Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B_mksqdXD-STTdD5JfSYbtBbRvQ.roa
File: B_mksqdXD-STTdD5JfSYbtBbRvQ.roa (raw, json)
Hash identifier: tjimS6+aNW84LAQsYBgiQmjlHMzIK1o22/Jc/O3xRMI=
Subject key identifier: 07:F9:A4:B2:A7:57:0F:E4:93:4D:D0:F9:25:F4:98:6E:D0:5B:46:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189413973642801BB2FE8DF34BCEED69A8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B_mksqdXD-STTdD5JfSYbtBbRvQ.roa
Signing time: Mon 10 Jul 2023 19:13:51 +0000
ROA not before: Mon 10 Jul 2023 19:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:41:39:73:64:28:01:bb:2f:e8:df:34:bc:ee:d6:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 19:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f9a4b2a7570fe4934dd0f925f4986ed05b46f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:3d:15:f6:2f:8d:ac:06:1a:72:4c:3b:92:
67:ca:b5:84:2a:bf:12:e0:5d:dd:d0:df:3b:15:3c:
b8:d6:c8:2c:fa:6b:31:b8:48:17:be:f0:5d:43:cc:
ed:63:00:4c:64:c6:58:53:a4:3b:eb:79:00:94:d8:
d0:4c:66:4e:69:ef:23:bd:2b:4a:bb:06:cd:83:95:
98:91:e7:eb:48:20:09:c7:e9:05:e3:20:e2:8d:48:
96:9c:e3:cc:b5:23:33:70:ee:43:e4:46:38:ca:10:
d4:1b:de:82:43:10:e6:89:78:3a:58:6d:20:45:9c:
00:16:66:0f:f8:c6:7f:dc:63:bf:33:db:80:9c:30:
06:fe:b1:a2:4e:45:94:23:18:1c:30:0c:b7:7b:11:
01:18:4a:61:bb:69:66:75:60:cc:52:f4:59:7d:06:
7c:7b:f7:42:28:f2:71:55:dd:47:48:47:98:c9:74:
97:8d:33:66:6c:7f:dd:a3:2c:7f:0e:84:3f:67:19:
5b:79:b3:83:e8:e6:8a:84:99:65:51:02:88:2b:a8:
c0:59:18:81:66:eb:c7:a5:bb:37:1a:e9:fc:94:31:
0f:35:ce:95:17:a5:8d:42:61:7f:17:1e:6f:86:49:
60:25:41:6b:ce:ee:5e:bb:e9:6a:44:eb:ae:cf:52:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:A4:B2:A7:57:0F:E4:93:4D:D0:F9:25:F4:98:6E:D0:5B:46:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B_mksqdXD-STTdD5JfSYbtBbRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:8f:51:d1:c2:6a:6a:80:c3:0a:b5:0c:32:b1:09:55:3c:85:
bf:04:11:95:bb:4a:ef:33:f3:4e:c3:df:4d:12:48:0a:71:d1:
8f:ed:ac:6c:e0:b5:8a:63:ae:8e:ce:bc:d7:d2:ef:6d:b9:9c:
27:2e:17:7d:ac:1f:f8:2b:d5:ad:49:e2:9f:ec:75:ba:71:9b:
8f:42:68:31:6b:31:2d:9a:ed:c0:46:42:9a:e8:a5:9e:79:26:
25:fe:9a:64:cc:46:d4:5f:34:57:84:34:d3:89:83:52:2c:7e:
48:dd:b9:ad:08:ae:81:d1:4a:1f:98:05:aa:b7:dc:68:67:04:
67:51:55:61:e0:34:c2:16:a3:6a:70:e0:12:25:81:bc:c6:10:
e0:b8:54:8d:b1:ea:66:3e:d5:dd:48:58:9a:46:1f:8b:15:28:
67:df:25:72:60:d3:e0:b1:5f:44:e2:3b:de:c4:7c:91:64:47:
d9:06:0d:8f:f0:f8:fc:de:f4:ae:92:f8:2e:73:2f:ac:45:ec:
fe:e8:cf:f5:59:7c:70:4a:50:b4:73:95:16:0d:81:d1:13:f1:
29:ba:5a:4d:06:e3:67:f3:e5:1e:f2:88:af:ee:27:bd:69:9a:
c0:43:28:54:1f:29:b5:33:9a:96:11:61:95:74:bd:79:1e:18:
a4:fd:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:36:28 2025 by rpki-client