Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLyWstMIgPuUJakb4RAak_4t93Q.roa
File: mLyWstMIgPuUJakb4RAak_4t93Q.roa (raw, json)
Hash identifier: +maaw1dXqdqa2TzczCYmt25y9y44N+DZrVJYSjXCJjM=
Subject key identifier: 98:BC:96:B2:D3:08:80:FB:94:25:A9:1B:E1:10:1A:93:FE:2D:F7:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886B7F4E36FDB02C5FB897C15FBA899696
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLyWstMIgPuUJakb4RAak_4t93Q.roa
Signing time: Tue 30 May 2023 07:11:25 +0000
ROA not before: Tue 30 May 2023 07:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:7f:4e:36:fd:b0:2c:5f:b8:97:c1:5f:ba:89:96:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 07:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98bc96b2d30880fb9425a91be1101a93fe2df774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:d1:2a:55:b0:ba:a8:d7:c9:46:a5:51:0a:
ee:4f:d0:1a:39:d5:1a:a0:64:f1:ba:dd:d2:f3:4c:
dd:cc:c7:69:67:3d:ae:8d:20:68:7f:b5:41:8e:4d:
25:36:92:c4:8a:76:f2:1a:c4:4a:72:89:84:3d:29:
13:03:5d:61:42:9d:54:ae:26:6c:18:a2:ef:46:71:
98:9e:e6:7e:38:03:3e:95:b1:9c:bc:aa:69:b8:89:
65:d6:8f:ee:cc:10:55:c9:c6:e8:8e:24:2b:a7:28:
16:5c:a3:b9:f5:3e:fa:94:59:c8:ac:bb:e5:18:db:
f4:98:00:fe:f5:49:e7:86:58:96:e2:b4:c8:33:4c:
f9:e5:10:21:05:e9:8d:32:99:94:81:b6:16:f7:b5:
d6:df:b4:9c:30:b7:49:37:e7:fb:ee:96:92:65:87:
f7:76:61:aa:3e:21:e7:bf:f1:e1:03:f3:42:04:1d:
82:cc:29:d6:79:79:06:fe:92:c9:af:9f:d7:a6:a2:
62:f5:98:8b:0a:64:fc:7d:de:b1:7b:b0:23:7f:28:
6c:03:47:a0:1b:42:51:c7:08:1e:96:90:90:a0:0d:
ed:85:2c:6e:34:7b:09:d7:aa:38:12:c3:cf:3d:46:
86:cc:95:79:24:e7:44:82:f4:69:12:fb:e3:f1:52:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:96:B2:D3:08:80:FB:94:25:A9:1B:E1:10:1A:93:FE:2D:F7:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLyWstMIgPuUJakb4RAak_4t93Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:bb:0f:12:07:e4:21:b5:4a:e7:e3:bf:60:19:b7:64:7e:cb:
58:fa:2c:3b:30:58:80:08:81:02:2d:b7:cf:82:4e:94:f4:4b:
d0:17:b1:c2:80:b0:4c:0d:fd:2f:04:6e:e6:9b:f9:bb:1b:91:
0b:e0:ed:e9:91:46:71:16:2d:c4:02:40:93:da:ea:be:59:5f:
32:4c:1a:b7:f1:46:68:d9:98:df:00:dc:42:21:fc:2c:5a:70:
84:d0:a6:f3:8c:10:a3:86:bc:0c:8d:1b:6a:d3:3a:c5:4e:52:
09:6f:b5:28:99:99:64:65:35:a3:7c:31:04:cc:08:f0:a1:dc:
21:35:f8:f1:34:a7:09:03:65:b5:b7:b5:fc:0e:04:19:9b:5e:
68:d9:2a:ff:88:19:24:76:e7:c3:80:ec:07:62:f3:3e:a9:fc:
c0:7b:54:de:85:8e:45:de:4a:e3:14:91:79:1e:f7:51:7c:a4:
55:30:a9:e9:40:55:38:ff:bb:f3:f8:72:e1:f4:8c:63:cb:0f:
30:e1:9d:7d:f8:38:8c:63:9e:cd:aa:c4:7f:fb:34:c3:8c:40:
9e:eb:f8:2d:2a:db:bd:76:64:dd:a7:c5:f0:7f:ff:42:81:49:
a3:8c:d8:8b:9b:b5:00:5f:06:32:95:ca:8e:ef:fb:a8:30:c5:
04:ca:f9:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhrf042/bAsX7iXwV+6iZaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMDcxMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGJjOTZiMmQzMDg4MGZiOTQyNWE5MWJlMTEwMWE5M2ZlMmRmNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0DRKlWwuqjXyUalUQruT9AaOdUa
oGTxut3S80zdzMdpZz2ujSBof7VBjk0lNpLEinbyGsRKcomEPSkTA11hQp1UriZs
GKLvRnGYnuZ+OAM+lbGcvKppuIll1o/uzBBVycbojiQrpygWXKO59T76lFnIrLvl
GNv0mAD+9UnnhliW4rTIM0z55RAhBemNMpmUgbYW97XW37ScMLdJN+f77paSZYf3
dmGqPiHnv/HhA/NCBB2CzCnWeXkG/pLJr5/XpqJi9ZiLCmT8fd6xe7AjfyhsA0eg
G0JRxwgelpCQoA3thSxuNHsJ16o4EsPPPUaGzJV5JOdEgvRpEvvj8VKHTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJi8lrLTCID7lCWpG+EQGpP+Lfd0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbUx5V3N0TUlnUHVVSmFrYjRSQWFrXzR0OTNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABO7DxIH5CG1Sufjv2AZ
t2R+y1j6LDswWIAIgQItt8+CTpT0S9AXscKAsEwN/S8Ebuab+bsbkQvg7emRRnEW
LcQCQJPa6r5ZXzJMGrfxRmjZmN8A3EIh/CxacITQpvOMEKOGvAyNG2rTOsVOUglv
tSiZmWRlNaN8MQTMCPCh3CE1+PE0pwkDZbW3tfwOBBmbXmjZKv+IGSR258OA7Adi
8z6p/MB7VN6FjkXeSuMUkXke91F8pFUwqelAVTj/u/P4cuH0jGPLDzDhnX34OIxj
ns2qxH/7NMOMQJ7r+C0q2712ZN2nxfB//0KBSaOM2IubtQBfBjKVyo7v+6gwxQTK
+VI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:04:12 2025 by rpki-client