Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8m_gpfApJLAISJCaQeaSRb1RQ0.roa
File: M8m_gpfApJLAISJCaQeaSRb1RQ0.roa (raw, json)
Hash identifier: hp8yIDZhabQgz1YeBqa6smgPjQgHppjeceZcZf04I+I=
Subject key identifier: 33:C9:BF:82:97:C0:A4:92:C0:21:22:42:69:07:9A:49:16:F5:45:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B4A8D51E240B0A1307B34F60CC929045
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8m_gpfApJLAISJCaQeaSRb1RQ0.roa
Signing time: Tue 13 Jun 2023 12:09:03 +0000
ROA not before: Tue 13 Jun 2023 12:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:a8:d5:1e:24:0b:0a:13:07:b3:4f:60:cc:92:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 12:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33c9bf8297c0a492c021224269079a4916f5450d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:e4:47:8b:83:30:1e:ff:4f:d9:78:a5:c2:
a2:0b:77:92:17:22:39:53:33:28:10:ac:b7:9b:ae:
22:f3:a6:73:03:6e:c9:7e:96:d5:4f:01:ea:d3:46:
94:56:6e:34:34:7a:fd:9f:d4:96:bd:c7:7b:2f:b8:
fe:0f:2d:52:1f:c1:87:dc:d1:e0:04:53:2b:85:58:
85:a4:6a:8a:b1:43:96:5d:a9:d3:80:68:6b:84:8b:
fd:68:dd:ea:49:36:a5:ab:95:bd:94:f2:fd:d3:93:
dc:bd:ae:c4:73:07:83:99:29:f7:fd:1a:2f:a6:12:
78:9b:6b:7b:36:3e:f5:fc:50:4d:a2:42:b2:3e:46:
72:e1:c2:3a:34:fd:31:b3:e9:fb:a1:a6:da:10:3a:
35:ba:7e:e8:90:1a:33:15:b9:20:87:ef:3d:28:57:
62:ef:7f:eb:84:27:dd:a9:60:da:76:45:fc:31:2e:
6f:03:74:69:5c:5f:5f:0a:3a:04:05:c8:50:07:22:
f9:72:a5:ff:ab:78:d6:d3:bc:59:da:7a:a7:28:cb:
ea:23:f2:e7:06:8d:3f:af:ff:bc:14:51:15:85:46:
2d:f5:ab:94:35:00:53:22:25:1a:14:77:20:2c:bf:
0c:12:79:f4:ca:97:93:ef:c4:30:48:d4:58:4a:cc:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:BF:82:97:C0:A4:92:C0:21:22:42:69:07:9A:49:16:F5:45:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M8m_gpfApJLAISJCaQeaSRb1RQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:a1:59:d8:11:5c:97:3e:ea:84:ae:18:85:40:9e:c7:f7:6e:
be:cd:c2:44:5e:65:c0:af:da:dc:1f:21:2d:ce:28:25:6f:d7:
55:8f:12:10:7b:4f:33:0e:46:2e:bf:9e:9a:ca:d1:ed:bf:1b:
15:c6:39:ca:9b:5f:0b:e5:06:4d:91:c1:6b:16:3a:eb:9e:ee:
76:0c:a7:a7:fe:5a:e0:a7:cb:dd:86:c0:d2:90:c3:56:f7:4b:
f7:81:c5:4b:dc:01:a8:32:81:35:93:ba:14:7e:30:94:92:a6:
52:23:86:fc:e3:24:a8:a9:4d:0a:92:08:91:5f:4a:d6:de:4f:
00:2e:03:bf:70:1b:5f:33:95:95:09:6a:52:3b:b5:31:82:00:
dd:11:80:fd:cc:64:05:72:5e:86:f5:4c:e1:bd:fc:3b:07:3b:
94:c6:a0:52:e3:be:de:d1:ea:0e:36:00:cd:c0:18:e1:9c:04:
d8:ae:f0:6a:b8:74:e6:46:80:24:5b:ef:85:df:25:5f:e3:18:
bc:f1:10:47:0c:6a:59:d3:2d:a2:ad:66:6a:a1:42:e3:f6:36:
cb:05:f2:6a:b0:a8:c3:4a:23:e0:70:80:29:dd:83:a1:2d:54:
c8:4f:74:2d:61:e2:04:c6:13:da:e6:7a:f8:14:b9:de:a5:08:
7b:44:45:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi0qNUeJAsKEwezT2DMkpBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMTIwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2M5YmY4Mjk3YzBhNDkyYzAyMTIyNDI2OTA3OWE0OTE2ZjU0NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1PkR4uDMB7/T9l4pcKiC3eSFyI5
UzMoEKy3m64i86ZzA27JfpbVTwHq00aUVm40NHr9n9SWvcd7L7j+Dy1SH8GH3NHg
BFMrhViFpGqKsUOWXanTgGhrhIv9aN3qSTalq5W9lPL905Pcva7EcweDmSn3/Rov
phJ4m2t7Nj71/FBNokKyPkZy4cI6NP0xs+n7oabaEDo1un7okBozFbkgh+89KFdi
73/rhCfdqWDadkX8MS5vA3RpXF9fCjoEBchQByL5cqX/q3jW07xZ2nqnKMvqI/Ln
Bo0/r/+8FFEVhUYt9auUNQBTIiUaFHcgLL8MEnn0ypeT78QwSNRYSsx+cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDPJv4KXwKSSwCEiQmkHmkkW9UUNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTThtX2dwZkFwSkxBSVNKQ2FRZWFTUmIxUlEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFmhWdgRXJc+6oSuGIVA
nsf3br7NwkReZcCv2twfIS3OKCVv11WPEhB7TzMORi6/nprK0e2/GxXGOcqbXwvl
Bk2RwWsWOuue7nYMp6f+WuCny92GwNKQw1b3S/eBxUvcAagygTWTuhR+MJSSplIj
hvzjJKipTQqSCJFfStbeTwAuA79wG18zlZUJalI7tTGCAN0RgP3MZAVyXob1TOG9
/DsHO5TGoFLjvt7R6g42AM3AGOGcBNiu8Gq4dOZGgCRb74XfJV/jGLzxEEcMalnT
LaKtZmqhQuP2NssF8mqwqMNKI+BwgCndg6EtVMhPdC1h4gTGE9rmevgUud6lCHtE
RTg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:08 2025 by rpki-client