Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUCMUU4pRoag5e2ar4DlJ0pPvdo.roa
File: MUCMUU4pRoag5e2ar4DlJ0pPvdo.roa (raw, json)
Hash identifier: sS1ssc0XlWj3I3OWKqgN9wYxk0adFVn5x6aDLzRKOb8=
Subject key identifier: 31:40:8C:51:4E:29:46:86:A0:E5:ED:9A:AF:80:E5:27:4A:4F:BD:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840151D85F62CBABC683DE9E5389CFC96F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUCMUU4pRoag5e2ar4DlJ0pPvdo.roa
Signing time: Sat 22 Oct 2022 20:10:51 +0000
ROA not before: Sat 22 Oct 2022 20:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:01:51:d8:5f:62:cb:ab:c6:83:de:9e:53:89:cf:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 20:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31408c514e294686a0e5ed9aaf80e5274a4fbdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:79:ee:c0:fe:92:e7:d8:f2:e9:dd:85:3e:
8b:93:4b:c6:7d:66:f8:8d:e8:19:08:03:98:0c:2d:
a1:ab:b5:44:b2:a1:2b:a2:59:3f:db:b1:c0:2e:d9:
6e:c1:b8:35:b4:ce:d1:c5:0c:40:54:f6:1e:05:03:
36:9b:44:a1:1c:ba:c2:8a:a5:18:e4:99:df:96:98:
d2:5b:26:64:64:83:bb:af:e1:83:73:3c:28:16:2f:
e0:89:ee:a6:99:c8:05:d4:9e:c7:10:fb:c7:70:79:
d0:2d:40:3e:93:ca:d6:cf:e3:70:6a:97:06:4e:6d:
1e:fe:29:ca:ef:4a:1f:08:8d:e4:67:e6:b4:61:a9:
39:3c:95:12:eb:aa:85:46:08:3a:03:d4:1c:89:de:
3d:a0:50:38:34:8b:e1:8b:32:c3:78:c4:b8:e8:56:
65:a2:6d:a4:f2:b5:c8:2d:e7:4e:73:34:46:fc:03:
5c:20:e3:1d:48:14:c6:a4:5f:64:92:cf:ce:6f:d5:
d3:bc:d4:b5:b1:3f:3d:be:0c:e3:cf:9a:5a:e7:58:
05:31:a6:ca:32:d6:9a:08:66:14:cd:d2:c4:8c:50:
6c:35:fd:c3:e5:83:ab:08:aa:44:aa:c4:37:be:e2:
0f:00:3f:04:b2:cc:e2:32:52:87:42:86:8c:e9:d4:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:40:8C:51:4E:29:46:86:A0:E5:ED:9A:AF:80:E5:27:4A:4F:BD:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUCMUU4pRoag5e2ar4DlJ0pPvdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:e3:62:00:36:83:d0:a3:d6:6c:77:44:4d:1b:ee:19:96:23:
79:6f:16:2a:d7:6a:70:bc:4a:4e:15:6b:f6:f4:fa:0d:1c:eb:
8a:ff:48:d8:86:eb:bd:c6:11:ae:84:75:96:54:d6:21:74:c3:
47:fb:a4:b1:42:58:eb:3d:c3:61:36:e2:8b:e5:b3:93:df:5a:
96:39:9f:84:ee:65:99:4a:0e:45:ec:90:34:0b:1e:67:65:80:
a0:12:ab:e9:80:9d:85:98:57:d8:02:a9:5c:d0:64:65:58:a9:
ae:d9:6f:33:ff:cf:d5:a8:62:93:9d:5c:23:c2:31:a7:18:7a:
f0:90:36:70:c0:1d:e0:3e:43:50:e6:02:4b:87:4e:3c:a3:50:
f6:80:5a:ca:fb:60:cf:a3:78:9b:a3:ef:9b:a0:d6:e7:2b:3d:
1c:4f:36:78:d5:61:cf:6c:b8:67:e4:8c:52:7b:80:2a:aa:79:
52:96:0a:a2:f6:01:9d:a1:20:45:9e:d6:3b:46:9b:89:49:76:
6b:0e:be:ef:f3:f2:82:8a:7a:4f:22:1f:0b:73:9d:f4:f0:81:
09:40:a6:5d:f4:fa:47:f0:46:79:ea:d9:82:80:41:2f:91:f6:
f0:00:cc:e6:96:06:13:47:85:ed:2b:ca:cf:76:27:73:92:a2:
bc:43:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:05:30 2025 by rpki-client