Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTt8UtkMlvIyN9NfZ0JZEXFFG8.roa
File: MKTt8UtkMlvIyN9NfZ0JZEXFFG8.roa (raw, json)
Hash identifier: B+kpyzscuDYWQ2eex0fR5w+lIsJLY2dIMnWjZEtDvsY=
Subject key identifier: 30:A4:ED:F1:4B:64:32:5B:C8:C8:DF:4D:7D:9D:09:64:45:C5:14:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D823347
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTt8UtkMlvIyN9NfZ0JZEXFFG8.roa
Signing time: Fri 25 Feb 2022 05:11:12 +0000
ROA not before: Fri 25 Feb 2022 05:11:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837249351 (0x6d823347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 05:11:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30a4edf14b64325bc8c8df4d7d9d096445c5146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:f6:3e:0c:14:20:c7:a1:48:1b:de:0f:f0:
60:c6:fe:b8:27:e4:4a:c7:5a:f3:90:20:05:dd:52:
bb:75:03:43:86:70:45:e6:99:0f:a9:ae:35:db:ed:
89:89:15:48:95:53:7e:31:7d:06:16:fa:b4:8d:a6:
78:1b:b1:3f:f8:c7:fe:c7:d3:d1:03:b4:aa:af:27:
08:c9:11:31:f4:5b:72:7f:b1:0c:3c:da:2a:d7:60:
2b:8a:eb:9a:cf:98:34:a3:e5:52:04:87:ed:78:bf:
5b:f7:53:af:0a:43:58:c0:dc:82:27:cb:70:5c:a8:
ac:bb:de:3c:17:2e:65:0a:8c:35:5c:05:55:4a:3b:
90:57:2b:ab:99:4a:db:30:88:f1:1d:a4:25:ac:e4:
99:80:84:d0:9c:86:27:f0:5e:fd:1f:f7:44:e2:55:
6f:d4:e6:a3:6d:79:f1:92:cc:6e:27:22:93:5b:82:
1e:3a:17:6c:46:d3:8f:46:a2:7e:d1:00:a9:61:50:
aa:0b:63:47:d5:33:31:f8:7f:36:06:cb:56:b9:27:
44:f2:1e:28:28:87:90:95:90:76:c3:22:31:7f:03:
b8:7c:0b:97:29:a3:9b:6f:07:e7:c2:30:4c:c3:e8:
74:df:a5:fd:4a:47:03:d4:9d:b0:15:3e:d8:ce:44:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:ED:F1:4B:64:32:5B:C8:C8:DF:4D:7D:9D:09:64:45:C5:14:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTt8UtkMlvIyN9NfZ0JZEXFFG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:fe:f7:7e:5e:fe:45:97:eb:68:a8:76:f7:a8:fe:96:a0:4c:
15:91:c1:3c:eb:bd:ef:43:28:ad:67:a0:7e:42:d9:6f:a9:b4:
af:43:93:00:12:47:69:bc:97:5a:66:96:83:44:6f:51:ef:ab:
e9:fd:56:41:30:8e:56:56:85:69:ca:5e:08:eb:73:4b:89:d2:
87:8f:0a:6b:48:13:76:cf:75:b8:ad:8c:f9:19:62:1d:27:6f:
54:24:56:37:12:63:1f:2d:4e:d5:f5:d9:70:45:27:38:23:4c:
67:f1:ea:df:03:42:2c:7e:ad:aa:fc:5b:d1:d7:1c:08:6e:7d:
b5:69:3e:14:2c:54:99:9e:74:cc:5b:2a:7e:ce:ef:9d:6a:47:
26:29:b8:07:12:33:1d:8e:5f:60:6b:78:1f:bd:5a:9e:f2:85:
7f:98:c3:a6:a6:f3:0c:eb:87:e4:74:11:cc:53:04:82:35:56:
38:06:51:69:00:07:30:da:2b:3f:ee:cd:89:7b:5e:cb:9a:52:
82:ad:ed:d7:9b:dc:d2:ac:22:09:0d:3e:73:5e:fe:23:e5:8c:
ee:8e:09:c4:4e:96:9d:69:db:40:37:60:84:a1:1f:25:87:4f:
33:b2:e7:88:0c:2f:fc:ad:d5:c4:42:04:c6:7c:ba:c6:3c:74:
09:26:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:38:14 2025 by rpki-client