Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MjLpbXZk7mDZn294aBkUtIldZdY.roa
File: MjLpbXZk7mDZn294aBkUtIldZdY.roa (raw, json)
Hash identifier: vbnTfzLZnq84LxGlajj7lqehfVrqCbrxYsbNgPS4+gc=
Subject key identifier: 32:32:E9:6D:76:64:EE:60:D9:9F:6F:78:68:19:14:B4:89:5D:65:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861F1F9AD7E5D5B3A29FDC6416D99824F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MjLpbXZk7mDZn294aBkUtIldZdY.roa
Signing time: Sun 05 Feb 2023 01:10:10 +0000
ROA not before: Sun 05 Feb 2023 01:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1f:1f:9a:d7:e5:d5:b3:a2:9f:dc:64:16:d9:98:24:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 01:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3232e96d7664ee60d99f6f78681914b4895d65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:97:f7:b8:76:9a:01:16:8d:a5:c0:5b:28:
9c:84:6d:fd:2a:14:60:1f:c2:6d:d9:9d:bc:35:a3:
59:db:75:53:da:c1:96:cf:ae:71:f3:06:48:df:8c:
fd:85:5c:0e:cc:fd:e9:e4:70:56:65:89:bd:e0:2e:
99:76:05:25:2a:bb:11:9a:d6:10:3b:58:cb:e2:df:
ff:11:39:43:02:0c:c3:db:80:f6:7f:42:6f:98:f4:
ca:93:21:58:46:50:c8:d0:80:52:e4:95:85:d1:2d:
bd:f9:42:fe:d4:8e:b5:3d:be:bf:0c:cf:bd:7b:f6:
47:bc:a8:b7:b2:cc:b4:b0:c6:2e:00:70:30:ce:53:
38:a7:6b:62:34:6b:c1:32:7d:9b:93:1f:6c:06:c2:
cc:4a:6a:3b:94:34:72:4e:6a:0a:45:1f:74:1f:4e:
45:0a:91:e6:23:7e:56:68:9e:e7:6a:60:5a:e2:93:
40:31:89:1b:45:c6:02:10:ff:13:83:43:69:04:8c:
cb:56:09:67:b8:0a:56:94:fe:b4:3b:eb:b6:87:30:
85:b2:61:04:c9:f6:84:33:5c:df:03:ab:d7:f1:d7:
52:23:fd:80:fe:2a:20:80:b1:bf:d2:24:bd:d1:5d:
44:9e:37:5b:49:62:bd:60:59:c1:c0:d2:a8:b8:f3:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:E9:6D:76:64:EE:60:D9:9F:6F:78:68:19:14:B4:89:5D:65:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MjLpbXZk7mDZn294aBkUtIldZdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:49:ee:20:7b:12:45:42:f2:ff:38:e9:c3:a4:eb:5d:49:9e:
9d:cf:80:2c:70:fe:88:65:cf:0e:ad:58:a7:8d:d8:c7:6c:e6:
42:ce:dd:9f:b3:67:c9:ec:3d:f9:c1:e5:b1:e5:5a:16:6e:11:
0c:d4:56:85:e4:a8:ab:77:29:09:a7:d2:db:0c:7c:bd:83:e8:
67:31:7b:11:54:39:55:b4:f9:72:f2:91:f2:0a:ae:5f:08:d0:
59:7c:d5:54:2e:a6:db:f6:03:f7:1d:bb:22:65:0d:a1:98:83:
86:b1:2d:eb:c8:2a:d7:df:77:19:81:11:fa:86:a5:24:3e:2d:
79:e1:ab:27:62:64:ff:08:94:af:9a:08:34:4d:d7:7b:1d:f8:
a4:52:0a:b6:39:7f:69:ef:43:39:d2:76:5c:9b:f0:de:09:47:
e7:3f:4b:ec:f0:75:a6:83:91:a9:73:b8:fc:67:cb:27:bc:8f:
7b:d5:81:5d:ee:0a:ea:dd:2a:44:b4:96:30:b3:d2:6e:f5:65:
08:88:3e:b7:34:41:73:5e:c7:05:c6:ee:86:14:b4:95:d0:34:
70:6c:ac:b5:ec:82:26:fa:89:ad:24:48:b9:cc:1f:bd:73:de:
5c:96:77:13:1b:c9:1e:15:19:7c:e3:ea:a9:7e:48:e5:27:2a:
4b:40:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:19:30 2025 by rpki-client