Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mm7Nok0sLF2VvgDwRj8lBLhZfFA.roa
File: Mm7Nok0sLF2VvgDwRj8lBLhZfFA.roa (raw, json)
Hash identifier: ylOiLwikJDSh15z/OGWIGSRryQE55Vf0sXajqUHkpSU=
Subject key identifier: 32:6E:CD:A2:4D:2C:2C:5D:95:BE:00:F0:46:3F:25:04:B8:59:7C:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182064A5396794A83F3AA23986604583744
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mm7Nok0sLF2VvgDwRj8lBLhZfFA.roa
Signing time: Sat 16 Jul 2022 09:15:10 +0000
ROA not before: Sat 16 Jul 2022 09:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:06:4a:53:96:79:4a:83:f3:aa:23:98:66:04:58:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 09:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=326ecda24d2c2c5d95be00f0463f2504b8597c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:6f:72:2b:9a:6f:73:bf:96:aa:a8:37:44:
a9:b3:fd:26:e4:f7:5a:6e:f0:e1:8d:73:6a:3a:1b:
19:ac:16:2d:b6:b9:a7:a3:de:d0:db:32:f1:ad:2c:
84:44:7b:f0:e0:5c:98:a8:7a:55:48:4c:19:98:80:
57:45:70:eb:dc:42:bc:1e:52:db:ec:65:20:42:54:
cf:5b:61:ad:8b:85:dc:c0:fb:72:96:37:29:fa:44:
92:8e:3a:5f:05:1a:33:cf:89:f0:9e:21:54:4c:5f:
47:af:4f:d9:d3:c0:e3:aa:0e:21:58:58:61:14:8f:
1f:f7:49:1b:89:49:0a:50:35:91:25:64:3d:d8:2a:
66:d1:4c:b1:4f:0b:3c:03:7e:0d:c4:55:e9:fc:44:
13:0c:ed:b3:a0:31:b6:a1:7c:03:36:80:49:35:a2:
78:85:42:89:a1:f0:6f:e5:e6:fd:fb:22:98:57:fe:
50:81:f2:55:60:95:2f:59:b5:6c:29:0f:9e:50:47:
6f:bc:85:38:c7:02:f2:85:d6:12:cb:00:8c:61:ef:
61:e2:7b:5a:49:2b:6e:6e:4b:5e:25:76:df:3a:3a:
d6:46:69:0c:02:7d:60:cb:86:97:2e:49:6e:f2:3c:
6b:b4:17:e0:45:15:b5:3c:c1:29:af:7f:4b:d4:81:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:CD:A2:4D:2C:2C:5D:95:BE:00:F0:46:3F:25:04:B8:59:7C:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mm7Nok0sLF2VvgDwRj8lBLhZfFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b8:f9:89:52:3b:58:89:32:52:b4:ea:fe:60:51:88:f5:d4:
22:a8:4f:3e:19:57:4a:9a:cc:db:03:42:f8:f7:01:45:58:11:
ba:70:22:c3:35:89:8d:11:b0:15:93:70:a8:3b:05:35:b9:04:
df:c9:e8:e4:9e:95:ac:ac:1d:5e:d5:90:4d:81:ba:22:8c:2a:
a7:b7:34:76:f6:e5:36:57:26:5f:9c:42:b0:e4:cb:f5:a4:fe:
11:99:4a:f1:8f:36:34:96:e6:67:58:51:3e:86:dc:41:42:0d:
04:91:9d:8e:9a:36:03:ea:85:73:75:70:34:fd:6d:53:82:ef:
b3:00:0d:4d:26:c9:c5:50:40:69:9e:61:d6:92:2a:25:13:23:
db:53:47:3a:51:ad:94:8f:2c:a6:62:21:b3:45:0a:7e:86:c4:
cd:d3:4f:fd:cb:38:2c:ad:46:2e:6a:df:45:89:8f:02:e5:1f:
4b:f6:57:f7:d1:87:ae:c1:4d:dd:ab:4a:7d:e4:95:f2:d3:1a:
36:ae:f3:c4:be:19:ff:61:3e:ca:9e:96:03:07:08:2c:d9:0a:
93:e8:ec:15:e2:ff:d1:ae:8d:0e:69:2e:21:44:7b:a2:b6:1f:
55:2e:96:c0:a6:9e:f7:30:ac:d3:22:59:f6:40:f3:79:ae:b3:
ab:ba:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:29:04 2025 by rpki-client