Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MA47RqtyACXuqNryOkm8gvaKB6Q.roa
File: MA47RqtyACXuqNryOkm8gvaKB6Q.roa (raw, json)
Hash identifier: 2LRYI86eKHoxMBeZk42FL/QXR87xuclbYZ7njfeX8RY=
Subject key identifier: 30:0E:3B:46:AB:72:00:25:EE:A8:DA:F2:3A:49:BC:82:F6:8A:07:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1B3445DE325BBFD8EB697FC97C59FAF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MA47RqtyACXuqNryOkm8gvaKB6Q.roa
Signing time: Tue 22 Aug 2023 03:05:25 +0000
ROA not before: Tue 22 Aug 2023 03:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:1b33:c12a/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:34:45:de:32:5b:bf:d8:eb:69:7f:c9:7c:59:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 03:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300e3b46ab720025eea8daf23a49bc82f68a07a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:53:10:c0:d2:fd:b1:63:34:c4:d8:74:1c:
18:37:67:d5:96:f3:43:eb:41:a3:b7:10:74:a7:89:
4a:b0:22:89:8f:04:6c:b6:67:49:04:0f:77:5d:f9:
4f:43:ce:56:7d:43:98:63:f1:b3:cb:c2:57:53:c2:
40:82:c8:da:c3:63:55:3d:86:82:43:1a:ed:5a:4e:
9f:64:51:57:da:e6:7b:08:dd:73:c9:83:ef:6d:1e:
a9:6d:b2:ef:e7:c0:78:1f:1b:08:d4:9d:8b:8c:e6:
a9:3a:79:c5:9c:a4:d2:bd:3a:d5:2f:5c:e1:31:0f:
97:56:e0:0e:bd:c7:32:81:1f:be:fd:74:d2:81:19:
5f:0d:e9:cd:98:42:91:cf:9b:72:76:c2:02:83:eb:
fe:23:93:0c:bc:91:89:73:ca:b6:38:a2:2f:ce:e9:
e7:96:28:09:74:17:7c:22:41:fe:c9:5e:02:36:ef:
4a:9f:47:05:52:cd:2e:72:e6:cc:1a:39:48:1a:be:
d6:5f:30:61:cb:df:08:50:b1:5e:e9:37:62:50:a8:
71:22:a0:92:c2:8e:bb:85:57:5d:27:e9:0d:6f:f7:
dc:18:e1:db:49:31:45:79:8e:18:ff:ac:b6:24:a8:
11:b3:50:e8:68:3f:88:7e:75:04:de:89:aa:bc:42:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:3B:46:AB:72:00:25:EE:A8:DA:F2:3A:49:BC:82:F6:8A:07:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MA47RqtyACXuqNryOkm8gvaKB6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:a9:46:d4:55:72:d3:7f:08:fa:62:0a:b1:23:8a:ca:80:1f:
d3:3c:fa:ce:82:1f:1e:b9:67:05:01:b5:18:83:fd:4b:b4:02:
5f:cd:f0:19:b6:84:0a:8f:1b:e5:2e:cb:b1:c0:fe:b7:bb:1a:
db:8f:c9:ed:c8:6f:7d:2b:7b:bb:d0:50:9b:24:4c:98:9d:3a:
42:6a:ad:f1:c5:bb:02:53:d9:3a:1d:87:cd:da:a0:b2:e4:ae:
fc:b0:41:09:f4:5f:eb:d3:eb:0b:3a:d0:71:e3:f8:a6:f3:6a:
c1:b4:de:7b:1d:99:e1:2e:7c:c3:34:28:19:7c:0e:59:c5:00:
db:f7:f2:92:17:03:6e:59:59:0a:2f:90:06:5d:2d:38:f0:92:
36:da:d9:0f:65:c3:55:b8:c2:d9:e3:93:95:29:e6:14:05:27:
e0:a3:e6:2f:27:44:45:20:4a:17:0a:75:b4:26:2e:f6:b2:32:
8b:f1:85:9a:d5:07:80:d0:d1:84:86:c3:e3:f1:6a:97:54:64:
92:39:96:0d:89:6e:f1:fa:93:0e:03:83:11:46:14:1d:31:a9:
d2:d6:b9:3d:34:20:87:8b:67:fa:51:52:44:28:b4:5c:ca:6b:
ed:0f:3d:b4:79:ed:3c:d0:e1:1e:fd:24:db:bb:c7:10:d2:55:
15:c3:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client