Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMYfHXZ8-U15_8knRd8N6fSI57k.roa
File: MMYfHXZ8-U15_8knRd8N6fSI57k.roa (raw, json)
Hash identifier: tofM+ugw8rWjihb6p5tA2r4rlPr2/PEa9F1Y3OePQSg=
Subject key identifier: 30:C6:1F:1D:76:7C:F9:4D:79:FF:C9:27:45:DF:0D:E9:F4:88:E7:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855ED7D9F960073E8FD5A449602D92191B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMYfHXZ8-U15_8knRd8N6fSI57k.roa
Signing time: Thu 29 Dec 2022 17:04:42 +0000
ROA not before: Thu 29 Dec 2022 17:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:5ed7:6891/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:d7:d9:f9:60:07:3e:8f:d5:a4:49:60:2d:92:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 17:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30c61f1d767cf94d79ffc92745df0de9f488e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:b7:cd:7e:0d:b5:2d:c3:32:6a:2b:87:aa:
28:79:21:89:75:b5:d3:87:bc:1f:6e:11:2a:66:59:
71:3f:2e:4b:52:36:3b:19:9b:6f:85:21:31:d0:44:
63:ed:52:03:4e:b8:d7:2e:e7:ef:36:d6:9c:a6:e2:
0e:62:20:74:9e:26:8c:59:10:a8:f8:21:c6:04:6e:
a5:fc:1d:b2:49:1f:53:94:a6:ce:e3:c6:e6:2b:97:
6f:09:68:e7:f7:22:ba:9d:28:cb:0f:9a:cd:8f:32:
74:99:d6:88:25:2d:27:f3:ca:1a:7a:af:2e:86:0c:
9a:fc:66:85:99:a3:7c:d5:0f:7d:a7:5a:62:11:d1:
bd:34:f7:7c:cc:5e:62:14:14:ac:01:b3:c7:0f:a5:
85:90:89:fb:2a:f7:41:79:7d:09:2d:72:78:e6:28:
51:a4:12:39:2d:18:c2:b4:bf:7e:3b:3f:b6:60:88:
96:71:5c:6c:7e:c5:e4:6b:07:ce:3c:98:18:e1:10:
c1:8f:90:7b:74:3e:2e:f6:6d:c1:a0:eb:15:e7:f0:
56:42:0f:bc:cb:0f:57:68:66:23:3e:c3:8d:c6:c9:
b1:fd:59:23:33:29:98:fd:1f:c7:98:5d:67:2b:34:
77:7a:95:17:09:5b:45:eb:97:60:a3:bc:94:12:6f:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:1F:1D:76:7C:F9:4D:79:FF:C9:27:45:DF:0D:E9:F4:88:E7:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMYfHXZ8-U15_8knRd8N6fSI57k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:5e:0d:a3:be:fd:75:0c:c3:44:2b:a6:dc:e8:d2:35:9b:bc:
b8:e8:7f:d7:c6:d4:2d:5b:6a:e7:02:1c:27:4e:aa:b5:c1:2d:
70:5b:ca:fb:69:f0:4a:2b:22:9d:7f:63:ef:68:96:3f:d5:5f:
d6:5b:09:dc:31:c4:dc:ff:15:0b:06:16:84:c7:53:1b:9b:74:
02:72:31:e4:88:4c:b3:e9:0f:ca:7d:c6:be:f2:0d:a5:04:56:
68:09:ab:94:af:26:c9:13:68:4e:4f:43:11:a7:62:d6:2e:6a:
b2:4e:51:a8:7a:73:49:05:d3:6e:c2:74:bd:2e:79:b5:29:1e:
1f:e9:e3:0c:8d:14:d6:20:b0:85:3d:3d:09:99:61:38:6d:19:
cc:1f:17:9d:09:82:72:ab:67:8d:a3:f2:21:2b:fd:ee:11:06:
5e:c0:af:c7:b9:8a:2a:52:ad:0b:04:a5:ed:2b:a4:04:e2:65:
73:73:d1:91:95:af:a6:5c:c3:cd:b1:fe:04:d7:a9:30:fb:0d:
66:91:cb:40:b3:53:3b:4c:99:ba:7d:16:4f:db:42:eb:5a:bc:
ed:2d:54:b9:77:03:0e:e4:36:f9:55:29:c2:e3:76:b0:3e:8e:
c8:72:06:b2:b8:76:54:df:63:a5:00:f7:54:21:f1:34:f4:5a:
da:ef:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:28:27 2025 by rpki-client