Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRR1flGp5uFDspbl6TgZ-0QqVJc.roa
File: MRR1flGp5uFDspbl6TgZ-0QqVJc.roa (raw, json)
Hash identifier: 6tWYOOCOk+fU8XflVXovm1JLZ0FpZbSDluft7GqsVvQ=
Subject key identifier: 31:14:75:7E:51:A9:E6:E1:43:B2:96:E5:E9:38:19:FB:44:2A:54:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DEFACBF508024F2395FD69CBA9D28A72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRR1flGp5uFDspbl6TgZ-0QqVJc.roa
Signing time: Sun 04 Dec 2022 21:11:28 +0000
ROA not before: Sun 04 Dec 2022 21:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:de:fa:cb:f5:08:02:4f:23:95:fd:69:cb:a9:d2:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 21:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3114757e51a9e6e143b296e5e93819fb442a5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:b2:7a:58:ae:97:fe:af:f5:8c:73:f7:92:
1f:34:39:99:3a:48:1a:7a:85:7f:7d:54:ac:9b:86:
ef:01:5a:04:86:14:c0:0f:c2:09:52:6d:60:3a:1e:
84:18:9b:9f:e9:0b:07:4f:40:61:df:07:a2:4b:7b:
61:f5:10:d6:31:2e:2f:f9:b8:4a:f3:78:f6:bb:ce:
e6:13:ca:a9:5a:d5:3d:cf:70:c9:f1:82:1a:38:da:
0c:35:18:af:e1:79:a7:c9:a6:30:56:03:a4:89:f4:
33:06:cd:95:8f:e2:b1:e8:9d:e8:37:75:72:3f:a4:
d6:97:17:80:49:f6:86:a0:d7:e0:87:81:9a:89:78:
f9:bf:90:82:61:68:e9:1e:e4:d2:af:1f:79:6f:73:
11:0a:ce:f7:f2:f3:38:98:c6:db:89:85:0a:97:54:
0a:73:ca:2d:f9:36:73:ce:88:68:5f:60:6f:b3:01:
88:05:03:35:c3:f4:df:a1:df:5b:a2:7a:51:ca:bc:
cd:75:69:77:2a:a0:5d:74:bd:19:52:fb:da:58:11:
4c:b5:36:6c:ec:34:2a:8a:2f:a3:01:e5:92:f2:e1:
1e:e6:a9:b7:89:00:19:fb:e9:ab:fc:ec:b4:88:ca:
06:bc:db:74:ba:98:5a:4e:db:c2:06:cd:20:58:a0:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:75:7E:51:A9:E6:E1:43:B2:96:E5:E9:38:19:FB:44:2A:54:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MRR1flGp5uFDspbl6TgZ-0QqVJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f9:b7:a6:2c:6d:6a:d9:0e:e4:2b:be:41:4a:d5:63:e8:e7:
3e:13:ad:67:02:d3:fd:09:f5:48:ba:b4:69:44:c4:87:d9:c1:
c6:73:60:71:77:2d:12:89:b8:b7:8e:ba:a6:34:47:f5:ab:f6:
ec:2a:bb:39:e9:04:7c:87:bb:f7:11:3c:17:19:c9:33:a1:95:
96:8c:25:15:92:7f:8b:40:bc:67:74:a4:d1:85:9c:7f:b6:11:
26:4c:60:d2:d7:52:3c:8d:e9:e2:b3:e7:08:4e:2a:02:f3:db:
06:58:53:23:61:8d:86:cf:c3:d5:6a:72:6c:65:be:79:45:40:
b6:59:f7:77:74:34:ea:2e:66:43:da:6c:9e:7f:be:6b:45:fe:
12:d6:66:64:ed:34:ce:bf:d5:e0:0c:af:75:4c:d0:93:9f:d1:
cb:d8:94:d0:50:41:b0:46:ee:27:3e:5c:d0:b6:01:79:2c:e4:
37:7b:26:49:5a:3e:00:04:af:a5:82:20:ab:26:3b:f2:a7:03:
ea:bd:c6:e7:6b:89:fb:60:63:d4:a2:15:e5:b7:ac:3b:1c:71:
2a:42:ca:78:95:fa:da:3d:a5:de:e4:23:b1:33:74:e8:c1:32:
12:d0:db:cb:0a:e3:da:88:f8:9e:02:a8:67:bd:8d:fd:78:9a:
64:58:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:32 2025 by rpki-client