Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mi0xA7vj5Vq1vItbCuT8HmDLdsU.roa
File: Mi0xA7vj5Vq1vItbCuT8HmDLdsU.roa (raw, json)
Hash identifier: 4X/6jjIO1GJkfXzYhvoQJBC+aQaObV1Q3rK0cjMyfso=
Subject key identifier: 32:2D:31:03:BB:E3:E5:5A:B5:BC:8B:5B:0A:E4:FC:1E:60:CB:76:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EA92AB18B0B9CAEC9840DF5561823F37
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mi0xA7vj5Vq1vItbCuT8HmDLdsU.roa
Signing time: Thu 16 Mar 2023 13:18:45 +0000
ROA not before: Thu 16 Mar 2023 13:18:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:92:ab:18:b0:b9:ca:ec:98:40:df:55:61:82:3f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 13:18:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=322d3103bbe3e55ab5bc8b5b0ae4fc1e60cb76c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:77:ae:f9:6e:12:50:af:6f:60:74:5e:55:
64:8a:db:78:4f:cb:29:64:72:b5:5d:96:fb:34:1e:
48:d4:d7:ef:82:a0:f9:11:9e:d1:ca:ee:8d:df:fe:
9b:ee:53:51:1a:ff:0c:27:c7:23:1a:ce:b5:03:b0:
8a:aa:fa:30:8c:72:81:86:3d:c5:5a:3c:5e:07:46:
da:8d:74:de:58:0d:ca:16:9e:cf:20:1b:90:f5:8d:
cc:9a:7c:a2:ac:38:56:05:76:25:a0:9f:26:8e:7e:
49:ac:05:03:7c:3d:f2:1c:3e:b0:e5:8f:42:9a:d1:
71:a5:3f:c1:7b:86:33:43:56:16:45:86:a5:67:51:
6c:a2:6f:25:3b:1d:9d:5f:8a:ed:34:1e:aa:a2:24:
7b:84:e9:f9:e6:0d:0e:b7:46:4e:8d:27:b2:6e:a7:
ef:3b:2d:58:f3:25:7e:bb:e1:0f:a6:78:18:30:74:
c4:3b:7b:cc:32:fa:50:dc:26:c1:e5:bf:c5:8f:e5:
aa:28:e8:49:e3:e6:72:c8:9a:7f:fd:c1:c1:7b:b1:
c8:4c:71:31:80:e0:37:60:a7:1a:64:a4:e4:95:db:
0e:bd:bd:e6:b6:28:04:c0:d0:6f:d2:9b:2c:1b:8b:
c2:9f:a7:ca:57:ce:30:f4:a7:05:c3:b5:a9:88:21:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:31:03:BB:E3:E5:5A:B5:BC:8B:5B:0A:E4:FC:1E:60:CB:76:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mi0xA7vj5Vq1vItbCuT8HmDLdsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:51:9e:c8:ff:6c:d2:68:0f:ae:42:a9:57:c8:2d:e7:b3:f7:
10:15:46:74:59:dc:12:87:6a:9a:7b:f0:5f:f8:2f:cb:10:ed:
75:45:d8:d2:83:ac:22:a2:52:3d:93:c7:37:42:df:a8:03:a9:
02:6c:5b:18:8e:73:45:84:06:c1:7e:c6:97:fd:d7:e8:8a:2a:
50:36:39:71:7a:15:ca:b6:6a:fe:6e:97:d5:dc:1c:5f:4c:81:
6f:5a:38:38:27:0c:f3:a2:0b:53:a4:a6:c0:6f:8f:66:22:ad:
97:49:30:c6:e5:7c:65:ec:83:d8:b1:a7:e0:41:a2:6f:fd:a1:
75:a9:f9:be:80:a7:68:2f:82:9c:87:76:a7:06:72:ce:4d:c9:
cc:e3:22:32:b8:82:f9:a0:3e:54:da:4e:bd:be:48:22:08:9b:
e9:ac:1c:9b:7a:cb:39:78:b4:65:0e:0a:3a:1e:d1:b2:81:20:
2b:a1:90:28:b5:d5:ad:f3:be:ec:4d:4c:7c:b8:18:94:91:4a:
7e:a8:6b:cc:41:c6:38:3c:e1:62:aa:44:df:99:da:17:06:6a:
fc:4f:32:6e:5e:35:ab:76:83:22:3e:a7:25:c3:f9:8f:69:61:
80:bb:22:22:88:7e:6e:f3:b3:de:cc:37:d1:f7:7a:81:40:2a:
a3:91:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:23:18 2025 by rpki-client