Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-92Fd8Jq4cYVeWwIt_CMMgyclgs.roa
File: 1-92Fd8Jq4cYVeWwIt_CMMgyclgs.roa (raw, json)
Hash identifier: mRGixViTjft1rtH5Iy1tLirzS7xw72WsFcqgEyEc2GQ=
Subject key identifier: FB:DD:85:77:C2:6A:E1:C6:15:79:6C:08:B7:F0:8C:32:0C:9C:96:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018321119250BB693D0DF79DBADD914A2EC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-92Fd8Jq4cYVeWwIt_CMMgyclgs.roa
Signing time: Fri 09 Sep 2022 07:05:43 +0000
ROA not before: Fri 09 Sep 2022 07:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:2110:a6ce/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:11:92:50:bb:69:3d:0d:f7:9d:ba:dd:91:4a:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 07:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbdd8577c26ae1c615796c08b7f08c320c9c960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:4a:7d:66:bd:a7:f1:61:7b:36:0a:59:d9:
16:da:6d:56:4f:cf:1f:90:76:8c:08:77:a2:87:36:
f8:f0:c0:0a:08:af:9a:da:92:b9:ba:16:87:04:00:
42:24:10:ea:cc:45:7a:96:19:5f:30:e0:7d:e9:7d:
29:b9:65:da:71:ff:26:90:0e:2e:65:e4:a0:c2:4a:
65:09:64:cc:24:71:f1:67:28:03:29:57:97:36:81:
85:31:52:d2:12:54:68:d9:f7:9b:f7:91:7f:0b:a6:
05:d1:43:28:b1:e7:77:4b:43:ca:c2:3d:65:13:79:
9d:08:01:2e:25:14:06:3a:e1:e4:b2:cb:93:8d:2e:
97:42:a9:d4:e2:ba:27:52:d6:ec:6b:86:1f:69:7c:
62:95:86:ff:f9:14:bb:a4:9c:8f:ec:93:94:20:ec:
84:64:1d:fc:28:d5:a8:54:cd:c0:b7:d7:2c:3e:2c:
65:dd:39:a0:c9:27:d3:83:5f:48:f6:43:7c:a3:81:
53:ba:5c:50:1b:5d:df:94:9e:6e:e0:6c:8c:23:4d:
f2:f9:8d:57:f9:1f:f2:52:a8:bf:39:c8:23:6b:9e:
df:8c:fa:1e:ff:4d:44:0d:ce:56:0e:76:db:5b:80:
fa:41:27:61:31:be:83:b0:fd:24:06:96:3c:6b:b0:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:85:77:C2:6A:E1:C6:15:79:6C:08:B7:F0:8C:32:0C:9C:96:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-92Fd8Jq4cYVeWwIt_CMMgyclgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:a3:14:48:d1:f3:4a:4c:9c:2f:24:a0:fe:89:b6:bb:8f:66:
30:2b:79:d0:f6:44:7e:11:37:52:94:7d:94:75:fc:ed:93:b0:
a3:7d:6e:99:b2:dc:51:77:25:8e:51:5e:33:f6:a2:74:fd:86:
62:b1:95:c6:07:00:8f:14:a5:dd:35:ad:a9:c4:ba:0c:14:d1:
b9:27:9c:a9:b4:04:c5:07:52:bd:dd:03:8b:32:65:4d:f0:31:
9e:8c:80:04:88:33:87:1e:18:e2:0a:31:6d:e8:35:d2:c3:8b:
9e:49:49:c8:38:49:de:6b:0c:09:c6:69:d4:0a:bd:f3:57:57:
f1:16:fb:30:02:90:a2:25:a0:31:6d:d7:31:e7:fc:66:44:32:
75:ce:0e:8a:87:1d:b7:6d:4f:2d:61:97:58:55:b2:ce:96:33:
09:33:5d:6c:76:b9:44:60:7c:09:51:b1:20:a1:94:7c:09:b9:
33:01:5c:d6:bc:dd:55:2c:a0:cb:f8:05:f0:54:a7:98:31:f5:
86:c1:2d:51:df:55:51:47:e8:ff:40:a4:7c:89:5f:b4:c1:10:
34:8f:f1:95:32:57:b4:0a:3d:06:9f:eb:59:a7:7a:80:70:50:
f0:1a:14:ed:3b:7f:92:c8:53:a6:7f:9a:d0:69:c2:05:a4:6f:
f0:16:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:48:13 2025 by rpki-client