Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt2yzLvyKi5YZ1nc4JnfzAipwew.roa
File: Mt2yzLvyKi5YZ1nc4JnfzAipwew.roa (raw, json)
Hash identifier: tZXWJSBR+2uI718UQsLZekfxSxXklmgOUA6aSrovj60=
Subject key identifier: 32:DD:B2:CC:BB:F2:2A:2E:58:67:59:DC:E0:99:DF:CC:08:A9:C1:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018467774FE3BEC9896BE15344EB2B74A811
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt2yzLvyKi5YZ1nc4JnfzAipwew.roa
Signing time: Fri 11 Nov 2022 16:13:03 +0000
ROA not before: Fri 11 Nov 2022 16:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:77:4f:e3:be:c9:89:6b:e1:53:44:eb:2b:74:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 16:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ddb2ccbbf22a2e586759dce099dfcc08a9c1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:c0:b7:ca:81:8a:60:d0:d6:b6:63:cf:dc:
29:ee:bb:a6:ea:5f:8c:a3:2f:48:26:0a:a8:14:7a:
a4:16:16:85:29:9d:16:7d:99:2a:90:e0:7c:0a:6c:
ea:54:48:99:9f:5c:b6:a4:4c:24:77:c0:66:41:a8:
7b:15:1a:d6:c2:c5:6e:82:ae:35:f7:6b:7b:48:d4:
4e:c9:01:5d:d1:62:f3:71:89:aa:41:0d:a0:f5:4f:
64:87:a6:07:41:e3:f7:63:d5:74:d2:04:86:6a:ad:
fb:98:9d:82:00:05:20:87:50:a4:9f:9e:87:af:a8:
6c:8d:da:3b:f0:a5:9a:7a:b4:e8:97:cd:d1:af:b2:
54:40:d6:66:4a:b0:6c:e6:00:a1:72:9f:8e:4f:a8:
37:83:0c:3d:d4:fd:cc:79:52:47:b7:95:6f:a6:80:
f9:5e:4e:e6:be:43:75:40:52:d5:bf:3c:e2:30:b5:
15:95:5d:0c:18:be:0e:4c:7f:0b:2c:c7:98:4b:6b:
b6:db:76:2e:10:a0:08:55:a0:a3:c5:e8:cb:97:18:
b0:f1:f1:18:51:7e:6e:8c:58:f9:76:1c:33:76:02:
9b:4b:eb:c4:de:36:99:fb:7b:1b:fa:0d:82:2d:81:
76:b1:f0:8c:bb:d1:93:43:d4:fe:35:4c:0f:db:c8:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:B2:CC:BB:F2:2A:2E:58:67:59:DC:E0:99:DF:CC:08:A9:C1:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt2yzLvyKi5YZ1nc4JnfzAipwew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f5:43:72:2c:35:31:e2:9f:04:db:1e:81:3d:e9:46:c2:32:
af:88:34:fb:95:c4:7d:48:b1:89:4f:4a:90:ad:b1:13:62:7a:
f8:7c:f6:36:b2:21:a5:34:bc:16:3f:c4:ad:a8:84:fc:1c:fc:
23:6d:c0:39:15:e6:75:e3:f6:08:8e:1a:c9:5f:f1:44:4b:d7:
c0:94:40:a3:44:11:29:d4:ea:90:88:34:4c:18:f5:41:05:84:
86:2a:89:e6:42:49:ab:14:88:7c:80:88:4d:f4:fa:ca:b3:5c:
5a:56:91:e8:c0:f3:69:c4:3c:b9:0e:86:00:96:ac:6e:78:4e:
d7:75:e7:05:d7:f8:92:37:65:a1:3b:5f:bf:c3:e4:f1:1e:bc:
5e:d0:13:e6:a6:27:e3:38:82:bf:2b:a2:6f:69:f2:b5:81:f4:
0f:35:dc:f0:c5:99:f6:7d:8b:cc:02:32:34:c7:f1:6e:7a:d0:
ae:b0:82:dc:4c:2d:79:08:ce:3f:20:3a:18:c8:e0:e6:ee:17:
45:c7:e0:f8:91:22:4a:bc:76:94:b7:db:14:50:ad:a8:60:a5:
e6:ec:33:72:0b:b1:7d:3d:d1:f5:61:3f:2a:f1:80:6a:b3:a9:
a8:3a:d7:50:8d:df:f1:83:5a:36:3a:b1:4b:97:35:35:11:3a:
a2:14:85:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRnd0/jvsmJa+FTROsrdKgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTExMTYxMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRkYjJjY2JiZjIyYTJlNTg2NzU5ZGNlMDk5ZGZjYzA4YTljMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKzAt8qBimDQ1rZjz9wp7rum6l+M
oy9IJgqoFHqkFhaFKZ0WfZkqkOB8CmzqVEiZn1y2pEwkd8BmQah7FRrWwsVugq41
92t7SNROyQFd0WLzcYmqQQ2g9U9kh6YHQeP3Y9V00gSGaq37mJ2CAAUgh1Ckn56H
r6hsjdo78KWaerTol83Rr7JUQNZmSrBs5gChcp+OT6g3gww91P3MeVJHt5VvpoD5
Xk7mvkN1QFLVvzziMLUVlV0MGL4OTH8LLMeYS2u223YuEKAIVaCjxejLlxiw8fEY
UX5ujFj5dhwzdgKbS+vE3jaZ+3sb+g2CLYF2sfCMu9GTQ9T+NUwP28gQ4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDLdssy78iouWGdZ3OCZ38wIqcHsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXQyeXpMdnlLaTVZWjFuYzRKbmZ6QWlwd2V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA31Q3IsNTHinwTbHoE9
6UbCMq+INPuVxH1IsYlPSpCtsRNievh89jayIaU0vBY/xK2ohPwc/CNtwDkV5nXj
9giOGslf8URL18CUQKNEESnU6pCINEwY9UEFhIYqieZCSasUiHyAiE30+sqzXFpW
kejA82nEPLkOhgCWrG54Ttd15wXX+JI3ZaE7X7/D5PEevF7QE+amJ+M4gr8rom9p
8rWB9A813PDFmfZ9i8wCMjTH8W560K6wgtxMLXkIzj8gOhjI4ObuF0XH4PiRIkq8
dpS32xRQrahgpebsM3ILsX090fVhPyrxgGqzqag611CN3/GDWjY6sUuXNTUROqIU
hcI=
-----END CERTIFICATE-----
Generated at Thu Jun 12 12:15:47 2025 by rpki-client