Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMtAGksBAb8cNw8cHOetcLtY69U.roa
File: cMtAGksBAb8cNw8cHOetcLtY69U.roa (raw, json)
Hash identifier: G9bmS9IEguCQuwOPaKF5NMQFh98yV2nBttKkmBjltKQ=
Subject key identifier: 70:CB:40:1A:4B:01:01:BF:1C:37:0F:1C:1C:E7:AD:70:BB:58:EB:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BEC092C4693983BE88F69EDEF1C531C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMtAGksBAb8cNw8cHOetcLtY69U.roa
Signing time: Fri 04 Aug 2023 04:13:58 +0000
ROA not before: Fri 04 Aug 2023 04:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:c0:92:c4:69:39:83:be:88:f6:9e:de:f1:c5:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 04:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70cb401a4b0101bf1c370f1c1ce7ad70bb58ebd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:52:ea:d9:10:3b:16:47:45:43:58:85:72:
b8:8f:50:2c:8e:4e:a2:36:10:99:8c:ad:83:cc:3f:
55:4a:4e:c9:0b:86:90:2a:5f:a3:10:c8:8e:25:78:
77:64:bb:61:c8:fb:4c:51:69:05:54:33:dc:a2:92:
ea:5d:72:54:7c:49:34:a0:df:d0:9a:9f:69:81:0b:
bf:75:aa:34:32:1c:87:e8:0e:5d:b5:e8:2f:ae:dc:
24:c5:df:af:21:8e:f7:43:ba:a1:66:f3:48:0a:3a:
a8:62:c2:f1:09:b5:d3:76:45:f0:78:0a:2b:cd:b5:
89:53:37:01:a9:1e:5b:8a:9c:89:cd:91:30:6e:52:
ae:44:59:ca:63:7b:0d:2c:d4:fa:e7:ba:69:f1:b9:
6a:1c:cf:d0:25:5d:ad:5e:28:cf:3f:70:eb:24:29:
db:ce:ef:b9:4a:dc:a5:cc:05:93:f3:2e:05:95:74:
7d:33:06:05:95:c6:5a:56:a0:00:64:15:80:49:0f:
e9:59:eb:ec:d7:2c:5a:ec:d1:cc:b3:7b:71:2b:77:
7d:13:e9:3a:cc:c8:12:d0:ee:0a:7a:78:de:02:5e:
7b:82:bf:4c:d0:31:fd:4c:ec:60:8c:6a:6b:7f:9a:
8a:e2:f9:5b:2f:6d:6d:86:16:df:35:f1:9f:fb:3e:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:40:1A:4B:01:01:BF:1C:37:0F:1C:1C:E7:AD:70:BB:58:EB:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cMtAGksBAb8cNw8cHOetcLtY69U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:54:de:a1:0d:bc:57:eb:34:07:19:ed:cb:dd:0c:92:b0:d0:
a9:6b:b7:b9:72:3e:6d:61:83:e3:16:d7:75:c6:a2:85:fe:58:
56:48:3e:d8:f8:bd:37:89:74:35:24:91:09:a3:fd:5f:ed:da:
7f:6f:f1:db:bb:1c:38:a9:8e:f8:5e:c2:a8:8a:af:b6:b3:86:
74:14:93:40:5d:a3:c9:18:5b:bd:7d:e0:50:17:62:b5:2f:14:
9b:38:65:90:b1:f0:3c:9b:8f:41:83:51:3c:fd:31:c8:13:8e:
04:42:69:71:52:e3:d6:21:d8:f1:ac:60:f7:28:63:f8:d0:1a:
70:a1:8b:b2:1c:65:64:f4:13:b5:0a:25:28:60:53:8a:71:2c:
1b:81:26:21:e1:4a:04:69:bc:b3:ee:59:35:00:1c:99:2b:8e:
6b:1b:c6:4b:c5:67:44:97:3e:d5:c8:43:7a:f2:02:f5:e7:4a:
34:ab:da:69:30:25:8c:cb:0b:ff:63:bb:ee:57:4c:a4:ed:14:
d4:91:fd:95:f3:be:97:1c:74:30:d1:97:10:68:9c:b8:72:7f:
40:59:b3:38:0e:99:00:1a:82:9b:96:4d:01:c1:dc:58:dc:4c:
7f:ea:9c:11:3f:12:80:73:33:af:4e:59:11:86:e9:e9:48:24:
eb:6e:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:29 2025 by rpki-client