Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9E_DjZzatA_93I6JAvIYVbDLGI.roa
File: M9E_DjZzatA_93I6JAvIYVbDLGI.roa (raw, json)
Hash identifier: xjjDY/fwII5t5RtRLuKSX5JzktnMt8ds1WtiP/SVHy0=
Subject key identifier: 33:D1:3F:0E:36:73:6A:D0:3F:F7:72:3A:24:0B:C8:61:56:C3:2C:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185589ED424AA4A29716B7BC5E7542D60BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9E_DjZzatA_93I6JAvIYVbDLGI.roa
Signing time: Wed 28 Dec 2022 12:04:42 +0000
ROA not before: Wed 28 Dec 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:589e:9cc6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:9e:d4:24:aa:4a:29:71:6b:7b:c5:e7:54:2d:60:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d13f0e36736ad03ff7723a240bc86156c32c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:9d:17:31:6a:25:62:8f:2e:01:ee:d0:ce:
91:2a:46:96:2c:3a:0e:e3:69:06:d6:62:74:9b:54:
33:df:f4:86:bc:6b:00:67:34:59:a7:82:5f:1c:ce:
0d:c4:7c:82:a3:33:cf:05:d8:c5:28:02:92:8a:5b:
05:3f:0f:c9:87:57:3e:f6:e2:dc:9e:78:0e:60:d9:
47:0f:89:7c:a6:24:b5:ae:d7:a3:a9:53:92:ba:eb:
b4:36:03:4a:fd:24:6a:b1:24:44:19:29:ba:50:ea:
4b:cc:6b:86:31:1e:bc:20:f9:a3:10:f9:71:e1:29:
cd:4f:f6:82:8b:85:dc:80:a3:50:62:ad:58:7d:ce:
0e:32:3e:e7:b7:8f:ba:3c:e3:05:55:fc:a2:21:fb:
f7:0d:8b:64:f0:e7:7b:6a:2b:a7:b5:bc:0d:96:cd:
e3:8e:6a:42:f5:e5:17:d0:21:e7:37:12:bf:73:d7:
4b:33:a2:3f:bb:78:e5:36:64:d5:1a:bb:5f:36:b5:
d9:81:ae:cb:37:d7:37:8b:63:1b:27:47:1d:d8:db:
6f:f2:e3:69:0b:c5:e4:91:c0:3a:6f:22:37:b4:8a:
28:e9:dc:87:e2:1c:61:8b:38:a1:e9:6e:ef:3d:08:
1f:c5:d4:d1:0d:5a:a4:ca:a0:71:df:fd:82:3d:fa:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:3F:0E:36:73:6A:D0:3F:F7:72:3A:24:0B:C8:61:56:C3:2C:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M9E_DjZzatA_93I6JAvIYVbDLGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:0f:ff:81:1e:28:68:58:6b:e9:7b:dc:9c:4b:32:04:2c:2c:
82:fe:4b:45:b9:db:74:cc:75:6b:a6:93:09:e4:bc:29:ca:ec:
ca:1b:7a:aa:de:e2:a1:9a:ca:c4:88:93:71:3d:26:3d:0b:43:
6d:cf:2d:cb:c5:e5:27:8f:83:73:6c:f6:d3:ce:37:85:f5:d4:
a4:20:8e:20:62:30:8a:a9:76:f5:4a:28:f7:39:24:0c:64:2f:
4b:50:22:99:bd:1c:00:30:de:58:26:86:e2:6b:fd:29:bb:b2:
f6:2c:29:64:5b:25:6e:23:76:37:ab:4f:4c:63:f6:ed:97:2c:
e6:6a:8a:45:b2:04:ec:a9:3a:72:28:a6:81:ca:7c:b3:f5:ac:
0b:e8:bf:2e:c8:56:aa:4c:e7:b7:5c:dd:d2:58:e7:b3:db:33:
d5:7b:08:e4:5b:7c:80:09:b6:99:77:66:9c:a3:2f:f6:c3:19:
17:06:0e:6b:54:c7:98:02:dd:ed:e3:e0:48:0a:63:b7:4c:11:
6f:ae:bb:7d:53:6a:84:9f:44:cf:66:5e:0e:a4:9e:ab:b6:92:
03:5f:6a:f5:31:3f:a5:c8:74:cf:96:68:f8:93:84:41:90:c5:
50:7e:bb:4f:6a:42:b7:db:8a:d3:4a:6e:06:93:c6:df:6e:8b:
d1:98:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:16 2025 by rpki-client