Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hMrwt4BEGh6cVBxduuly61wWjqc.roa
File: hMrwt4BEGh6cVBxduuly61wWjqc.roa (raw, json)
Hash identifier: bfk31NxqipQxPjIO7UBXjj6eSNT1HL0RMxgcPqrcP+0=
Subject key identifier: 84:CA:F0:B7:80:44:1A:1E:9C:54:1C:5D:BA:E9:72:EB:5C:16:8E:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FEEABD8FBE862D6B31C29015893A3331
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hMrwt4BEGh6cVBxduuly61wWjqc.roa
Signing time: Tue 09 May 2023 05:10:09 +0000
ROA not before: Tue 09 May 2023 05:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:ea:bd:8f:be:86:2d:6b:31:c2:90:15:89:3a:33:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 05:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84caf0b780441a1e9c541c5dbae972eb5c168ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:5b:61:b1:56:ab:0c:a6:51:e3:55:6f:24:
71:ca:fa:2a:95:8b:d0:d8:f9:e2:71:e1:5b:62:3a:
48:2f:81:ae:30:12:39:d5:b8:46:b1:49:0f:47:07:
65:79:6d:51:cc:d3:36:4a:df:dd:b8:67:b5:df:9f:
6e:3f:0f:bd:a3:36:49:61:87:a3:73:f3:87:61:be:
99:39:7b:89:4f:e9:6f:05:57:73:ee:49:f4:30:03:
67:ff:6f:a5:85:ae:23:13:95:2f:47:2f:4e:3c:57:
0d:92:19:49:d0:b2:00:33:4b:0e:d8:dc:33:1a:72:
14:c2:b1:ca:d0:fc:1e:37:7e:1c:e6:41:e4:25:95:
8f:12:ed:36:c8:f5:ed:65:18:66:84:4a:d2:80:ea:
6d:4b:0e:06:95:52:3a:70:ad:31:53:c4:47:6e:50:
fa:a8:d7:40:56:80:db:64:8c:08:99:c5:f3:f0:b4:
f4:42:48:9d:76:ef:f6:86:36:78:f1:3f:ff:a6:24:
13:2d:4f:3c:fb:b7:dc:8f:85:a1:4c:15:20:2c:59:
80:7d:86:bf:74:26:93:03:39:d4:31:52:2e:5a:66:
96:c6:c6:28:ff:b7:5a:cd:64:b6:f8:05:55:52:a9:
2f:69:c4:b2:07:f0:f3:7b:93:f8:8f:ec:39:41:21:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:F0:B7:80:44:1A:1E:9C:54:1C:5D:BA:E9:72:EB:5C:16:8E:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hMrwt4BEGh6cVBxduuly61wWjqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:10:dc:5d:2c:8d:79:d7:e5:b1:10:2e:f9:70:f3:86:49:76:
ca:39:d5:03:64:bd:a1:e4:90:28:71:1d:6d:f0:5d:63:9d:eb:
df:98:1e:29:d6:a1:fd:2f:f0:dc:80:4d:f2:ce:c5:3f:79:b4:
e8:1c:08:e8:45:f3:0d:c5:52:fe:54:30:88:2b:55:0e:b0:ae:
d6:48:27:64:4b:ad:cf:84:1f:ce:23:de:ab:82:47:ce:74:09:
ff:68:c3:7a:dc:61:7a:32:17:50:27:69:7c:04:db:35:ac:69:
dd:b2:2e:30:52:ee:52:29:c0:7e:f2:dd:ab:e0:58:e2:12:9c:
b4:20:3e:76:6a:ca:7c:16:1d:f1:58:fa:25:e3:43:c0:bc:b2:
9b:11:cc:9a:f7:97:39:e5:e9:6c:cb:70:46:dd:6d:21:f5:1a:
f4:d8:57:c8:38:4c:fb:60:66:1d:40:a3:d4:92:b0:34:c6:cc:
bb:51:28:c5:12:73:d2:b8:22:39:3d:e9:b4:78:d5:cb:2d:31:
c8:65:3f:b3:e0:46:30:6e:13:22:cd:c7:fd:87:51:a2:00:c3:
48:2a:60:b2:e3:5e:ee:61:5a:ed:9a:6e:5c:08:ec:cc:ec:e5:
e6:7c:02:71:14:04:8b:86:1a:82:e4:b0:5b:8e:3d:59:26:f1:
cc:2c:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:36:10 2025 by rpki-client