Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MrnqfFreozf2dZZo1EJJyQyofsg.roa
File: MrnqfFreozf2dZZo1EJJyQyofsg.roa (raw, json)
Hash identifier: BkXF6WC3i8zEDWFhjPKWyFw4tT+INfKWbfgfBm7L6ds=
Subject key identifier: 32:B9:EA:7C:5A:DE:A3:37:F6:75:96:68:D4:42:49:C9:0C:A8:7E:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 916173F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MrnqfFreozf2dZZo1EJJyQyofsg.roa
Signing time: Fri 01 Jul 2022 05:10:02 +0000
ROA not before: Fri 01 Jul 2022 05:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439082992 (0x916173f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 05:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b9ea7c5adea337f6759668d44249c90ca87ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:9f:89:8f:f4:07:f7:fd:98:8b:a4:d5:12:
51:3b:c4:8c:af:cc:09:12:64:75:81:5a:67:58:b3:
59:56:64:59:52:a7:4c:13:d9:d2:49:97:81:92:8f:
4b:d1:7f:f5:32:48:5c:83:4e:86:eb:c3:06:c6:31:
b6:f9:d6:ee:bf:65:a9:0a:67:75:7b:82:df:a8:56:
c1:a2:5b:5d:2c:30:d0:4c:5d:18:58:c5:71:59:45:
d7:65:d1:f8:16:7c:0b:99:2d:50:b1:22:7a:35:9c:
96:7e:e2:ff:e7:ae:99:f6:f5:d0:9f:8e:f9:25:46:
76:af:7c:b7:c2:d4:f7:b9:8e:c6:8e:a9:e5:6a:6e:
9c:05:65:f2:25:22:da:b7:95:5f:b2:33:ce:c5:78:
df:81:28:91:50:6a:f9:1f:2d:77:11:60:bd:41:95:
aa:74:d2:a4:e3:8a:d5:52:62:cd:58:aa:4a:47:64:
83:e8:d2:da:d4:76:90:b2:1a:4c:1a:5a:1f:b5:1d:
32:d2:22:85:c3:19:4a:9c:32:33:9d:f2:da:7d:3c:
5b:64:c8:74:00:ff:56:c1:72:7c:4e:18:7e:b3:87:
94:8e:66:3c:aa:16:77:e6:cd:54:e1:29:1c:43:d7:
94:7d:32:92:3f:b6:b2:f5:b4:19:74:0a:72:80:26:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B9:EA:7C:5A:DE:A3:37:F6:75:96:68:D4:42:49:C9:0C:A8:7E:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MrnqfFreozf2dZZo1EJJyQyofsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a0:72:a3:96:e9:1a:e3:01:d8:c0:88:6e:71:24:d1:a7:2f:
3e:31:01:7b:92:f1:51:7e:01:67:41:6e:d7:61:29:5c:88:13:
78:1e:47:22:b1:33:4f:65:6b:c9:7c:e2:e3:fb:f9:e0:b8:c1:
36:0e:d2:d4:a5:e5:19:92:17:51:78:29:b2:83:45:c2:e3:3c:
cd:91:7d:4f:79:eb:24:e3:54:5b:60:a3:34:53:75:da:55:a7:
88:e6:e1:57:ad:0e:f6:8e:f2:24:b4:3f:58:59:66:71:8c:c9:
f6:b3:62:bf:2e:ca:69:6d:1f:13:c6:8c:e9:10:c3:dd:09:19:
f9:a7:bc:ef:0d:5e:81:7a:96:80:71:85:a7:f2:08:1f:27:b2:
ff:e0:f6:0a:53:c9:84:66:8a:ea:58:4c:1f:f0:79:6f:ff:39:
4f:21:61:3e:1b:c7:2e:09:6b:e4:02:bd:d3:04:73:f6:d6:03:
12:30:8d:1c:b3:63:0a:a4:20:97:48:b5:17:98:3e:a2:8d:e3:
c8:75:b2:84:4f:b5:53:df:43:df:c8:0c:57:b5:89:ec:3e:7f:
cc:b6:e0:21:c6:97:b7:dc:d4:e2:40:23:5d:ed:3d:0c:94:01:
7e:36:ec:9f:ec:10:d6:18:12:31:9b:fa:10:3f:c2:23:9c:e7:
79:9c:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:35:42 2025 by rpki-client