Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iFmedNmTodMgGfXslcChp1ebjs0.roa
File: iFmedNmTodMgGfXslcChp1ebjs0.roa (raw, json)
Hash identifier: es7Wjnc3fqJJAjMj13ETz3hXFK1xbaOriRrQBBpdy+0=
Subject key identifier: 88:59:9E:74:D9:93:A1:D3:20:19:F5:EC:95:C0:A1:A7:57:9B:8E:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018812DE77E1FB957BCC8A5BD7B43BF20669
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iFmedNmTodMgGfXslcChp1ebjs0.roa
Signing time: Sat 13 May 2023 02:09:09 +0000
ROA not before: Sat 13 May 2023 02:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:12:de:77:e1:fb:95:7b:cc:8a:5b:d7:b4:3b:f2:06:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 02:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88599e74d993a1d32019f5ec95c0a1a7579b8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:07:1d:51:f5:15:33:1a:21:38:a1:46:99:
ff:ec:3f:36:43:94:25:db:92:a0:ea:ab:4f:3b:35:
34:fc:66:02:58:99:ec:0b:87:19:0b:0b:ba:52:f1:
a8:12:ba:ba:32:5e:05:bf:d8:0a:4b:6a:15:94:85:
0e:3e:8f:d8:97:30:51:13:9f:8d:1e:f8:1c:51:75:
41:42:4d:5f:49:3a:74:c9:9c:3a:ef:5d:28:19:02:
26:35:14:90:56:dd:62:ed:cd:30:1e:3e:ea:61:57:
b3:8e:4d:fd:42:27:1f:28:f5:db:50:1f:df:fd:2f:
b9:c4:df:f5:21:aa:c4:4b:c5:7e:33:96:06:0f:25:
9b:2e:d7:9f:b1:f0:55:39:78:a2:2b:5a:16:ba:7e:
b5:f6:72:49:7c:e1:55:66:ad:03:4c:02:1b:e6:16:
a5:00:e5:43:71:84:5f:6d:dc:3f:b1:bd:ad:3b:ca:
bf:9a:83:8a:55:69:1d:2a:44:f2:04:4f:0b:08:ed:
9e:b1:05:ca:00:44:81:2d:2e:a8:28:a8:8a:43:26:
f5:2b:cc:40:b3:3e:6d:aa:ec:a2:26:1e:9c:f9:7b:
87:43:88:17:d0:1d:c4:ab:96:45:46:ab:e5:46:9b:
69:21:80:04:0c:5a:9a:11:38:39:68:af:a8:16:6b:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:9E:74:D9:93:A1:D3:20:19:F5:EC:95:C0:A1:A7:57:9B:8E:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iFmedNmTodMgGfXslcChp1ebjs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:d7:91:ae:76:d7:00:74:53:0e:ba:d0:00:d2:5d:a3:02:8d:
5b:3e:0e:c5:ff:b8:3d:62:30:38:5a:ea:78:ff:d8:0b:4e:6f:
ce:31:f5:cf:8c:99:c8:70:4a:79:55:3d:a9:bf:51:26:40:11:
6b:b3:53:f3:96:b7:58:3d:29:f7:20:1f:0b:f1:80:7b:1a:5d:
f1:af:ce:ac:b8:48:9e:85:34:5c:0f:cc:45:81:94:41:a9:48:
8b:84:89:26:07:6d:60:89:5d:44:90:78:53:b9:6a:ed:79:b9:
b8:27:e4:8c:cd:e6:21:9d:11:a7:2e:60:07:61:65:63:d4:45:
00:41:18:4b:cd:69:3c:ec:b6:b9:d0:d8:6b:bf:50:19:ea:d7:
21:15:ff:6e:ec:34:47:8e:23:3f:7c:9b:8f:81:5e:dc:f4:29:
3f:3b:08:8f:1c:6d:b7:a2:da:5c:5f:dd:f4:e8:db:66:8d:14:
4a:0f:5d:47:73:0b:d8:47:8b:98:06:58:cc:47:a7:71:d1:b0:
36:d1:c8:c0:5b:99:26:73:ac:59:4e:ab:0f:62:e8:c0:b6:37:
7d:82:5c:13:6d:58:09:16:50:97:bf:d7:9c:f6:c8:3e:fb:88:
b0:67:94:90:8d:f8:bd:08:1a:5f:a6:0c:74:a4:7d:9f:11:f8:
d2:98:e0:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgS3nfh+5V7zIpb17Q78gZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTEzMDIwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODU5OWU3NGQ5OTNhMWQzMjAxOWY1ZWM5NWMwYTFhNzU3OWI4ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR0HHVH1FTMaITihRpn/7D82Q5Ql
25Kg6qtPOzU0/GYCWJnsC4cZCwu6UvGoErq6Ml4Fv9gKS2oVlIUOPo/YlzBRE5+N
HvgcUXVBQk1fSTp0yZw6710oGQImNRSQVt1i7c0wHj7qYVezjk39QicfKPXbUB/f
/S+5xN/1IarES8V+M5YGDyWbLtefsfBVOXiiK1oWun619nJJfOFVZq0DTAIb5hal
AOVDcYRfbdw/sb2tO8q/moOKVWkdKkTyBE8LCO2esQXKAESBLS6oKKiKQyb1K8xA
sz5tquyiJh6c+XuHQ4gX0B3Eq5ZFRqvlRptpIYAEDFqaETg5aK+oFmvG/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIhZnnTZk6HTIBn17JXAoadXm47NMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaUZtZWRObVRvZE1nR2ZYc2xjQ2hwMWVianMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKfXka521wB0Uw660ADS
XaMCjVs+DsX/uD1iMDha6nj/2AtOb84x9c+MmchwSnlVPam/USZAEWuzU/OWt1g9
KfcgHwvxgHsaXfGvzqy4SJ6FNFwPzEWBlEGpSIuEiSYHbWCJXUSQeFO5au15ubgn
5IzN5iGdEacuYAdhZWPURQBBGEvNaTzstrnQ2Gu/UBnq1yEV/27sNEeOIz98m4+B
Xtz0KT87CI8cbbei2lxf3fTo22aNFEoPXUdzC9hHi5gGWMxHp3HRsDbRyMBbmSZz
rFlOqw9i6MC2N32CXBNtWAkWUJe/15z2yD77iLBnlJCN+L0IGl+mDHSkfZ8R+NKY
4OI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:35:08 2025 by rpki-client