Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOgHKqBKJgnZiNlh8-4oB71lCgI.roa
File: MOgHKqBKJgnZiNlh8-4oB71lCgI.roa (raw, json)
Hash identifier: DUb5X04FOsmO4FIq2ACYGd3c9bqK2PDLHAzZWkZjvOA=
Subject key identifier: 30:E8:07:2A:A0:4A:26:09:D9:88:D9:61:F3:EE:28:07:BD:65:0A:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3EA7CF2036495AA23D19B86EF4734FD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOgHKqBKJgnZiNlh8-4oB71lCgI.roa
Signing time: Tue 29 Aug 2023 00:18:19 +0000
ROA not before: Tue 29 Aug 2023 00:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:a7:cf:20:36:49:5a:a2:3d:19:b8:6e:f4:73:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 00:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30e8072aa04a2609d988d961f3ee2807bd650a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:25:dd:75:69:cc:0f:97:00:9c:32:c0:4c:
6c:d9:44:54:26:af:1b:14:64:41:0d:a8:53:f6:cc:
c2:b4:a1:4b:ad:b3:df:59:17:4a:a9:46:69:99:63:
1c:43:6b:70:bb:8c:4c:8d:8b:79:88:e4:25:e2:32:
db:48:08:f9:7c:aa:aa:55:d7:ef:6e:1f:d4:80:9d:
b5:e8:2e:9e:f9:78:c8:89:ab:97:d6:7f:08:38:c7:
45:40:d3:b4:84:46:a0:39:a4:61:73:6e:7e:3e:fc:
c5:6b:b1:09:dc:90:36:ab:a3:8d:24:4a:be:cd:95:
14:e9:10:50:ed:99:b7:3e:8e:09:f0:92:0c:48:d2:
98:23:d0:1a:c2:51:02:88:16:f0:e6:8c:40:29:b3:
2b:a5:5e:14:5d:7a:8d:fd:ba:78:54:a7:ca:e8:87:
da:3c:d1:eb:e3:b0:f7:e9:7c:af:8e:74:ef:bf:65:
26:fb:db:87:bc:a2:73:90:39:b4:65:f9:85:b6:8d:
0b:7e:59:5e:66:f7:95:db:1a:71:55:b0:19:cb:90:
5a:7a:12:30:21:3c:3c:c3:9a:53:4c:aa:a3:1b:f6:
58:af:41:71:6b:a9:c6:6e:b7:24:e2:f9:14:a3:a2:
e6:e3:17:63:40:61:91:13:21:c8:cb:e9:42:e8:6c:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:07:2A:A0:4A:26:09:D9:88:D9:61:F3:EE:28:07:BD:65:0A:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOgHKqBKJgnZiNlh8-4oB71lCgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:a0:3e:63:0a:17:44:71:93:7f:f5:b6:0a:59:b7:ed:5f:7f:
2d:9a:f7:ac:36:bd:ba:90:d8:23:8e:d2:0a:c3:f5:be:14:10:
8b:89:b4:1b:08:59:30:e1:e8:4f:75:44:4f:6c:58:c0:4a:cb:
a1:9c:c3:db:d7:bd:51:d2:6b:21:15:9f:37:98:9e:c9:63:3b:
d0:e2:b9:df:50:65:8c:28:8f:38:cf:7b:81:52:1d:1d:82:a2:
6a:f8:99:32:e2:3b:2d:76:57:4f:b8:02:2e:a9:1d:cc:6c:17:
e0:6f:e2:ae:62:93:5a:9f:18:81:3d:cf:88:33:42:1f:16:45:
7a:3d:6b:45:bb:e1:7f:92:73:70:79:0a:74:f6:f3:be:1a:be:
1a:0c:b5:e1:f9:98:0a:6c:e7:4f:28:49:4b:6f:e6:6b:4b:f0:
32:09:ef:69:6a:5a:8f:f4:42:3e:88:25:e2:89:38:e4:16:5e:
9a:25:c1:be:30:e6:5b:1d:b5:4b:d3:cb:3a:2f:34:99:1e:41:
6d:27:e1:40:65:e7:8a:dd:21:9e:a3:b7:5b:e0:44:87:bd:b3:
92:dd:e8:d7:79:e2:59:05:97:a9:1d:2a:8b:31:16:11:a5:08:
82:12:f4:21:d3:34:c5:d2:9e:f4:74:4e:a0:74:5f:85:6c:b7:
66:28:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:30:45 2025 by rpki-client