Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa
File: 0MGOorC4ktskGId9KX0CEonGblI.roa (raw, json)
Hash identifier: BSmHhES7Dtddc0aAvR52D0+ditMxVG05RTbovOLVHSI=
Subject key identifier: D0:C1:8E:A2:B0:B8:92:DB:24:18:87:7D:29:7D:02:12:89:C6:6E:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79BDB40A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa
Signing time: Sat 09 Apr 2022 04:09:44 +0000
ROA not before: Sat 09 Apr 2022 04:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042475530 (0x79bdb40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 04:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0c18ea2b0b892db2418877d297d021289c66e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:de:c2:66:cb:92:53:58:b7:ef:cf:32:c1:
04:ef:1d:83:af:89:e2:e1:91:c8:fa:d6:c2:13:be:
4c:3c:f1:dd:b3:3d:cb:ea:cf:03:be:5e:da:8a:f2:
b6:17:18:d3:ae:90:3b:2a:f2:9d:32:e6:3f:b9:13:
1c:19:b1:94:ca:f6:01:b6:88:03:2a:41:ab:dd:55:
6f:de:05:a8:2f:4d:75:09:e4:da:94:6a:f2:f2:ee:
d3:04:b3:6a:33:2c:5f:54:d8:bc:5e:a0:85:af:b7:
04:52:60:3e:24:1f:25:a5:57:15:05:49:91:7d:b4:
ea:d5:f1:8f:ed:0d:fa:8c:71:05:a6:60:3b:2d:27:
a0:70:28:55:d4:38:75:d4:1b:ba:04:99:64:af:e8:
ae:f2:dd:c2:42:d2:13:7a:a9:3b:57:49:10:1b:f0:
49:07:16:48:e2:e9:f9:7e:1f:4a:84:2b:47:e1:b9:
71:50:cf:26:31:54:81:d1:f1:d5:9f:06:ea:dd:ec:
21:58:9f:cf:e2:62:f9:3f:7f:a5:b4:77:a1:90:92:
aa:48:0f:1f:3a:9d:d6:44:60:57:b5:9b:71:14:0b:
72:80:8a:46:04:06:73:ef:7d:fb:4e:b6:fc:0b:a6:
87:43:12:90:5f:f2:87:93:79:40:4a:5d:cd:ce:8c:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:8E:A2:B0:B8:92:DB:24:18:87:7D:29:7D:02:12:89:C6:6E:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:98:ba:2a:ef:69:04:d8:74:a6:3b:40:ea:4c:d1:cc:fa:63:
b4:89:06:ba:f5:ed:30:36:8e:29:5d:29:c1:1c:e6:41:e5:0f:
0c:ec:9b:da:d6:bf:13:68:57:13:a3:85:f0:52:38:53:27:7e:
ae:cb:c0:96:fa:db:55:53:6f:67:b4:05:1e:65:2b:16:5d:2b:
df:95:84:55:31:3f:20:ac:16:c3:86:08:e3:7d:9c:ab:66:01:
c6:4b:02:f6:d0:c1:40:3d:7c:02:6c:2c:ef:07:0a:bd:b6:d1:
3e:7b:49:be:a0:ec:35:6e:3c:ea:fc:99:a0:02:31:db:98:e4:
d9:3c:e4:b6:47:24:98:26:36:d7:a9:8d:d1:d3:51:a0:67:4f:
97:41:5e:b5:f4:ba:df:95:83:4f:39:76:c0:be:61:39:06:e1:
e1:46:b7:bf:8e:d5:eb:45:79:28:c4:2d:1e:e8:32:7b:ec:51:
d7:62:8d:25:02:ee:f4:98:5f:91:b0:b1:46:90:21:20:9f:da:
06:14:0e:3a:8d:ba:1a:64:1b:3c:bf:e6:c1:d6:aa:2e:65:8a:
c7:fa:ca:31:4b:3c:5b:64:f7:83:8d:d0:1a:e1:a7:e6:33:73:
f4:f9:5b:2c:52:cc:a1:24:a6:ad:30:22:5c:95:70:a4:5d:44:
ea:ef:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:24:46 2025 by rpki-client