Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mEBsBZ0vxh0fPBHfKV2iNTwPqDA.roa
File: mEBsBZ0vxh0fPBHfKV2iNTwPqDA.roa (raw, json)
Hash identifier: JvXt8pp6h6oP8BooZJc4aVY7ysgXL8mC/F2nUMXYYGE=
Subject key identifier: 98:40:6C:05:9D:2F:C6:1D:1F:3C:11:DF:29:5D:A2:35:3C:0F:A8:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A8A60F40434BEB27109564E783FC64C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mEBsBZ0vxh0fPBHfKV2iNTwPqDA.roa
Signing time: Fri 03 Mar 2023 18:05:00 +0000
ROA not before: Fri 03 Mar 2023 18:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a8a5:562f/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:a6:0f:40:43:4b:eb:27:10:95:64:e7:83:fc:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 18:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98406c059d2fc61d1f3c11df295da2353c0fa830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:ad:cf:50:42:eb:6b:5e:8b:f1:94:0e:f0:
4b:5b:0e:6f:81:6a:18:fd:81:a2:2d:52:29:29:a8:
f7:6a:2e:77:07:13:19:52:8a:ff:a3:d4:04:a4:62:
06:18:50:6c:60:6c:9c:c8:84:c6:99:8e:b9:00:a7:
9a:78:80:c0:40:b3:b2:0c:7a:dd:f9:8f:c5:9c:35:
02:af:04:a2:29:09:c2:b9:6c:9b:eb:78:67:0c:15:
1f:e1:2b:63:70:bd:b2:af:ae:0b:13:c7:ae:6f:f6:
ee:a1:a8:2b:23:73:6c:b6:0e:af:7a:3b:dc:7f:7a:
29:83:63:d5:b4:86:18:57:a9:5e:1f:13:bd:66:e8:
57:d4:38:fe:f4:e7:d2:c2:39:71:58:3d:33:b3:22:
98:65:91:14:91:29:05:9a:b4:e1:fa:9b:f6:c0:ee:
7b:15:c9:9d:af:d5:39:d2:7a:5b:55:53:df:f2:a6:
2d:e8:e7:cd:03:51:de:cf:4a:74:04:24:1b:c3:76:
65:17:a9:be:c7:ef:b6:37:6a:15:a8:64:0d:5b:80:
64:d4:c3:06:05:f0:c3:c4:ca:06:aa:0c:af:49:31:
bc:7f:8f:8b:7a:fe:0e:aa:44:7f:68:20:99:99:45:
93:d9:0a:73:ca:41:f4:6d:87:91:c4:d1:a9:32:1c:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:40:6C:05:9D:2F:C6:1D:1F:3C:11:DF:29:5D:A2:35:3C:0F:A8:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mEBsBZ0vxh0fPBHfKV2iNTwPqDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:f0:5d:7c:eb:27:d4:ff:4c:09:1b:27:9b:31:21:f5:58:95:
8e:44:02:e3:6f:8f:a8:c1:b2:40:c9:fb:de:92:7a:a0:3b:2a:
ab:2b:de:ba:27:f8:75:2b:ef:94:34:8a:b1:1c:90:ae:7d:18:
4c:3f:4b:67:e9:79:27:d0:f5:45:75:47:7c:0a:76:aa:ac:2d:
00:09:ac:c5:65:14:8a:5b:72:4a:72:75:72:38:4f:2b:d4:1b:
06:aa:90:2a:7b:24:b3:49:60:c9:55:b5:85:10:ca:b1:1c:28:
ad:a7:69:42:fa:0c:2f:c9:ac:a8:e2:16:30:72:9f:08:fb:90:
46:7c:68:93:52:52:92:de:56:ea:c7:e3:ae:21:dc:8f:a2:8a:
32:0c:73:71:fc:41:bd:d8:65:c7:a9:19:ac:28:92:75:50:71:
b5:6f:e8:de:22:ce:d0:18:c9:ff:e8:22:27:2c:9e:ee:a8:ca:
87:1c:bb:a6:a5:84:78:d9:91:e5:5a:5b:fb:5c:62:94:d8:dd:
8e:07:c4:d9:89:e9:5f:3c:90:61:46:2a:18:ce:fc:20:f1:ee:
64:97:3d:fb:f8:67:3d:b7:f9:0a:58:d1:6c:0f:91:fa:95:c7:
3e:59:d4:86:f2:97:d0:32:77:4e:2c:d9:70:05:8e:2a:cd:5e:
d2:e6:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:16 2025 by rpki-client