3:bb:99:33:69:89:6b:08:7d:f8:8b:
cb:91:4b:ac:1e:b1:f9:c9:4e:05:71:de:ec:5e:0a:d5:f7:9a:
4e:87:5a:67:11:30:7f:3d:51:25:21:34:13:64:71:7f:30:f6:
4c:7e:e1:bf:4b:1a:b0:cc:14:a0:24:9a:ef:db:70:90:0d:c5:
16:4c:e7:f6:9b:ef:56:8a:14:41:be:8b:b8:23:95:5e:a0:e5:
31:ca:dd:f6:67:10:8d:46:04:95:a7:ff:84:25:4e:b2:bd:f9:
ac:9f:7c:f2:bb:5b:33:1d:06:00:41:8e:57:32:05:a0:c1:11:
75:41:23:82:5d:96:0b:05:85:88:45:71:7f:62:0b:e4:60:71:
b4:82:71:49:56:9e:72:a7:21:6f:25:62:5e:76:57:d9:db:b9:
c9:b6:ac:b8:fa:4a:70:dd:15:db:30:13:e1:e5:d4:61:09:bb:
ad:a7:d4:e3:16:dc:f7:23:b1:b5:85:6b:b0:25:b9:3e:ff:7b:
dd:67:5d:15:5a:fb:b7:ae:d8:21:fb:4d:0f:17:d7:8c:d9:1a:
55:66:fc:3e:12:1a:fc:11:65:e0:70:74:6d:b0:79:f2:b7:ac:
9d:9f:80:47:46:13:fa:80:76:c4:c4:42:22:f6:3e:8b:fe:78:
3d:63:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:52:27 2025 by rpki-client