Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/min6B7JMpmm_DTGLK7xehg-WK-g.roa
File: min6B7JMpmm_DTGLK7xehg-WK-g.roa (raw, json)
Hash identifier: ObVROSoVYRu5kfzDC9pdqA28tc2n7as5VUKhdbxEV94=
Subject key identifier: 9A:29:FA:07:B2:4C:A6:69:BF:0D:31:8B:2B:BC:5E:86:0F:96:2B:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871165A69220BD001BAF08549BF11049A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/min6B7JMpmm_DTGLK7xehg-WK-g.roa
Signing time: Fri 24 Mar 2023 02:14:46 +0000
ROA not before: Fri 24 Mar 2023 02:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:65:a6:92:20:bd:00:1b:af:08:54:9b:f1:10:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 02:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a29fa07b24ca669bf0d318b2bbc5e860f962be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:67:2d:2d:11:6e:2a:2c:88:6b:1a:7d:0d:
f1:fb:e1:f9:70:50:65:b9:57:47:91:c1:14:34:d4:
a5:aa:5d:95:59:19:d5:e2:87:89:14:a9:fb:d3:78:
23:1f:2b:cc:e4:ba:71:8f:8d:97:5c:ab:40:5e:f8:
41:b7:e7:43:3e:ea:d4:b5:ae:15:4f:a9:91:7c:30:
1b:ea:4d:aa:f3:25:af:27:32:41:fe:49:90:be:f9:
15:8a:45:2c:5a:9b:d7:8e:14:3d:57:63:55:00:69:
f7:3a:cf:ef:7b:12:65:8f:8f:b8:fb:70:c3:a6:a4:
a4:d4:d9:8f:63:05:48:ce:59:81:c2:c6:3e:3f:a5:
d1:dd:96:d5:de:7e:1f:29:a7:35:cd:48:73:17:ae:
a9:09:d6:72:5b:23:9a:8d:d7:de:d3:60:4f:b9:77:
ca:43:6d:9b:94:0d:70:b2:80:1f:8d:8b:81:4e:4b:
04:a1:e4:c4:45:e8:3c:4c:00:4a:63:78:c5:b6:87:
04:72:d1:32:4b:c5:20:bb:dd:0b:30:aa:98:58:dd:
9e:66:38:60:a0:ba:bf:0f:3d:e5:10:07:c3:55:2b:
aa:2f:a0:5a:74:fb:bc:ca:b4:9b:f9:9d:3a:ad:18:
c4:07:fc:2c:bd:8e:b3:72:14:68:ff:e2:85:a0:85:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:FA:07:B2:4C:A6:69:BF:0D:31:8B:2B:BC:5E:86:0F:96:2B:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/min6B7JMpmm_DTGLK7xehg-WK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:fc:61:fe:ec:4b:61:38:90:8c:b9:58:54:f9:f1:6a:f9:d6:
d2:e1:e3:f0:3c:0a:65:3f:6c:f4:ef:aa:76:c4:db:f6:c4:4d:
45:69:70:9e:2a:f7:e8:a5:32:1e:97:20:d5:1c:e8:a7:2f:c0:
2b:9e:bb:a7:2a:19:c3:43:b2:c8:91:eb:57:b1:ca:0a:7a:93:
7f:b2:41:4a:01:05:15:34:d4:b9:e9:46:cb:b8:ae:8e:d6:f8:
9e:ef:78:1d:38:30:db:a8:5b:53:41:13:2c:22:3b:18:8a:91:
a2:44:68:d6:93:5d:a4:84:04:26:e4:0e:89:a6:db:1e:89:52:
37:00:c1:2e:5f:d9:0b:94:11:9a:60:3d:a2:75:f0:94:00:34:
aa:7e:5d:b6:ec:4c:a0:ae:ea:2d:9c:8b:2a:c1:94:ce:1f:6b:
96:de:50:87:ad:6c:a7:26:de:ee:c1:e8:b6:89:d5:7d:5a:93:
43:ee:45:5d:6d:cf:b7:98:49:92:8e:76:5d:a0:e6:5e:b1:80:
8d:dc:fd:3f:e9:22:20:7d:1d:87:c6:60:0d:83:11:5e:30:b8:
25:c6:65:50:2e:ec:37:16:cb:48:0f:83:ef:48:93:0e:b8:8f:
61:69:81:8b:e1:ac:c9:38:5f:d1:eb:41:27:67:bb:30:ed:16:
d2:96:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:18 2025 by rpki-client