Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhmbMXKxLyoOhECIvXMKNRiFxXM.roa
File: rhmbMXKxLyoOhECIvXMKNRiFxXM.roa (raw, json)
Hash identifier: iVnxtnWUH6jdHMNxBbuZ+BCnjrVxKzNcScsVad1h4iw=
Subject key identifier: AE:19:9B:31:72:B1:2F:2A:0E:84:40:88:BD:73:0A:35:18:85:C5:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C9152B2F8070474A75ADCD7DD6A36E8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhmbMXKxLyoOhECIvXMKNRiFxXM.roa
Signing time: Fri 10 Mar 2023 01:14:13 +0000
ROA not before: Fri 10 Mar 2023 01:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:15:2b:2f:80:70:47:4a:75:ad:cd:7d:d6:a3:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 01:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae199b3172b12f2a0e844088bd730a351885c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:67:82:ad:66:40:66:e9:9a:7f:48:0e:40:
0e:a3:5a:20:1b:b8:a4:df:ae:a5:05:d0:78:f0:79:
5e:51:ca:d5:90:58:b2:70:6e:82:cc:16:ac:96:64:
eb:70:52:2c:c5:aa:14:b1:9b:42:6c:36:ef:17:20:
3a:24:aa:fd:04:d2:a4:ed:c8:5e:60:9c:2e:60:d4:
b9:78:34:3a:82:14:07:fd:a0:cb:71:f6:53:a9:65:
e0:c9:1b:e4:63:ba:06:b0:ce:a5:62:91:00:05:71:
cc:e7:27:81:ce:ad:10:5a:c3:fe:b8:04:e8:f8:81:
3c:09:68:45:33:5f:9e:5f:ac:67:88:72:0e:e6:b4:
62:d3:da:b4:1e:ec:f1:2c:01:01:d2:ae:ed:aa:8c:
6f:9d:47:bc:f5:fb:f5:7d:fa:39:3a:2a:8a:71:3e:
99:54:c0:cf:44:7a:bf:02:b8:58:87:5b:24:8b:7d:
bc:12:f5:9a:f2:fe:c2:1a:11:bf:ad:00:1b:90:0e:
a5:88:53:59:d8:4f:74:cf:c6:bb:71:1b:99:fe:36:
08:55:c3:6a:f2:76:0b:3b:a6:a1:8a:2b:42:17:6e:
2a:6d:62:27:42:2d:17:76:2b:33:b0:e9:04:c6:37:
fb:7c:b3:cb:5c:40:17:10:77:db:e3:64:5d:78:9d:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:9B:31:72:B1:2F:2A:0E:84:40:88:BD:73:0A:35:18:85:C5:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhmbMXKxLyoOhECIvXMKNRiFxXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:46:2b:49:a0:1a:43:b2:ea:f3:18:52:04:c6:d6:f3:c1:8a:
5a:ae:f9:32:8b:61:66:8f:55:7d:58:1d:02:eb:42:64:d4:c8:
d4:15:08:12:fb:03:91:50:fc:ef:66:ed:7d:8f:88:4a:5b:3d:
29:ef:b7:99:81:7e:f5:ba:b8:c7:47:ba:6e:96:51:ef:dd:65:
3e:d1:d1:bb:0a:db:0f:1e:af:fa:b7:f3:42:b6:ae:6d:95:cd:
cf:1a:54:33:94:99:53:89:af:18:40:4a:14:ad:f8:cc:ff:5d:
fc:f9:46:2f:44:21:5f:fb:c1:0c:23:ca:97:25:6a:32:45:7e:
04:78:51:2e:74:c7:7c:cd:46:b3:b1:97:2c:96:f0:8e:01:a7:
dd:ba:b8:ae:d3:29:d0:c2:62:46:02:9f:1c:38:01:c3:35:cf:
2d:0e:55:04:b2:c0:de:61:b7:3b:5f:46:59:35:4f:ab:f6:19:
5d:22:d8:b3:a6:d9:d9:92:83:b4:42:cb:79:37:35:cf:f1:5e:
03:44:27:bf:a0:22:a2:11:87:b6:e1:34:66:f0:4a:b8:07:04:
7c:d7:9e:db:cd:6b:3c:7d:0f:ec:77:a0:7e:e1:92:0b:cc:8a:
84:d6:ae:e3:3d:fb:df:0a:e4:14:59:62:00:b1:bd:8c:ed:fa:
ef:33:63:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbJFSsvgHBHSnWtzX3Wo26KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEwMDExNDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTE5OWIzMTcyYjEyZjJhMGU4NDQwODhiZDczMGEzNTE4ODVjNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDtngq1mQGbpmn9IDkAOo1ogG7ik
366lBdB48HleUcrVkFiycG6CzBaslmTrcFIsxaoUsZtCbDbvFyA6JKr9BNKk7che
YJwuYNS5eDQ6ghQH/aDLcfZTqWXgyRvkY7oGsM6lYpEABXHM5yeBzq0QWsP+uATo
+IE8CWhFM1+eX6xniHIO5rRi09q0HuzxLAEB0q7tqoxvnUe89fv1ffo5OiqKcT6Z
VMDPRHq/ArhYh1ski328EvWa8v7CGhG/rQAbkA6liFNZ2E90z8a7cRuZ/jYIVcNq
8nYLO6ahiitCF24qbWInQi0XdiszsOkExjf7fLPLXEAXEHfb42RdeJ3jcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK4ZmzFysS8qDoRAiL1zCjUYhcVzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcmhtYk1YS3hMeW9PaEVDSXZYTUtOUmlGeFhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK5GK0mgGkOy6vMYUgTG
1vPBilqu+TKLYWaPVX1YHQLrQmTUyNQVCBL7A5FQ/O9m7X2PiEpbPSnvt5mBfvW6
uMdHum6WUe/dZT7R0bsK2w8er/q380K2rm2Vzc8aVDOUmVOJrxhAShSt+Mz/Xfz5
Ri9EIV/7wQwjypclajJFfgR4US50x3zNRrOxlyyW8I4Bp926uK7TKdDCYkYCnxw4
AcM1zy0OVQSywN5htztfRlk1T6v2GV0i2LOm2dmSg7RCy3k3Nc/xXgNEJ7+gIqIR
h7bhNGbwSrgHBHzXntvNazx9D+x3oH7hkgvMioTWruM9+98K5BRZYgCxvYzt+u8z
Y1w=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:11:44 2025 by rpki-client