Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M6stTlDQHeyqJjYUA5g3jRAwSsE.roa
File: M6stTlDQHeyqJjYUA5g3jRAwSsE.roa (raw, json)
Hash identifier: 257xq4X1ovaYkPZQ8/BIqjT/cTUBoR5FPrxAKeioF9g=
Subject key identifier: 33:AB:2D:4E:50:D0:1D:EC:AA:26:36:14:03:98:37:8D:10:30:4A:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E71FD053314CCB5550CCA72089190FAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M6stTlDQHeyqJjYUA5g3jRAwSsE.roa
Signing time: Wed 15 Mar 2023 21:14:27 +0000
ROA not before: Wed 15 Mar 2023 21:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:1f:d0:53:31:4c:cb:55:50:cc:a7:20:89:19:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 21:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ab2d4e50d01decaa2636140398378d10304ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:20:b0:f0:75:60:47:ef:ec:9a:d9:88:df:
1f:dc:f5:20:e6:b6:fe:6b:be:3f:70:08:af:27:1d:
84:3f:5b:a8:b2:43:58:d2:9b:29:4d:45:47:dd:f9:
1d:d7:d9:9f:24:18:c8:04:ba:b4:88:90:56:b1:9a:
12:71:d5:3b:8f:9d:fb:89:6f:b8:c6:27:fa:d6:73:
06:97:77:1a:62:1e:1c:f6:1a:21:d2:eb:92:15:2f:
98:c2:69:5b:5c:40:cc:6e:b5:07:b4:9f:bd:a6:d2:
a7:63:26:55:28:45:ef:a4:7d:04:7d:0c:ab:65:8e:
62:19:e3:62:d2:7a:20:32:ba:25:c8:67:54:7c:e8:
96:bc:21:9a:a9:64:4b:11:a9:78:c6:34:87:f2:17:
be:d9:b3:ee:4f:14:e3:84:30:b2:90:eb:eb:17:fe:
69:bf:03:9d:2d:7e:44:fc:14:f4:ad:2b:f1:d7:86:
ec:03:dd:92:ba:a4:43:08:a0:3f:cb:f2:ad:7e:fd:
f2:ff:09:80:e6:b4:b5:ad:0a:86:10:1e:1d:0c:b3:
4f:ba:4c:6a:16:26:90:9f:30:91:e2:ae:9b:91:e8:
07:8b:78:9e:95:b6:f4:d9:dc:6f:db:42:4a:0d:67:
b9:cc:07:e8:dd:23:1f:2f:33:6f:db:76:ab:b4:85:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:2D:4E:50:D0:1D:EC:AA:26:36:14:03:98:37:8D:10:30:4A:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M6stTlDQHeyqJjYUA5g3jRAwSsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:3d:a0:18:a3:83:7f:59:86:d7:b0:2e:0a:c5:47:11:26:9a:
42:96:d2:84:5d:1e:00:c4:50:23:d0:1f:b3:ff:2d:17:e0:93:
4d:77:59:2a:ad:80:88:9e:3d:94:c7:ee:77:de:2a:29:39:d6:
57:a1:5a:e8:8d:76:97:b0:cd:7b:b3:6a:14:4d:99:af:5d:2b:
c0:6b:36:dc:8a:fe:7a:3a:20:5f:42:d4:1f:25:a0:93:ab:ab:
fb:08:f5:dd:64:cf:43:87:44:3e:c3:b2:2d:32:cb:c8:37:25:
8b:fe:7c:de:11:33:50:81:3c:0c:bc:66:d9:5c:76:e0:bc:68:
8a:e0:49:e1:34:f1:76:e0:97:fc:ac:41:2d:2b:3f:2b:15:71:
6c:bc:81:75:8a:97:dc:12:33:a7:90:96:3a:61:a7:96:c0:c8:
c6:db:83:d7:2d:ac:7a:25:d1:e0:56:c2:63:88:14:5b:fe:6a:
7e:8a:23:95:52:cb:c8:64:bd:48:4a:7b:a0:8b:c7:e1:ab:fa:
fb:1a:27:cc:91:86:43:8b:95:91:fd:53:89:eb:36:07:02:54:
16:9c:a6:56:2a:4c:5d:c8:43:be:ba:78:23:cf:8b:c8:da:38:
19:fe:2f:42:e4:e2:ec:a7:83:ce:59:33:c8:c8:d1:ed:08:2c:
cc:28:58:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbnH9BTMUzLVVDMpyCJGQ+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE1MjExNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2FiMmQ0ZTUwZDAxZGVjYWEyNjM2MTQwMzk4Mzc4ZDEwMzA0YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3wgsPB1YEfv7JrZiN8f3PUg5rb+
a74/cAivJx2EP1uoskNY0pspTUVH3fkd19mfJBjIBLq0iJBWsZoScdU7j537iW+4
xif61nMGl3caYh4c9hoh0uuSFS+YwmlbXEDMbrUHtJ+9ptKnYyZVKEXvpH0EfQyr
ZY5iGeNi0nogMrolyGdUfOiWvCGaqWRLEal4xjSH8he+2bPuTxTjhDCykOvrF/5p
vwOdLX5E/BT0rSvx14bsA92SuqRDCKA/y/Ktfv3y/wmA5rS1rQqGEB4dDLNPukxq
FiaQnzCR4q6bkegHi3ielbb02dxv20JKDWe5zAfo3SMfLzNv23artIXBvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDOrLU5Q0B3sqiY2FAOYN40QMErBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTTZzdFRsRFFIZXlxSmpZVUE1ZzNqUkF3U3NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJc9oBijg39ZhtewLgrF
RxEmmkKW0oRdHgDEUCPQH7P/LRfgk013WSqtgIiePZTH7nfeKik51lehWuiNdpew
zXuzahRNma9dK8BrNtyK/no6IF9C1B8loJOrq/sI9d1kz0OHRD7Dsi0yy8g3JYv+
fN4RM1CBPAy8ZtlcduC8aIrgSeE08Xbgl/ysQS0rPysVcWy8gXWKl9wSM6eQljph
p5bAyMbbg9ctrHol0eBWwmOIFFv+an6KI5VSy8hkvUhKe6CLx+Gr+vsaJ8yRhkOL
lZH9U4nrNgcCVBacplYqTF3IQ766eCPPi8jaOBn+L0Lk4uyng85ZM8jI0e0ILMwo
WCA=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:31:34 2025 by rpki-client