Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mj8FaZ6ETKQ-ZLdS_ZeCTEwnrsQ.roa
File: Mj8FaZ6ETKQ-ZLdS_ZeCTEwnrsQ.roa (raw, json)
Hash identifier: UVvmqi83M5HIgfKY3VDhd0ak/H25GjvVrzBtgaVIXTA=
Subject key identifier: 32:3F:05:69:9E:84:4C:A4:3E:64:B7:52:FD:97:82:4C:4C:27:AE:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833690EABF64716770E44C79A34844A52C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mj8FaZ6ETKQ-ZLdS_ZeCTEwnrsQ.roa
Signing time: Tue 13 Sep 2022 11:16:50 +0000
ROA not before: Tue 13 Sep 2022 11:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:90:ea:bf:64:71:67:70:e4:4c:79:a3:48:44:a5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 11:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=323f05699e844ca43e64b752fd97824c4c27aec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:03:d4:ec:45:5e:ca:27:2f:18:5e:87:de:
ca:42:9b:ae:27:e4:67:2a:f3:ad:0f:fd:3c:5b:d4:
f9:84:11:26:16:10:2f:0a:94:78:ff:0e:3b:49:4f:
12:3a:67:40:b3:30:21:0d:8c:b9:69:d1:32:c1:c3:
bb:0e:64:f9:e3:ad:1d:3a:e9:0f:ad:94:d2:62:86:
e5:e0:ef:41:12:7e:72:e8:54:f8:95:06:73:41:90:
20:d2:91:ee:ce:24:83:0d:91:18:de:8f:e4:8b:e0:
bc:fd:08:3f:40:29:df:08:ef:79:f0:97:e3:51:bf:
4c:98:17:19:bc:03:61:04:31:85:d0:04:14:3a:2c:
5a:c1:b2:f5:80:1b:60:38:b8:77:28:66:62:74:74:
6c:e8:cd:72:ae:8b:31:47:5a:3a:5e:ed:48:69:de:
30:85:78:86:1e:ab:71:de:4c:c0:c5:16:1c:62:65:
80:90:82:51:ac:87:80:1f:f4:c1:66:32:0c:c0:43:
29:a8:97:a6:d9:03:d0:eb:75:40:8e:1f:de:e4:c7:
7d:df:12:84:3c:04:38:71:ac:e3:bb:51:bd:f8:ad:
1b:0c:cf:18:f7:3f:b9:93:a8:b3:f5:2c:e5:32:40:
4d:11:4f:a3:2d:a9:3d:cd:0e:99:61:4f:f6:65:5a:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:05:69:9E:84:4C:A4:3E:64:B7:52:FD:97:82:4C:4C:27:AE:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mj8FaZ6ETKQ-ZLdS_ZeCTEwnrsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ed:88:0f:eb:d0:c1:7d:2b:d1:dd:3d:57:e3:da:2d:af:3a:
b2:1d:e6:4e:d6:c1:7c:32:49:d3:43:7a:e4:0c:0e:93:b3:18:
7f:cb:2f:6a:29:d7:e3:45:a7:c5:fe:da:56:9d:8c:ff:73:6c:
1d:83:e2:55:52:c0:7f:a7:ae:9d:66:39:00:00:34:8c:1b:87:
ce:8a:21:ce:01:c3:ae:17:6b:88:d2:1d:5b:70:3e:30:8c:53:
39:75:a5:07:eb:56:bf:f3:f7:8f:bd:a2:6a:4d:da:9b:02:a6:
d5:9f:9d:2d:8d:2b:c5:e7:96:1f:55:c5:b9:de:15:88:68:34:
a9:ca:59:56:f1:3e:0d:f0:6d:12:cb:3f:d3:95:e7:3b:16:62:
55:33:b9:13:38:c3:92:f0:a3:9e:cc:d6:55:48:b5:9e:65:a4:
92:df:d2:95:7f:fd:ee:94:ef:2c:4b:c5:ba:5c:17:b4:c3:3b:
fd:5f:e8:ba:98:87:e5:b9:01:88:d4:2d:30:a8:bf:88:e3:d8:
86:ff:34:7c:1b:d3:38:c2:e7:ae:5b:bd:2d:de:30:07:e5:83:
bf:5f:04:ee:24:5c:76:43:f9:cc:32:b3:14:cd:ef:d5:48:1d:
e3:fe:af:e7:a1:d8:a2:fe:4b:38:eb:d9:14:e5:da:ae:d1:2c:
80:14:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:46:09 2025 by rpki-client