Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MQ4K5LRAQJasTqH0yHsL6sNAt9M.roa
File: MQ4K5LRAQJasTqH0yHsL6sNAt9M.roa (raw, json)
Hash identifier: M+WNSIFZEJkLC9J507Pnq3rnXxUZZG2ivAuaMwqic3Y=
Subject key identifier: 31:0E:0A:E4:B4:40:40:96:AC:4E:A1:F4:C8:7B:0B:EA:C3:40:B7:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 77094518
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MQ4K5LRAQJasTqH0yHsL6sNAt9M.roa
Signing time: Wed 30 Mar 2022 20:11:35 +0000
ROA not before: Wed 30 Mar 2022 20:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997096216 (0x77094518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 20:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310e0ae4b4404096ac4ea1f4c87b0beac340b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:9e:7e:3d:c9:57:4d:6a:1e:0a:68:13:53:
c2:90:19:9c:4b:e2:e5:ea:58:be:e1:ce:f4:ac:6e:
e0:70:b2:78:3b:d4:27:7b:1d:e8:20:92:86:d0:cb:
54:c3:24:11:83:92:e8:8d:6a:01:ca:99:9a:aa:aa:
b9:5e:7c:ac:63:f7:10:5f:6a:62:77:80:9e:9a:c0:
ca:b8:cd:e2:d3:fd:b2:af:e5:85:be:92:ff:2a:95:
8d:dd:af:40:33:16:a7:50:81:18:4e:a6:83:80:4c:
1a:5c:3e:22:04:32:c1:bb:94:1b:e9:43:26:bf:dc:
0a:50:55:a8:72:0d:cb:fd:c5:bb:2c:14:9f:39:9d:
ad:cd:54:36:ab:35:aa:6b:c7:c4:65:29:7f:c1:29:
ba:32:e0:b9:59:ef:d3:a3:60:6f:0d:5e:54:a7:49:
a1:86:b6:c1:e9:0f:d8:a8:17:e5:f9:22:3f:25:74:
22:a2:2d:b6:fd:b4:2c:6c:e6:61:5d:e2:5b:29:88:
e0:2e:ed:3d:22:30:04:97:3b:a8:85:f6:af:d4:9d:
4f:00:56:ab:33:03:3e:d4:ec:27:53:6a:53:42:1a:
dd:63:b7:d9:86:43:a6:01:71:6f:1c:78:a8:07:8a:
44:9d:8b:98:ef:71:91:9a:77:46:1a:ed:a0:3d:f3:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:0A:E4:B4:40:40:96:AC:4E:A1:F4:C8:7B:0B:EA:C3:40:B7:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MQ4K5LRAQJasTqH0yHsL6sNAt9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:a7:dd:30:29:0f:c0:ec:bd:c5:c5:db:84:47:c3:9a:b8:7d:
3c:a4:83:88:c3:99:ac:b0:2b:1d:2e:8f:2f:83:10:8c:d2:17:
aa:71:b0:8d:ab:69:01:3f:18:b7:af:d9:de:9c:9f:e2:70:88:
21:65:0b:e4:5f:7a:22:20:23:38:2a:db:9a:30:29:6b:5c:ab:
cd:74:8e:b1:b1:7f:73:67:18:fe:59:89:7e:91:f1:41:e9:97:
c3:9c:d5:41:3a:6e:1a:d2:86:5c:ec:1a:5c:0d:6e:ff:0e:4e:
24:06:62:ec:2e:06:16:47:7e:76:aa:9a:0c:b8:5b:aa:f8:0c:
a9:33:76:35:b5:cc:18:f2:0a:82:93:2e:c1:e7:34:eb:62:52:
e6:af:05:64:e4:8b:14:c4:d0:a9:4b:54:e0:95:26:9f:b8:c4:
d2:a5:d0:3a:c7:e6:52:82:a9:8d:72:7a:26:97:b2:4f:d9:1a:
3c:f2:9f:2e:e0:4d:9d:11:96:ef:f6:d2:ba:2d:ad:b0:99:63:
10:e2:29:1e:61:08:48:95:e3:f3:2d:d0:fa:3a:8d:e6:eb:c6:
99:30:7c:95:f0:ad:c1:8d:25:91:3e:b6:8f:15:00:19:1e:0e:
b0:70:66:c6:45:6a:89:41:eb:be:36:1e:27:8c:f3:62:e9:2e:
15:b6:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:03 2025 by rpki-client