Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MlK4sfZA5-F-mw3mPV4ZbuoSM_8.roa
File: MlK4sfZA5-F-mw3mPV4ZbuoSM_8.roa (raw, json)
Hash identifier: /L5pcfphave3x5I1fVYkswLrMbAIXRzMYxejlpd6quU=
Subject key identifier: 32:52:B8:B1:F6:40:E7:E1:7E:9B:0D:E6:3D:5E:19:6E:EA:12:33:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D33709A0F091CCC6D82B7EF06EF366C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MlK4sfZA5-F-mw3mPV4ZbuoSM_8.roa
Signing time: Thu 25 Aug 2022 04:16:15 +0000
ROA not before: Thu 25 Aug 2022 04:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:37:09:a0:f0:91:cc:c6:d8:2b:7e:f0:6e:f3:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 04:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3252b8b1f640e7e17e9b0de63d5e196eea1233ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:d3:99:72:84:c9:8d:56:78:3a:52:63:cd:
cf:54:ce:e5:57:2e:6b:9e:46:30:de:9c:c6:1b:ca:
83:2f:9d:3e:76:c4:2d:4f:8c:e3:e9:9d:3a:1c:2e:
f2:f0:83:ce:d4:a0:55:72:f5:90:05:19:18:20:be:
f8:ad:b4:84:e9:d0:bc:4a:37:56:d3:89:7d:c5:4b:
d0:d4:95:fd:ce:b0:bc:d3:e8:40:ff:ce:31:75:6f:
40:75:f9:74:f4:d6:cc:c5:bb:bd:a4:85:13:43:d3:
60:83:09:f6:00:95:9e:22:cb:49:78:e0:60:38:80:
3e:da:49:aa:c5:7c:25:66:13:e8:2b:3a:c7:8b:e4:
2a:e5:9a:e0:5d:c0:9d:a4:20:ce:b1:a0:b5:3a:2c:
8c:f9:e5:bd:de:42:d4:91:86:84:01:b5:95:0f:1d:
d4:cf:e8:32:5c:bc:8a:3a:7c:44:4b:7e:bd:1f:b9:
c3:eb:d7:2d:cf:d1:70:4e:a0:59:0a:29:29:6d:74:
51:15:0e:f8:42:4b:9d:4c:91:f6:02:92:ec:ef:cc:
1f:3b:fb:d6:46:d0:54:11:61:84:a1:d0:ad:2e:df:
40:a9:d8:38:5f:62:8d:d4:3e:ea:e3:32:f5:c3:d8:
b7:9a:eb:36:de:26:c3:a7:e6:7b:55:60:26:c5:2e:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:B8:B1:F6:40:E7:E1:7E:9B:0D:E6:3D:5E:19:6E:EA:12:33:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MlK4sfZA5-F-mw3mPV4ZbuoSM_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:e8:2c:7d:83:8a:f0:dd:39:6c:cc:af:07:eb:40:8e:1e:9c:
67:37:9e:09:5d:dd:3c:22:57:8a:3a:68:c9:f0:b7:e3:7b:01:
1a:4e:85:82:7f:a9:a0:a6:47:16:b6:db:6b:f8:d7:8b:02:e3:
0a:2e:03:df:5e:22:88:e4:61:3e:77:11:5e:92:8f:ef:5d:17:
ec:22:39:a6:2d:08:11:f0:b1:87:22:3d:a7:aa:bd:25:87:59:
51:d9:0b:02:47:f6:e4:53:85:e0:61:e0:a9:43:a9:0a:3b:67:
03:22:fb:1c:6f:67:f7:a1:3a:4a:27:9d:bc:93:ec:16:6a:47:
29:9e:75:cb:6d:71:48:5d:e2:b2:5a:48:ea:e5:00:1c:61:01:
86:3e:10:aa:7b:ba:18:d7:ad:c5:23:8b:5c:bc:74:ff:93:4f:
2d:a5:8c:99:a1:1e:1e:10:9f:23:93:c9:27:b5:49:47:84:81:
ba:66:9d:1c:4e:c2:b6:cf:58:df:5a:fa:6f:1a:42:28:3e:e3:
cc:4e:a8:de:b1:eb:ee:54:a5:a8:a3:93:cf:fc:26:81:9d:d0:
98:70:34:3c:02:ed:55:23:3d:0f:94:a3:4f:4b:61:a1:a6:4d:
6c:42:16:21:11:0c:2c:9c:c4:75:bf:72:4c:3c:7f:5c:38:5a:
c1:30:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:29:55 2025 by rpki-client