Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MnWwF6ZO0HGGq2b5MkYq68d6BcU.roa
File: MnWwF6ZO0HGGq2b5MkYq68d6BcU.roa (raw, json)
Hash identifier: PfgcKyAQqZMs1p0M93F89gkXM0z0o3uwa2s/wk/rNLo=
Subject key identifier: 32:75:B0:17:A6:4E:D0:71:86:AB:66:F9:32:46:2A:EB:C7:7A:05:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A43863FDE032841F8FACDA304D4C3B09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MnWwF6ZO0HGGq2b5MkYq68d6BcU.roa
Signing time: Tue 16 Aug 2022 01:15:35 +0000
ROA not before: Tue 16 Aug 2022 01:15:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a4:38:63:fd:e0:32:84:1f:8f:ac:da:30:4d:4c:3b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 01:15:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3275b017a64ed07186ab66f932462aebc77a05c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:c0:7d:ea:8d:c1:9a:c1:40:b4:29:57:d1:
5f:33:9e:4b:33:99:7b:c2:56:ac:a3:08:48:59:38:
5f:65:69:e3:08:44:2a:b2:f1:ef:d1:5e:9e:dc:3b:
ee:9a:3b:df:a6:97:b8:74:5b:3b:4a:8d:3d:a0:b4:
f0:65:c8:2b:08:f6:cf:b1:18:44:14:8e:13:59:8f:
7b:b7:4f:bb:4d:6a:9f:e8:d2:e5:98:9c:40:f7:9e:
0c:86:dd:6a:53:75:d5:f3:e9:73:d5:47:7a:91:5a:
1e:1d:5e:a8:a0:9b:15:95:f2:d7:22:6d:1c:d1:e0:
d5:0e:5f:48:73:80:dc:02:0d:79:d5:29:14:b2:0a:
5e:58:62:68:a7:0f:41:c6:a7:f3:bf:40:2c:bd:bc:
d3:3d:9f:17:4c:1c:0e:73:c1:01:92:e4:c7:73:65:
70:ac:e3:0f:2c:f5:bc:28:ec:74:8e:0a:ac:0e:dc:
f2:d6:f5:b2:f8:94:95:51:07:e0:0c:bd:0e:57:b2:
7f:7b:3b:11:fc:d5:5a:7c:ff:2e:87:7f:15:32:df:
a2:f1:c8:c1:1a:c0:9f:85:5f:26:f3:2e:e9:d1:03:
64:f4:8b:a8:94:bf:60:7a:77:be:5f:b2:ec:ab:a9:
51:45:c0:d5:01:93:8e:60:a8:5b:c9:8a:32:7f:a2:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:B0:17:A6:4E:D0:71:86:AB:66:F9:32:46:2A:EB:C7:7A:05:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MnWwF6ZO0HGGq2b5MkYq68d6BcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ed:b5:b9:b1:6c:bf:92:23:0b:da:a4:df:65:fd:2c:55:40:
2c:65:64:1a:d6:cc:f7:de:33:2e:10:bc:ef:37:a2:c3:6b:24:
24:ff:7b:82:6d:fc:4e:2b:13:da:9a:d6:cb:71:41:1f:61:56:
93:fc:40:8c:17:d2:95:8b:3c:c8:cd:73:5f:7f:f0:46:5f:75:
6d:e2:87:fd:19:69:1b:5e:0d:b6:23:6d:54:e8:4b:0f:ac:42:
8b:09:44:25:d3:ad:52:4a:cf:eb:43:7d:40:b1:ec:14:59:17:
45:0d:f7:ce:d3:97:3c:f3:b1:82:31:8d:e7:3b:4f:49:e5:54:
b2:52:2a:1d:27:c8:7a:07:81:ac:2f:3f:8a:18:41:22:c1:24:
a5:7a:2e:cf:9a:61:3f:1f:30:0d:82:32:53:55:9e:0e:35:5e:
db:5c:12:58:dc:dc:c9:f1:e2:6b:9d:b6:23:a1:c0:e6:53:c6:
28:55:12:5a:d8:27:e5:42:be:22:1c:94:78:ec:4d:b0:a4:47:
83:e2:b6:0f:ae:39:9f:76:72:34:2e:a0:33:b3:58:96:74:d5:
af:e6:6d:44:9c:74:1f:a6:b0:0a:7a:63:5c:45:67:f8:24:b0:
0b:8e:29:fa:3a:12:98:87:66:7c:9d:da:13:97:cb:1a:75:e9:
9c:92:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:29:01 2025 by rpki-client