Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEnqmCQyh0B-hQrNvC3UL5rZltQ.roa
File: MEnqmCQyh0B-hQrNvC3UL5rZltQ.roa (raw, json)
Hash identifier: 0bCm2NLj/Zg8C4oN7pNAJzdZTgZzmrR8Fyt69iN3uTY=
Subject key identifier: 30:49:EA:98:24:32:87:40:7E:85:0A:CD:BC:2D:D4:2F:9A:D9:96:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EEA0B5B579C7619F1A9839F2C3D93C7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEnqmCQyh0B-hQrNvC3UL5rZltQ.roa
Signing time: Thu 26 Jan 2023 15:09:47 +0000
ROA not before: Thu 26 Jan 2023 15:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:a0:b5:b5:79:c7:61:9f:1a:98:39:f2:c3:d9:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 15:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3049ea98243287407e850acdbc2dd42f9ad996d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:7b:10:58:66:65:09:19:cd:c2:14:6b:a1:
d3:14:4b:be:af:2b:16:f9:84:c1:b1:ef:a5:de:09:
d8:9a:f3:28:21:ed:56:e2:e3:92:6d:59:86:e3:41:
d1:11:a6:30:c2:15:69:7f:fc:6b:5c:d5:6d:28:d3:
60:53:b7:a7:75:9e:ae:c6:8e:f1:70:93:f4:8f:ce:
36:ea:07:42:d7:be:b3:8b:26:2f:01:ab:50:6e:7b:
ed:d7:da:fc:66:f3:a1:b7:10:60:e0:a8:25:71:6a:
a5:81:1a:af:bd:3e:e9:cd:43:a2:76:29:ce:3c:7f:
4c:2a:5e:99:de:97:89:64:13:99:30:30:42:b9:ec:
52:a8:1f:43:27:eb:34:e3:c7:63:fe:ac:dc:49:c6:
a3:eb:1f:07:ff:ea:4d:c3:a4:85:2d:99:44:01:d8:
b8:bb:ba:81:7c:a1:d3:95:1d:e9:77:23:b3:49:88:
1e:6d:8d:2b:67:aa:e3:5f:4f:87:36:00:79:b5:34:
a5:ed:1d:8e:d0:6f:fd:a2:ff:6a:70:5b:a3:0a:91:
6f:d5:f0:4f:58:ce:88:75:63:b5:30:b8:ff:ee:31:
d9:e1:29:e8:6f:0d:4c:e9:2f:f3:e9:42:b1:16:9e:
72:66:c0:e3:c5:fc:53:88:d3:9b:19:48:f0:d6:e5:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:EA:98:24:32:87:40:7E:85:0A:CD:BC:2D:D4:2F:9A:D9:96:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEnqmCQyh0B-hQrNvC3UL5rZltQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:a1:10:b2:f7:b8:86:8e:15:84:21:3e:6a:2e:39:ee:da:4b:
3b:df:7e:4a:fa:51:7c:63:ec:6c:78:d4:f2:cd:ef:a1:d0:46:
ea:8a:eb:84:e1:4b:cc:c8:25:c0:4e:05:7d:d2:6d:90:df:75:
5d:04:08:4f:e6:d7:a4:27:59:ce:a8:02:b0:21:28:0a:16:b0:
a6:89:1d:cb:fe:28:88:12:fe:d5:34:5a:6a:ff:8e:10:a6:4b:
57:ac:01:d3:3b:5a:ff:42:7a:7f:9c:a2:41:df:49:19:af:ee:
58:8e:98:25:21:f6:e0:f8:07:f8:ea:0f:5e:ef:bd:76:53:db:
49:3c:14:19:43:4a:83:d8:c2:24:cf:47:54:5f:15:47:1c:aa:
0f:dd:ab:4e:c9:9f:7f:0c:3c:5a:82:fd:1c:95:aa:69:a2:1f:
38:01:23:ed:19:b9:ba:6d:cb:1a:de:82:94:30:a8:1c:01:0d:
69:c1:98:67:46:bb:65:46:a7:97:01:93:eb:63:70:2f:d3:e4:
2a:68:39:2e:23:52:24:7d:22:ff:3c:50:61:70:9b:7d:b4:ca:
e7:c0:af:68:b0:0a:75:b2:e3:2a:5e:ee:c6:ba:1a:4d:1d:6c:
d8:4c:40:77:ed:78:e8:ad:f5:88:95:52:ca:89:5c:fa:dd:dc:
19:2d:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:39 2025 by rpki-client