Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MNOqNfbBsp7Qz-Set7sMjiFzEM.roa
File: 0MNOqNfbBsp7Qz-Set7sMjiFzEM.roa (raw, json)
Hash identifier: +WbXmg9U78pMiPC9NsPe1GNvo9F4KYOh1U5JuP8UeT4=
Subject key identifier: D0:C3:4E:A8:D7:DB:06:CA:7B:43:3F:92:7A:DE:EC:32:38:85:CC:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F19B5FFB8AAEFE626BF148B848332296
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MNOqNfbBsp7Qz-Set7sMjiFzEM.roa
Signing time: Mon 14 Aug 2023 01:13:58 +0000
ROA not before: Mon 14 Aug 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f1:9b:5f:fb:8a:ae:fe:62:6b:f1:48:b8:48:33:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c34ea8d7db06ca7b433f927adeec323885cc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:d2:cf:31:0b:4e:5c:bf:fb:21:f1:69:f5:
a2:f1:25:cb:46:73:c9:75:03:9d:44:4d:79:ec:ed:
02:22:14:21:92:06:8f:49:6e:59:44:91:08:6e:0a:
23:96:7f:75:af:48:92:f4:b0:37:29:d4:30:66:bd:
6f:06:21:72:b9:61:d4:e5:3d:0e:6a:41:0d:11:6b:
6b:07:db:91:c1:a8:2c:60:02:99:a5:d6:f4:75:be:
b5:b3:fa:8d:b9:3d:3f:24:ea:08:70:de:48:f0:c8:
72:65:86:aa:75:46:b9:24:b3:07:e0:8d:eb:3b:fe:
9e:c5:7b:f9:02:e7:a6:6b:47:eb:ad:44:9e:57:1d:
2b:5a:69:36:2e:e0:2e:76:d0:28:31:3a:06:ab:ee:
b2:d5:24:9e:78:49:8a:7c:7a:61:2e:4f:de:17:82:
62:2e:81:30:3c:99:df:6a:25:4c:72:f2:2a:3b:52:
f9:44:d5:1a:7d:18:b4:d8:13:25:c2:c7:9e:80:55:
94:d1:c1:17:87:8f:e5:83:39:4b:d4:0f:da:53:80:
05:b8:f5:ce:5f:2a:be:2e:f5:e9:a7:d0:90:36:11:
cd:c2:5f:3c:df:6b:45:b7:06:0c:9c:18:9a:ec:b3:
e1:db:ac:63:3d:9e:72:81:a3:e6:41:c8:42:9e:ec:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:4E:A8:D7:DB:06:CA:7B:43:3F:92:7A:DE:EC:32:38:85:CC:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MNOqNfbBsp7Qz-Set7sMjiFzEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:3e:a5:a9:ab:59:e3:9c:ef:ef:c2:94:89:79:a6:a1:eb:05:
dc:e5:81:65:0b:09:8e:10:d4:25:27:a5:f4:a1:2a:12:0e:76:
2d:77:db:80:f8:70:57:c6:7d:28:0f:e6:69:d4:d2:6d:84:b1:
71:30:52:9b:89:cd:26:bb:14:31:5e:21:03:f7:6d:ef:cc:c4:
91:b6:d9:c9:48:62:8e:fb:9d:2a:74:b4:2a:6b:ed:53:e2:44:
40:c0:60:27:44:06:8a:f5:0e:aa:62:b4:57:70:1a:e8:59:71:
fb:11:78:da:9a:05:10:84:e9:47:43:b5:ff:bb:20:3f:48:6a:
00:0f:49:57:89:ec:d4:17:7a:31:a2:aa:ba:74:93:ee:81:39:
ae:b9:70:dd:ed:cb:2c:01:37:47:6e:af:64:75:a8:7f:8b:89:
63:ec:84:61:77:18:01:8a:f8:bd:1c:53:44:b4:47:58:7e:54:
95:60:f7:7e:a2:d0:c0:16:68:16:a5:6c:fb:99:fc:cb:13:a3:
e2:8d:a8:ec:38:83:5d:7d:12:97:a4:6e:66:22:33:15:f3:e9:
5f:f5:c2:c4:1f:45:a5:0e:54:6f:e0:26:d4:2d:12:50:ea:32:
04:f2:48:6c:30:e0:01:9b:1a:b5:bc:80:61:f1:6a:94:3a:f2:
4c:05:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:08:23 2025 by rpki-client