Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbCR6RgKXmYTy0binTZbJ8p5jnk.roa
File: MbCR6RgKXmYTy0binTZbJ8p5jnk.roa (raw, json)
Hash identifier: Z5msZz2EYhM76rk3OGbO3U9UKI3AxN2ncbJH73hnXzE=
Subject key identifier: 31:B0:91:E9:18:0A:5E:66:13:CB:46:E2:9D:36:5B:27:CA:79:8E:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F766F91C8BBCFA7C7F0E2EC77D5F7CBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbCR6RgKXmYTy0binTZbJ8p5jnk.roa
Signing time: Tue 15 Aug 2023 04:14:27 +0000
ROA not before: Tue 15 Aug 2023 04:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f7:66:f9:1c:8b:bc:fa:7c:7f:0e:2e:c7:7d:5f:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 04:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b091e9180a5e6613cb46e29d365b27ca798e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:79:15:77:6d:45:4a:56:87:90:3e:39:c1:
0f:d6:86:09:d4:01:9a:5e:e4:10:12:5e:98:1a:62:
ef:d8:c6:7c:9c:09:83:02:f2:ee:a4:e7:af:ea:30:
9c:59:d6:90:b1:1b:ca:6b:21:b4:c0:22:da:15:2c:
79:12:c3:97:8d:8a:7f:57:c4:2a:39:2d:22:a1:94:
07:b0:61:c2:99:4c:c3:c0:18:ab:38:3e:b7:3c:9f:
87:99:e7:68:b5:38:d3:b0:47:a5:0f:8b:7c:5f:36:
51:da:3e:2d:ed:08:e5:0f:93:5f:47:f1:1b:c0:64:
9a:22:3f:d2:0d:92:4e:b5:7b:2c:76:61:8f:e0:6d:
05:da:24:41:40:c2:30:1c:f3:54:ed:56:ed:9b:d2:
d5:e7:ff:e2:45:e9:38:51:df:f0:d4:3b:a1:f3:33:
87:4d:38:df:b6:1f:38:65:be:51:e6:25:77:7f:d0:
4e:d0:94:10:f6:39:14:bd:24:32:90:0b:33:ca:7f:
6e:08:d7:87:64:3a:57:d3:52:4b:35:35:14:5e:b7:
98:3b:ea:38:af:cc:4b:a7:ab:19:4e:e2:54:6c:0c:
73:01:94:24:f6:f5:ed:1c:98:4b:12:7f:11:80:e0:
7b:24:6b:b6:2d:bd:95:21:18:73:e3:8e:fa:d4:f7:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B0:91:E9:18:0A:5E:66:13:CB:46:E2:9D:36:5B:27:CA:79:8E:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbCR6RgKXmYTy0binTZbJ8p5jnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:f9:7b:e2:95:b0:17:94:96:38:01:42:7c:49:20:89:cd:18:
7e:17:cf:bb:5a:bd:b8:2e:fe:31:47:ce:f1:9c:f3:1e:d4:61:
80:55:0b:86:37:ae:b1:15:35:6f:6c:2a:15:80:a5:d5:ba:1f:
75:9c:af:9e:a8:7b:1c:cb:71:13:31:d7:cc:54:a8:8b:59:b8:
99:2d:71:c9:24:4a:86:81:c6:6c:39:fa:6a:e2:76:31:d5:bd:
82:fb:4c:7b:18:1b:eb:9e:2f:b7:38:a0:9f:ce:fe:eb:15:9d:
01:24:35:05:dd:72:7c:e5:b3:3a:a0:c0:de:7a:f5:8b:b8:f6:
fa:39:a4:54:6f:4f:2d:a7:22:fd:9e:98:15:da:e9:46:65:88:
87:1a:48:8e:9e:15:18:92:e8:d0:29:cd:e1:b5:fe:6c:2c:21:
80:50:55:d7:13:86:1c:e1:82:fa:27:95:7c:fc:51:da:f2:9c:
0f:27:fb:8a:c4:0d:83:4d:58:0f:db:f1:74:5e:d8:23:32:3e:
98:d0:53:eb:7f:24:92:e7:2b:61:fa:4c:5a:fc:27:55:cb:9e:
fa:12:b8:7f:aa:af:33:33:da:5a:0b:d8:fd:2a:39:90:59:56:
a5:1e:3b:8b:c5:d2:df:34:f8:1a:c3:a2:c7:77:2a:11:e1:6c:
4f:a8:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:13:09 2025 by rpki-client