Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOwDriHT0AVpRIZqSPlPV1DdQNs.roa
File: MOwDriHT0AVpRIZqSPlPV1DdQNs.roa (raw, json)
Hash identifier: 8anwWUk9goHvN40XhAnMcWZlobOzzWqM8VEyltUy9+M=
Subject key identifier: 30:EC:03:AE:21:D3:D0:05:69:44:86:6A:48:F9:4F:57:50:DD:40:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76061D2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOwDriHT0AVpRIZqSPlPV1DdQNs.roa
Signing time: Sun 27 Mar 2022 02:10:17 +0000
ROA not before: Sun 27 Mar 2022 02:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1980112174 (0x76061d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 02:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30ec03ae21d3d0056944866a48f94f5750dd40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:46:cd:ef:ea:ea:f5:ba:70:d1:76:1c:e2:
76:46:65:a0:78:15:1a:e4:b8:b5:39:66:43:a4:8b:
29:76:c0:39:6d:00:fe:e5:50:24:ca:6e:52:5d:a5:
41:7b:79:54:41:0a:19:07:61:26:40:56:4c:46:c3:
cd:a0:3f:02:d3:b4:bf:36:45:33:be:d7:0f:25:fd:
1c:2e:6a:eb:7f:75:b4:74:77:4a:eb:be:6c:cb:0d:
12:1f:77:97:d4:9f:1b:b2:4e:ae:4a:1d:4a:22:ec:
e7:29:9a:8d:63:ba:b7:bc:83:01:ff:19:24:a4:dd:
91:44:e6:a8:30:97:fe:11:1a:31:ac:06:ee:9b:75:
ac:84:1d:76:eb:9a:de:21:5a:04:5f:55:4b:ef:a2:
7f:41:e0:80:c9:14:ad:84:eb:fc:52:5c:d7:e6:9e:
ce:34:0c:b1:f0:0e:1c:04:77:49:19:a3:12:22:d3:
a2:89:25:00:e9:16:fe:4b:57:72:8f:b5:28:74:d7:
f1:05:d9:89:e3:a8:53:b6:45:4b:12:b8:35:f3:70:
cb:ca:1d:27:c8:51:cb:88:d4:84:e1:d6:e9:10:a9:
ba:9b:34:66:1e:ae:c5:23:d0:e4:76:86:ec:c7:32:
3f:d8:5b:6a:1f:ab:e0:e7:d8:4d:3b:f2:6c:71:d8:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:03:AE:21:D3:D0:05:69:44:86:6A:48:F9:4F:57:50:DD:40:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOwDriHT0AVpRIZqSPlPV1DdQNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:60:ac:62:16:c3:6d:38:2a:af:8c:82:c1:c2:0f:2d:35:94:
78:4a:cd:ed:82:46:74:f6:76:4c:66:60:99:08:75:6d:d7:51:
dc:10:f7:47:e8:bc:73:75:f4:bb:12:4f:aa:e0:23:68:61:a8:
c8:f3:c2:e4:a5:02:fd:cc:d8:6e:b7:ad:53:4b:eb:ec:88:a9:
31:81:b2:af:a6:ce:ff:94:03:50:34:9a:ce:7c:67:e9:a5:8d:
da:53:0e:39:96:92:2b:5b:88:25:07:51:de:a5:85:03:8a:f5:
06:a4:a6:6e:ee:70:18:b8:fe:b0:08:5a:e2:96:29:72:65:60:
53:dd:5e:f1:9a:8b:37:8d:2a:76:0b:26:aa:56:8c:83:c6:bc:
46:a9:b3:96:d7:37:5a:b6:71:97:2e:35:a3:d3:fe:8a:d7:2f:
06:4a:d7:93:86:8b:35:1c:e1:ae:33:8a:b3:ac:e1:1d:2e:87:
52:06:fe:cc:f7:ad:7e:d7:a7:d5:ff:c6:88:bb:78:a2:14:90:
99:fc:ec:eb:01:4b:2b:e4:91:c8:5b:a4:03:6d:30:9e:09:f8:
55:7d:32:45:54:0c:37:4f:67:ea:d1:cf:a3:be:f6:2e:c6:21:
fe:89:63:49:fb:c6:d9:ff:48:d6:7e:d0:e4:07:16:b3:87:9e:
d6:2b:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:20 2025 by rpki-client