Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9ZCrfsVyj73OosQcKB9m6tLZhg.roa
File: M9ZCrfsVyj73OosQcKB9m6tLZhg.roa (raw, json)
Hash identifier: ra2s9VqfvVDoGWq3OrzSzRvYld2Xnoay7c8mxUtnGd4=
Subject key identifier: 33:D6:42:AD:FB:15:CA:3E:F7:3A:8B:10:70:A0:7D:9B:AB:4B:66:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D7389D0C5F7212264584CCD5A3C428C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9ZCrfsVyj73OosQcKB9m6tLZhg.roa
Signing time: Tue 08 Aug 2023 22:15:58 +0000
ROA not before: Tue 08 Aug 2023 22:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:38:9d:0c:5f:72:12:26:45:84:cc:d5:a3:c4:28:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 22:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33d642adfb15ca3ef73a8b1070a07d9bab4b6618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:4e:8f:b4:8d:d9:5b:45:a2:ba:42:69:76:
aa:35:7d:52:cf:e2:46:28:b8:3b:29:24:ef:4e:9e:
05:13:2b:69:b8:4a:a5:a5:de:e7:84:b5:88:54:a3:
87:81:86:fd:a1:88:d5:33:a7:8c:e7:18:b0:08:fa:
fa:2d:fb:98:d5:9a:70:5a:29:c4:ca:9c:da:57:fb:
6f:98:5c:22:35:69:1e:e2:d3:f9:56:76:dd:f6:00:
fe:d5:0c:66:6c:e4:c2:6d:58:40:fd:cd:bd:ca:cc:
2c:ab:28:ad:fe:6f:25:dc:4b:8f:db:0d:a5:ea:95:
0a:1d:b8:97:51:03:2d:1f:56:a5:1d:5d:c7:83:17:
dc:94:95:05:23:7d:b3:e5:66:1d:43:d5:66:de:34:
51:e0:29:62:82:1d:54:1d:f7:cb:8a:2d:82:92:94:
17:04:de:01:51:8e:fa:b1:c7:68:3e:d2:ce:a2:46:
09:92:97:a1:ab:20:a5:69:aa:04:6a:45:89:aa:36:
b4:28:97:0d:de:3a:37:c7:74:e2:87:41:74:09:5b:
95:c6:58:fa:97:31:ca:41:74:30:a9:89:6d:70:9f:
f8:45:61:f5:20:2b:ce:23:fd:9e:f5:3c:5b:b7:4f:
43:22:a6:14:c6:22:2b:9d:31:7e:d3:d8:c0:04:c3:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:42:AD:FB:15:CA:3E:F7:3A:8B:10:70:A0:7D:9B:AB:4B:66:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9ZCrfsVyj73OosQcKB9m6tLZhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:70:d9:0e:a0:0b:80:99:5b:c0:4a:e4:dc:e0:39:b0:30:88:
37:ba:a9:3a:22:4a:2f:f5:10:8f:e2:02:80:1d:e8:5c:68:08:
b4:3f:4e:bd:7d:9d:eb:50:78:28:6e:e4:01:c3:b5:72:4e:91:
54:34:c9:18:14:e5:a8:a9:2c:32:5c:c9:a8:94:69:00:59:e9:
e5:56:27:46:96:a9:9e:00:23:87:3f:4f:78:c3:51:c6:09:a1:
2f:6a:51:70:c2:71:31:19:6f:b4:ab:08:ac:8a:29:f4:f9:cf:
df:f7:95:ce:87:26:19:5b:b0:23:25:3b:60:b5:b2:e2:8b:70:
92:e5:45:1b:89:f3:33:8b:ee:cb:46:7e:e0:40:16:5b:8a:e6:
47:1f:07:33:7a:78:db:9d:13:d5:3c:de:83:4b:4c:85:8c:50:
ff:ca:d7:ec:c8:85:bb:41:48:1b:84:fb:bd:d1:8e:f0:56:61:
51:19:04:9a:51:1c:67:99:9e:12:2f:df:8a:bf:9c:c8:9c:87:
1b:9e:82:06:66:f5:30:f0:b4:7d:7b:fb:eb:a9:90:6a:88:3c:
dc:7c:47:3c:f3:96:3f:73:24:c3:ca:1e:57:98:02:3d:9b:d6:
a8:99:e2:30:82:cf:e6:2a:49:b1:e0:ca:f9:19:75:f0:b8:b0:
ca:cf:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:49 2025 by rpki-client