Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt_t5IRbfleZxctE9ygNb46DDFE.roa
File: Mt_t5IRbfleZxctE9ygNb46DDFE.roa (raw, json)
Hash identifier: cNpDiVnJ8OXrxsi5k4CWWMdNNMBCmSHnsBHlMmrxDZY=
Subject key identifier: 32:DF:ED:E4:84:5B:7E:57:99:C5:CB:44:F7:28:0D:6F:8E:83:0C:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189947B76D166F16C0F062866E3A6F250B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt_t5IRbfleZxctE9ygNb46DDFE.roa
Signing time: Wed 26 Jul 2023 23:14:26 +0000
ROA not before: Wed 26 Jul 2023 23:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:7b:76:d1:66:f1:6c:0f:06:28:66:e3:a6:f2:50:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 23:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32dfede4845b7e5799c5cb44f7280d6f8e830c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:1c:31:ed:69:e6:7d:26:c3:71:4a:13:8f:
a9:1a:47:11:e6:0c:13:fd:95:80:23:c6:cf:8e:85:
01:de:8b:92:5c:9a:9b:18:e9:a4:35:3c:32:e0:78:
ab:43:0c:b1:f1:81:84:28:70:85:22:42:65:64:80:
53:fa:f7:ec:d0:8d:47:67:a6:d5:2d:3d:1a:d8:0c:
ef:d2:20:00:70:f0:23:89:1e:64:b4:21:f2:72:09:
d2:ca:d4:5c:a4:d0:91:37:d6:44:03:a5:2c:22:80:
ea:68:2f:5b:b9:7a:ee:1b:2d:6b:70:bf:c1:c5:86:
30:f3:0f:37:70:00:52:cd:77:b7:40:a5:09:88:9d:
7b:0b:51:14:f8:6c:e1:16:e9:14:a3:e4:36:58:47:
52:12:8d:2a:ad:47:32:22:c2:9d:50:b3:57:0d:77:
a2:f8:6e:43:be:4b:ef:e9:7a:23:83:40:78:1b:42:
74:db:03:6b:a2:35:b3:2b:1c:84:77:9d:47:51:d4:
e8:ef:8d:0f:1f:fb:3b:65:b3:72:11:a4:82:0c:c7:
2a:22:4e:a2:fc:7e:bc:57:fb:3c:8c:96:71:15:21:
7f:b0:76:42:6d:b3:94:aa:b6:90:96:e2:52:f0:5a:
f4:a5:f1:a2:ad:94:10:d4:1d:7a:fb:eb:77:61:0f:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:ED:E4:84:5B:7E:57:99:C5:CB:44:F7:28:0D:6F:8E:83:0C:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt_t5IRbfleZxctE9ygNb46DDFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:a3:71:22:f4:9e:20:a1:f1:af:59:53:9c:7c:a8:cd:f5:0e:
b0:de:5b:d8:25:76:36:ca:40:7d:7f:8e:48:cf:31:ee:4b:22:
17:37:30:20:51:75:83:90:dd:72:9f:02:f0:be:f2:5b:42:6c:
4f:0e:ce:16:58:cb:0a:3e:f5:4b:49:e4:42:50:e4:6e:2f:43:
a3:2e:a4:da:7b:34:d1:af:99:e9:4d:bf:88:93:6f:c2:15:69:
34:ba:90:f1:46:e7:06:fe:99:a6:97:33:63:c6:79:d1:6e:48:
51:07:7b:27:ef:4f:db:12:55:b5:d2:3e:6a:19:43:2a:d6:8c:
2a:b9:1b:c9:f1:1f:21:ec:c5:40:74:d7:6a:f4:e4:7b:1b:e2:
0f:eb:52:33:db:f6:c7:f8:f2:51:ca:de:34:7a:0e:98:a7:50:
dd:2e:20:5e:eb:a2:5c:e4:1c:e9:62:15:0a:81:41:eb:ed:56:
f8:78:83:46:ca:b8:4d:62:18:b7:93:06:36:ca:6d:26:e0:a9:
94:52:d2:b2:22:b0:91:62:21:1b:6a:30:2f:79:da:98:43:3b:
e3:44:df:a1:6b:18:31:cf:13:19:e8:7c:b0:08:dc:10:84:66:
1a:41:68:cc:69:62:6e:95:e7:06:8d:f1:1b:45:49:96:81:c9:
7f:7a:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:31 2025 by rpki-client