Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1bajyur_1TEH29P-VRnFnnv2Fk.roa
File: M1bajyur_1TEH29P-VRnFnnv2Fk.roa (raw, json)
Hash identifier: 7u+0nN/68gPGMixg4bNyXADHgdExlolI15wILU2+CtE=
Subject key identifier: 33:56:DA:8F:2B:AB:FF:54:C4:1F:6F:4F:F9:54:67:16:79:EF:D8:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188898A76D6ACBC36534D64D7783A9E566B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1bajyur_1TEH29P-VRnFnnv2Fk.roa
Signing time: Mon 05 Jun 2023 03:12:12 +0000
ROA not before: Mon 05 Jun 2023 03:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:89:8a:76:d6:ac:bc:36:53:4d:64:d7:78:3a:9e:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 03:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3356da8f2babff54c41f6f4ff954671679efd859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:f6:ad:35:3d:19:7e:4c:55:84:81:2b:74:
d8:9f:23:c3:5b:91:20:4c:ad:35:65:fc:ac:97:5b:
9a:a4:72:e4:f7:da:98:09:66:2a:b4:aa:80:40:b2:
6d:29:ce:4d:7a:54:01:27:9d:6b:b9:e1:42:66:bc:
2d:30:0d:37:04:f3:64:7c:f2:cb:39:7a:27:af:44:
62:2e:89:29:6c:09:2f:d8:96:33:53:31:89:a8:12:
a8:a7:5d:33:09:ad:8c:30:af:41:22:f5:ca:b8:43:
d5:14:45:b1:50:b8:dc:f9:54:db:2e:97:f9:39:22:
f0:89:82:12:60:97:c0:9f:48:94:cd:57:ab:b0:e5:
b5:80:80:fb:ba:4a:93:0c:6a:92:f0:97:99:d9:af:
fc:b4:bb:3f:94:22:52:da:b7:c7:ee:be:0c:7d:74:
f0:db:a9:15:a9:2e:ec:9b:30:57:e2:91:fe:96:38:
36:3a:e8:5b:37:3f:d3:f7:8f:4e:02:2f:bb:ff:1b:
68:ac:7f:da:d7:11:5c:f9:02:3f:4a:a6:65:7b:a5:
a4:78:9b:a0:18:7e:f7:33:d9:17:2d:ea:da:e5:e3:
0c:2f:34:3e:6b:47:3d:bf:cd:a6:9c:d0:21:02:07:
d9:70:6b:81:64:ac:41:5c:c6:d8:c2:46:bb:a5:b8:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:DA:8F:2B:AB:FF:54:C4:1F:6F:4F:F9:54:67:16:79:EF:D8:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M1bajyur_1TEH29P-VRnFnnv2Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:02:ed:67:d5:82:98:c6:3e:51:73:ef:a1:3d:81:f8:eb:7f:
1a:66:3a:7e:dd:af:e6:6f:f5:ef:c7:05:9f:17:9e:96:c9:e1:
a2:a1:e7:1a:7c:54:f7:2e:df:24:b0:19:de:07:04:0a:31:cb:
25:90:2b:9d:2f:f6:45:e0:8d:76:b9:dd:4d:d7:48:ef:a5:8c:
2b:30:8e:66:5d:91:50:38:11:3a:94:3a:cf:f3:95:0f:ab:6c:
04:44:c1:4d:e6:49:ba:3e:fe:df:c7:2c:ff:97:b8:6e:cc:5c:
2b:51:dd:e5:95:cf:ea:3d:6c:ee:12:c9:9d:46:02:1d:a3:9c:
69:b6:aa:a4:8d:11:f3:18:45:a8:83:d2:64:5c:7c:04:2b:bb:
c2:c7:2e:bb:16:2c:6d:24:43:25:4a:f2:e9:5f:75:10:b7:00:
d1:cf:a1:33:66:97:0c:af:f8:d4:cb:a8:16:3c:15:18:32:3c:
a6:47:eb:bb:4a:7c:13:61:75:ac:1a:58:a9:7c:c2:a6:65:74:
e8:21:96:07:b9:52:4d:fe:49:98:70:e5:40:3f:07:e7:e8:1f:
6f:66:8d:30:77:af:ed:a0:ae:a0:e1:d2:26:83:2c:57:c5:67:
94:c4:63:89:b8:c9:43:ca:06:9f:34:6a:c4:4e:30:21:27:88:
a8:28:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:31 2025 by rpki-client