Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMZCY3UpKsyvuT54i6WB69dC-Qg.roa
File: cMZCY3UpKsyvuT54i6WB69dC-Qg.roa (raw, json)
Hash identifier: IC+OhWQnHu6bx6Wf5iAvTOMpGQ320OivInIFN7IgEF0=
Subject key identifier: 70:C6:42:63:75:29:2A:CC:AF:B9:3E:78:8B:A5:81:EB:D7:42:F9:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C67E0A41F867638F969E2895FE3955CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMZCY3UpKsyvuT54i6WB69dC-Qg.roa
Signing time: Fri 28 Apr 2023 06:12:41 +0000
ROA not before: Fri 28 Apr 2023 06:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:7e:0a:41:f8:67:63:8f:96:9e:28:95:fe:39:55:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 06:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70c6426375292accafb93e788ba581ebd742f908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:e6:67:10:be:dd:66:9d:51:d0:64:7a:13:
65:0d:a7:57:5b:39:7f:3f:43:c4:d9:e8:67:1b:54:
a4:34:74:b1:fb:02:ff:c8:b2:0c:59:49:7b:e7:a9:
bf:02:cc:25:d4:ef:12:91:94:ab:02:a4:fc:79:20:
81:27:ac:4d:05:10:3d:33:b0:9c:18:08:97:3f:e2:
78:2e:4c:3f:b0:1a:76:d4:a6:42:4e:ea:e3:15:1c:
9b:36:35:5a:fb:a1:43:15:ae:b4:b3:16:cd:e7:9d:
d8:f7:d2:b1:b7:bf:d2:10:ec:89:0b:c4:10:2d:ac:
28:34:04:28:0f:41:47:22:c6:a4:1a:94:42:48:d8:
4e:b2:80:52:ed:4e:ec:11:ca:56:6f:6e:ca:fa:07:
18:11:ab:70:6c:94:bb:22:a0:9e:fe:8d:74:b6:da:
1b:90:07:fd:7d:9f:a0:6e:7e:bf:35:e8:64:0a:c1:
ac:5f:29:5f:06:3a:dd:62:45:b3:a2:7f:79:3f:13:
c1:2a:d7:6c:a0:5f:ae:30:d8:93:57:91:fb:1f:e5:
a2:4d:20:73:9a:cb:14:ea:15:99:8b:1e:34:31:22:
ad:df:c6:62:88:ca:dd:dc:1b:a0:59:17:98:54:90:
4c:a4:d3:fb:ce:8b:7d:3a:3d:09:01:0e:82:8c:fe:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:42:63:75:29:2A:CC:AF:B9:3E:78:8B:A5:81:EB:D7:42:F9:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMZCY3UpKsyvuT54i6WB69dC-Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:4a:00:40:c4:97:00:b3:41:fd:a6:70:39:b7:2e:f1:4c:1d:
b4:2f:ca:e6:73:0f:1a:ec:2d:92:78:b9:de:63:b6:41:ff:78:
be:29:63:b5:7a:26:0a:d2:dd:c9:9d:ae:12:65:9d:a2:a5:e4:
85:fa:22:96:13:97:d7:d5:aa:b7:ce:5c:c4:30:42:22:52:81:
23:d5:12:77:d6:0e:c3:be:9c:8c:92:26:29:a1:3b:72:4b:37:
ca:32:d5:5a:74:66:62:ca:f5:c3:56:c1:90:5c:80:f9:d7:40:
c7:56:b4:d9:2f:9f:54:e2:6e:80:a6:59:00:f5:50:66:52:2b:
db:d0:17:e9:20:1e:b3:31:ab:e3:2b:b2:fe:7a:7a:0c:3c:8c:
4c:d2:15:4a:0e:49:2d:a7:da:63:25:a2:59:d3:23:c6:0b:91:
57:40:a9:3e:87:7e:0a:0f:60:67:6c:da:68:08:81:5f:06:d5:
18:04:a3:3a:80:11:fb:70:c7:18:ce:e6:b8:d7:de:45:7f:11:
65:32:be:f9:28:7f:c5:33:de:72:a5:54:da:ce:93:3f:ab:87:
44:5e:b2:8b:64:15:0e:8e:d9:2e:a5:50:b3:b4:f3:47:39:66:
d5:06:aa:a2:c0:3c:e2:73:12:e7:b5:02:77:5c:f8:9e:46:47:
f9:7c:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:12 2025 by rpki-client