Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmupaeQ9X94LJ2hTDwlwrNK6eSM.roa
File: MmupaeQ9X94LJ2hTDwlwrNK6eSM.roa (raw, json)
Hash identifier: 5QsfPjY1GKUVjx77BmLG73P0RraJokniFkeDOxGnYPc=
Subject key identifier: 32:6B:A9:69:E4:3D:5F:DE:0B:27:68:53:0F:09:70:AC:D2:BA:79:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831E4DE02E320E1E3AADA708365AE8499F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmupaeQ9X94LJ2hTDwlwrNK6eSM.roa
Signing time: Thu 08 Sep 2022 18:12:43 +0000
ROA not before: Thu 08 Sep 2022 18:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:4d:e0:2e:32:0e:1e:3a:ad:a7:08:36:5a:e8:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 18:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=326ba969e43d5fde0b2768530f0970acd2ba7923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:6d:ef:24:e2:71:6f:b9:22:be:5a:98:27:
8a:f1:6a:7d:99:cf:a5:8f:57:07:25:83:70:c8:ee:
87:03:70:37:12:11:ae:9d:b6:e8:27:9a:1e:93:83:
54:26:1b:f0:7b:71:ea:e7:b4:da:bf:5a:79:2e:9b:
5f:ff:f9:f2:77:b7:80:0b:08:21:8e:40:b1:88:81:
09:58:c9:fa:ab:e0:9d:06:5f:d2:59:b3:31:d4:a6:
67:06:54:8c:2a:17:f9:86:80:2a:a1:f4:f9:1f:3d:
fa:95:5f:9b:71:e0:de:fb:de:41:cf:f2:b5:2b:cc:
ab:2d:2f:c7:fc:bd:5d:55:f8:2b:55:b6:92:53:05:
14:b0:81:8d:b8:98:1e:7d:3b:59:5f:3b:0d:b2:24:
6d:f0:9a:05:08:84:b4:6e:72:e6:72:a6:98:b7:cf:
14:5f:4f:49:02:1a:03:a9:be:f2:3d:d8:dd:7e:43:
1d:2a:a8:8c:dc:e6:ce:d3:8b:b5:17:b6:f2:d8:72:
49:6f:c3:a3:37:9d:86:54:72:2d:13:49:6f:21:a4:
ea:cd:5a:76:f4:a8:6e:ba:04:b4:1c:2a:39:84:80:
26:7b:da:ab:e1:6e:67:ff:5d:c4:63:a8:3f:37:01:
c6:44:e7:96:f8:18:75:1d:94:a4:22:b7:ed:89:6e:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:A9:69:E4:3D:5F:DE:0B:27:68:53:0F:09:70:AC:D2:BA:79:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmupaeQ9X94LJ2hTDwlwrNK6eSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:59:2d:90:d1:e6:6a:d6:0d:32:f3:ad:03:b9:b4:de:10:66:
0c:6b:37:18:f9:73:9a:c6:2b:c2:fa:bf:93:3e:84:01:15:2e:
70:96:ff:c1:de:15:80:ce:be:8f:e4:d2:82:e4:35:c0:3e:22:
b7:f3:fe:89:a3:35:3e:6f:40:5a:46:07:98:2b:92:53:6c:84:
b3:06:f3:b2:91:d9:27:cc:64:21:36:5f:42:87:82:0d:2a:c1:
95:31:32:56:12:ad:75:2c:d9:7f:f6:5c:83:d1:94:6a:23:fe:
8e:29:90:76:06:dd:4c:4f:73:5d:54:83:12:ab:ff:bb:83:ab:
ee:be:be:77:3a:56:98:69:bc:58:7b:67:77:d8:25:52:8d:d7:
3e:7d:0a:c5:00:f0:7c:7b:a4:0b:cc:36:66:e0:ec:40:54:92:
6b:de:76:79:95:87:8e:b6:ed:4f:d7:29:68:85:f9:b2:a0:d7:
24:11:52:18:f4:96:e0:aa:72:d4:e2:53:1a:4b:b1:88:38:b3:
46:12:7e:4f:c9:33:bf:79:be:14:28:cd:e2:c0:49:ed:5e:43:
8b:7e:70:f8:d3:de:b6:79:a4:cf:3c:48:f4:3a:17:a3:b0:f4:
0f:98:da:ae:93:a3:ee:d0:3e:51:2d:15:a5:f3:9a:9e:d1:e4:
bb:f0:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:12:31 2025 by rpki-client