Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MqszKg43K8qSAzquqU28DqCUsQI.roa
File: MqszKg43K8qSAzquqU28DqCUsQI.roa (raw, json)
Hash identifier: xj22uooYw0H+yTSgocWCCggDzXfI0xuoXj7Ca5MICBU=
Subject key identifier: 32:AB:33:2A:0E:37:2B:CA:92:03:3A:AE:A9:4D:BC:0E:A0:94:B1:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C80BD8E71E901048FC916B30337F4550
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MqszKg43K8qSAzquqU28DqCUsQI.roa
Signing time: Tue 23 Aug 2022 00:13:15 +0000
ROA not before: Tue 23 Aug 2022 00:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c8:0b:d8:e7:1e:90:10:48:fc:91:6b:30:33:7f:45:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 00:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32ab332a0e372bca92033aaea94dbc0ea094b102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:63:5d:a4:16:55:7e:3d:84:88:7a:f0:c8:
7d:8d:43:c3:25:18:be:95:61:4e:8f:8c:f3:dd:bc:
99:af:2e:9d:54:d9:2d:35:44:a2:e8:74:0c:a1:ff:
b5:04:ba:c7:44:b5:bb:b4:3c:49:07:f2:95:53:38:
87:71:ea:27:60:69:0d:40:d1:22:dc:16:64:62:e1:
6b:7e:fe:ff:b1:25:b0:67:fe:c1:a5:bb:8f:b7:47:
eb:8d:df:33:2c:48:35:28:f4:ba:4c:53:e1:cf:95:
48:36:43:0c:7b:9c:2b:05:ef:c0:86:6a:42:46:f0:
04:d0:72:4e:bf:83:9a:53:c1:54:40:fb:29:3f:e0:
f3:be:40:e3:56:aa:bd:20:57:29:0c:c5:87:f6:bd:
1f:9e:bd:ad:27:17:f6:05:f6:64:00:f5:d4:6c:98:
f2:2e:36:b1:f8:76:62:18:65:1e:7e:69:c0:87:0b:
5d:b4:86:cf:f5:8c:e0:81:6a:f1:e2:85:04:3c:39:
dd:cd:a6:c3:39:f4:69:cf:b9:3b:13:1f:e6:5a:53:
ab:38:07:2d:f0:16:74:17:a7:b2:fd:a9:e2:7b:c1:
3e:a6:35:9c:14:34:f5:fe:52:5d:da:91:02:6d:bb:
aa:e0:82:fd:eb:85:ab:fe:06:d6:06:53:6b:bd:37:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:33:2A:0E:37:2B:CA:92:03:3A:AE:A9:4D:BC:0E:A0:94:B1:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MqszKg43K8qSAzquqU28DqCUsQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:28:df:58:48:c4:5c:f8:22:93:16:57:dd:7c:b2:a2:89:1b:
1c:a2:70:b1:ab:6a:d0:7e:2f:e8:38:e8:2b:d9:b1:7e:25:15:
d6:22:61:98:49:a9:fb:b4:5d:40:59:fa:a1:15:2c:d9:f4:4f:
e8:a6:a0:c3:af:e9:53:f7:b7:59:15:3b:f7:69:65:5b:16:90:
da:6f:47:b0:4b:27:39:d8:28:dd:b3:8f:c5:d5:b0:4d:a0:cb:
95:fb:4d:90:88:ec:de:bd:e1:7b:ab:22:fa:ed:2a:5d:4e:1f:
06:23:cf:42:8d:ae:95:4e:58:c5:cf:e0:56:90:8c:1a:c5:8c:
a8:2b:04:0c:f8:d9:77:50:2f:7f:4e:a8:95:c4:b8:00:c9:06:
fe:f3:06:de:67:df:a0:fe:97:14:41:a4:2b:92:a6:c3:15:32:
a3:7a:e2:aa:fb:0f:54:f1:ad:8d:f4:b0:13:ae:31:b5:ec:05:
a5:90:40:42:6a:8f:12:19:c7:08:38:0a:b5:dd:f3:5f:09:f7:
61:2c:b0:58:40:e0:a4:5d:f5:84:8f:ae:2e:30:e7:d5:02:db:
e1:3c:7b:d6:23:d5:66:e1:8d:64:c7:7e:99:d1:86:67:91:98:
80:f6:cf:3c:8f:39:fa:fe:7e:64:3a:ba:84:7b:a2:dc:1a:5d:
f4:08:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:17:03 2025 by rpki-client