Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mp_BLx9mBGGSATsxHmbB6TysIj0.roa
File: Mp_BLx9mBGGSATsxHmbB6TysIj0.roa (raw, json)
Hash identifier: JKsaMFdViDM6G4OGxTCZB/fD3jH5T4UbVXiiS4lF10Y=
Subject key identifier: 32:9F:C1:2F:1F:66:04:61:92:01:3B:31:1E:66:C1:E9:3C:AC:22:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018465C1B1557FBEB77BBBA5EF2535D48C69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mp_BLx9mBGGSATsxHmbB6TysIj0.roa
Signing time: Fri 11 Nov 2022 08:15:03 +0000
ROA not before: Fri 11 Nov 2022 08:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:c1:b1:55:7f:be:b7:7b:bb:a5:ef:25:35:d4:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 08:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=329fc12f1f66046192013b311e66c1e93cac223d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:f7:0e:6c:c0:d4:d3:02:67:4f:4f:d0:9c:
02:c2:c9:cd:f0:a9:f1:d2:2e:cc:d1:45:71:0b:29:
4a:1f:a8:6e:01:80:19:b9:fb:d0:39:4a:70:8a:9c:
35:50:4e:ab:14:ff:36:98:76:77:b0:2e:6b:7b:80:
75:63:69:80:28:6a:2b:98:b4:4d:c8:dd:41:ae:d7:
98:20:67:81:4a:ba:af:53:52:f6:04:51:9f:4a:6a:
46:5c:51:61:dd:d3:55:f9:12:e8:53:df:c1:33:6a:
b0:57:fc:c1:85:52:75:a9:aa:f5:92:4e:58:be:fd:
72:8d:2b:6f:68:6e:b2:85:84:58:64:a7:b0:a7:c4:
af:03:bb:54:1a:37:29:51:ab:36:44:9e:ba:41:56:
4e:3f:20:3c:2c:49:ae:00:d6:44:e2:b8:f2:63:ef:
bb:60:6c:74:ad:c0:8b:d1:cd:72:c3:65:13:fc:b5:
58:b6:42:2b:14:30:40:7a:19:2f:9e:6a:c3:a9:ea:
bd:b7:1a:15:e6:dc:42:b9:a9:90:e5:3b:d7:76:f0:
c3:3f:30:fa:5b:65:ae:db:7b:ef:18:05:8b:ba:9b:
e7:49:9e:0d:a4:75:13:78:f9:d1:0f:a3:60:3d:08:
79:23:7a:68:ea:f8:5f:8b:47:f0:a5:40:d6:3f:f9:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:C1:2F:1F:66:04:61:92:01:3B:31:1E:66:C1:E9:3C:AC:22:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mp_BLx9mBGGSATsxHmbB6TysIj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:1c:45:35:6a:2a:e3:94:36:d5:d2:2e:75:b6:2a:81:4b:b3:
bb:bc:34:fd:b6:50:e3:94:ee:9c:e1:26:e4:21:90:c5:5a:bc:
06:2b:e8:45:f9:d7:41:df:50:b7:ee:12:d9:86:dd:5a:bd:2e:
21:74:25:69:d9:28:6c:e1:16:f2:13:a5:1e:30:b4:b0:62:d1:
11:15:bc:c6:91:4c:96:95:03:41:d2:27:db:1f:79:1a:7d:48:
3f:a7:f7:66:b2:4c:bd:ce:41:46:5d:d3:78:8f:1c:ff:d3:37:
3a:71:13:42:d9:68:c6:e6:ee:45:9e:a9:8a:d4:ec:8d:16:c3:
38:b5:0a:d5:3c:64:c3:c9:25:44:ea:0c:cf:18:87:69:e2:e1:
6d:53:e7:29:13:ee:68:dd:a4:21:e3:e1:1d:08:84:ed:d5:ee:
17:23:7b:1e:42:3e:df:19:c1:42:e7:41:bc:ae:90:e9:b5:f0:
0f:cc:5b:46:3d:7b:84:1e:70:28:91:2e:15:22:77:97:d8:1f:
6c:dd:48:72:45:5b:da:e8:25:e5:88:82:b1:b4:c4:46:7d:48:
64:97:6e:ad:6e:60:f5:65:ad:0d:79:66:1b:da:16:02:3d:3c:
61:e2:88:02:2a:f9:3b:7a:71:2d:74:de:2f:d1:84:c4:41:1e:
6d:3c:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:15 2025 by rpki-client