Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mg2oZw_wODuQgidvX4H4T2lPw88.roa
File: Mg2oZw_wODuQgidvX4H4T2lPw88.roa (raw, json)
Hash identifier: hGmxfkYNtWHwNYv9cPEItMWxlWhTyx4VlpUuq/gmngE=
Subject key identifier: 32:0D:A8:67:0F:F0:38:3B:90:82:27:6F:5F:81:F8:4F:69:4F:C3:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C1C6A73BF09EF04EEDA64387304C94C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mg2oZw_wODuQgidvX4H4T2lPw88.roa
Signing time: Tue 17 Jan 2023 22:08:19 +0000
ROA not before: Tue 17 Jan 2023 22:08:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c1:c6:a7:3b:f0:9e:f0:4e:ed:a6:43:87:30:4c:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 22:08:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=320da8670ff0383b9082276f5f81f84f694fc3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:a4:5b:5a:56:ac:90:67:92:15:f6:55:16:
f3:42:25:d9:a3:3e:8c:8c:c0:23:7e:66:0e:4c:95:
cf:79:a8:fc:e2:1d:9a:aa:3b:c1:d1:9d:d0:93:56:
76:5f:ec:7b:df:a1:05:81:1c:17:42:30:b3:09:cc:
f7:ae:0e:b1:30:bb:c8:08:c1:21:14:3f:f3:6e:e9:
cd:59:a1:c8:cc:bd:52:35:fd:3f:ef:bc:00:eb:55:
bb:d4:8d:91:87:01:8f:8c:67:ea:af:64:21:97:f4:
2a:7a:59:19:c9:61:c4:02:30:ad:70:e2:8b:f8:14:
b3:41:28:f5:fe:ce:f9:50:08:4f:bf:04:d0:3f:94:
52:b2:8c:91:8f:48:fe:4f:10:97:ec:e0:2b:98:f7:
9d:20:8a:ca:7c:a9:ae:f6:83:22:36:ec:b3:86:04:
e0:e7:2d:61:dc:5a:a9:c0:8b:bf:0d:45:d5:af:e9:
30:2e:f9:9e:13:b5:14:2f:b2:57:1f:fa:da:bd:a3:
e8:ce:6e:e0:91:34:af:bb:7c:73:a6:c0:56:a8:d1:
91:be:8a:0d:22:e2:0c:52:f5:e7:02:0e:e9:ff:7a:
12:d8:6f:26:70:b4:ac:91:eb:d1:0b:02:2d:2c:77:
48:28:49:cd:85:00:26:20:44:77:60:39:5f:09:ec:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:A8:67:0F:F0:38:3B:90:82:27:6F:5F:81:F8:4F:69:4F:C3:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mg2oZw_wODuQgidvX4H4T2lPw88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:1f:be:64:97:52:d3:f8:b0:8e:f4:de:99:b3:2f:95:5c:de:
61:62:8f:51:08:cf:f1:e6:a2:67:65:62:2c:fe:79:ba:90:eb:
7a:2f:3f:63:90:02:ed:bb:8d:90:05:02:21:cc:1a:43:4f:06:
a3:97:53:d4:43:16:ef:ae:e8:ed:04:b4:4c:65:98:fc:aa:20:
8d:c0:10:07:93:39:87:f6:1e:75:dc:05:54:eb:08:b9:d4:dc:
b5:d4:15:9c:ae:68:ba:ce:69:3f:d4:6c:8f:84:e8:4c:7d:36:
be:fc:44:da:e3:da:00:29:4f:a4:38:5c:bb:5e:29:be:87:22:
3c:d0:21:5a:e2:f4:fb:be:57:b8:e8:ed:65:13:3c:31:b5:0a:
a4:23:ad:4a:92:e8:f8:d5:90:2e:68:92:6b:f7:16:a4:40:50:
a7:6c:33:82:f8:5d:45:94:58:36:a1:89:60:fc:11:94:30:87:
21:4c:7f:3d:ff:c2:77:51:cc:35:36:fc:8e:0f:c2:ef:96:0e:
bb:75:b4:92:d9:1b:ba:dc:2e:de:98:d2:94:16:57:87:16:02:
be:4c:fc:d1:a2:14:9b:07:ed:09:15:70:92:cc:7b:74:c1:5f:
0e:ef:de:e3:a5:42:60:ab:a4:65:db:4a:08:e8:1d:2c:66:4a:
52:6c:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:22:16 2025 by rpki-client