Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUx95IQDEcogQAhLpu9q0dgKEtE.roa
File: MUx95IQDEcogQAhLpu9q0dgKEtE.roa (raw, json)
Hash identifier: gjsBISFe8v4DkNikVz+rU/lFypZoLEEwm32pIG2rYPI=
Subject key identifier: 31:4C:7D:E4:84:03:11:CA:20:40:08:4B:A6:EF:6A:D1:D8:0A:12:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018647E003267D41102CEE4E3E7354D686E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUx95IQDEcogQAhLpu9q0dgKEtE.roa
Signing time: Sun 12 Feb 2023 23:05:08 +0000
ROA not before: Sun 12 Feb 2023 23:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:47df:2d42/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:e0:03:26:7d:41:10:2c:ee:4e:3e:73:54:d6:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 23:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314c7de4840311ca2040084ba6ef6ad1d80a12d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:01:d9:89:d0:65:2c:14:d7:d9:ee:cf:c1:
26:aa:fb:12:c0:7a:19:5e:f1:dc:2a:ab:d2:54:f3:
b5:ae:55:fd:18:f9:81:00:0d:73:01:dd:dc:c2:46:
b3:6c:0f:3a:3a:8d:d1:8a:3f:ae:8d:aa:ae:fd:90:
93:7c:39:6f:8f:c1:e8:22:dd:f3:ba:ad:5a:3f:43:
98:bb:fe:5b:02:7d:a3:41:11:76:d0:32:1b:21:10:
74:c9:fd:81:29:56:ef:3c:31:14:84:5a:ee:18:1e:
97:b2:33:79:84:c7:58:3b:41:87:16:2a:08:18:82:
5e:44:a5:2d:8a:1e:60:50:61:61:33:70:dc:45:bd:
65:a9:29:bd:49:f4:82:42:e6:fe:a2:3c:30:09:bf:
a7:60:00:67:5b:a1:7e:d9:3a:19:64:b2:68:77:96:
d7:38:4e:57:65:7c:30:d5:f0:0f:b1:98:13:19:95:
8e:49:5e:e5:4e:88:f9:08:3b:cd:44:f6:f6:8f:c1:
90:47:c9:24:16:8a:5a:e1:17:0c:b2:31:d9:15:f6:
60:49:4f:dc:89:95:3a:3d:09:97:85:9c:7c:7e:75:
71:39:15:70:7d:91:9f:a7:f3:f3:db:19:c0:bf:ae:
53:e4:63:7a:f4:63:09:0e:4a:50:4c:c7:5c:49:75:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:7D:E4:84:03:11:CA:20:40:08:4B:A6:EF:6A:D1:D8:0A:12:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUx95IQDEcogQAhLpu9q0dgKEtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:03:21:cf:9e:31:ea:9e:db:6a:35:16:7f:c8:9e:37:6e:d6:
a0:61:65:8c:9c:e9:29:b3:de:bc:af:e8:67:3e:57:8f:19:71:
3a:3a:82:1c:a0:64:de:e7:3d:cb:ff:b9:ae:b3:06:de:a8:4c:
b7:92:cd:29:d8:e3:75:58:de:64:b5:21:5b:c8:48:a8:2f:32:
83:bd:38:7c:55:2a:91:cb:cf:24:43:25:f9:92:71:e3:35:ac:
d5:bd:1d:84:73:b8:a2:14:1b:d5:d2:30:21:60:ec:b5:68:ba:
b5:52:8b:af:b6:29:50:9c:25:12:de:64:30:29:d6:e8:87:71:
54:7a:1f:e3:b8:78:bc:de:6f:c7:8b:42:17:13:d0:93:3d:4c:
18:fa:cb:60:13:47:58:e6:9b:15:5e:1d:0c:f8:d6:32:ad:52:
bf:1c:ac:b5:78:b4:1d:a8:a5:7c:fd:5b:55:19:f8:7d:3f:ae:
ca:60:96:25:a6:60:56:ea:44:51:77:05:4e:2e:fa:0e:94:85:
11:ae:7c:41:bb:f8:f6:b0:2e:92:a6:7b:e0:db:e8:3a:0c:53:
31:13:b4:a0:ec:5b:4f:03:61:07:d1:21:8e:e9:84:38:f4:58:
f8:d7:3c:b6:c9:b6:60:c1:a9:a4:e7:95:df:7b:50:82:5c:08:
07:f5:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:06:14 2025 by rpki-client