Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1-pBgm9yz1Ys1LYkQLQxQ8uKUY.roa
File: M1-pBgm9yz1Ys1LYkQLQxQ8uKUY.roa (raw, json)
Hash identifier: LAJtDRUmk6SAn2F97UbhEGsZ0czHqiKPpzvNRzqCy9s=
Subject key identifier: 33:5F:A9:06:09:BD:CB:3D:58:B3:52:D8:91:02:D0:C5:0F:2E:29:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D87F740E2A2BDA6D2B464EEF2DE23923
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1-pBgm9yz1Ys1LYkQLQxQ8uKUY.roa
Signing time: Wed 09 Aug 2023 04:12:58 +0000
ROA not before: Wed 09 Aug 2023 04:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:7f:74:0e:2a:2b:da:6d:2b:46:4e:ef:2d:e2:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 04:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=335fa90609bdcb3d58b352d89102d0c50f2e2946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:7f:05:37:62:49:ce:54:11:10:08:fe:05:
b5:5e:ce:1c:4a:ac:f6:8a:03:9b:be:42:d0:3e:6a:
44:18:c1:74:3d:fd:4a:9c:a5:83:d5:40:66:48:e2:
da:b0:35:f8:91:e6:63:ed:3b:cf:38:a5:43:1c:fa:
3d:90:e4:ec:e7:bd:d1:97:82:07:41:ba:c6:0a:e6:
02:f5:6d:7a:d0:a8:22:8e:39:36:8f:82:c2:c8:aa:
58:33:9c:f2:4a:cd:34:8f:72:29:32:e0:b6:a4:1e:
1e:42:1b:5a:b6:ca:52:22:6a:6b:30:fc:a5:89:ce:
a8:95:f8:28:df:02:a7:7f:a5:1e:5b:53:db:6c:8c:
bc:f2:cf:45:93:a7:5e:6c:c6:76:fd:42:19:5d:88:
2b:b9:29:10:82:9a:ac:71:c2:01:61:14:36:d2:fc:
bb:61:f2:f8:b0:86:ba:41:05:3d:ce:1d:6b:7a:54:
e0:2a:73:3e:20:c5:cd:dd:59:2c:47:bf:5d:24:1a:
04:0e:41:19:9e:84:11:7e:13:01:c6:de:09:e8:da:
da:8b:21:aa:79:f7:eb:7a:8b:15:62:83:5d:f2:70:
db:c0:6c:f1:55:80:b7:e3:1a:fb:8a:3c:6f:b0:d6:
0a:5f:da:81:96:cf:51:6e:c8:b5:5c:20:1b:e8:f5:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:A9:06:09:BD:CB:3D:58:B3:52:D8:91:02:D0:C5:0F:2E:29:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1-pBgm9yz1Ys1LYkQLQxQ8uKUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:4b:a6:2c:df:f3:76:29:09:81:67:b7:06:eb:c0:87:0b:57:
a9:84:9b:fc:b1:1e:a5:91:25:b6:7b:c6:df:e8:66:4e:56:57:
ea:17:a9:6f:ea:96:4b:41:be:58:fb:33:49:47:58:c0:4d:53:
73:77:f5:8a:9d:f7:8b:ad:6b:49:f6:87:3f:4d:9f:ed:46:2e:
62:27:a4:61:6b:c9:5e:51:e8:c6:f8:5e:88:79:bf:23:04:64:
94:d7:a7:9a:bb:4b:6c:0f:21:9f:a3:4a:7a:e0:47:e8:a2:ee:
0f:e6:e7:de:6a:a1:81:a4:cb:67:c7:10:9a:5c:eb:dc:9f:9d:
67:7d:53:d0:1f:73:fc:05:3f:c6:b7:97:c7:7c:fc:38:62:60:
d0:77:9d:5a:e9:f8:a2:51:b4:26:8c:2d:b0:19:c0:e9:f1:9e:
50:62:6d:7f:c9:0f:1a:a8:3c:79:35:02:97:94:e9:15:d2:1f:
09:3e:04:f2:db:84:27:90:4d:7c:98:e8:d4:42:e1:67:00:b9:
9e:0a:9f:ee:9b:2c:8c:c5:d5:64:a2:9e:3e:00:65:8a:59:5e:
16:c8:da:cf:a6:ef:f4:20:fc:4b:bf:3b:20:40:ca:5f:7a:05:
15:45:f8:a2:71:43:7d:be:21:1a:cf:50:01:fb:12:7d:88:80:
0e:f6:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:23:47 2025 by rpki-client