Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mw5xzIQCqoq04PRf4_Ae6PGv6i8.roa
File: Mw5xzIQCqoq04PRf4_Ae6PGv6i8.roa (raw, json)
Hash identifier: 5t1PmRSSYxnA61fh+HKkikQkUTIkGE/fGaFWmxSv/K0=
Subject key identifier: 33:0E:71:CC:84:02:AA:8A:B4:E0:F4:5F:E3:F0:1E:E8:F1:AF:EA:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FD6901DA30E6AC19BB74C2BA731748E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mw5xzIQCqoq04PRf4_Ae6PGv6i8.roa
Signing time: Wed 16 Aug 2023 08:14:24 +0000
ROA not before: Wed 16 Aug 2023 08:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:69:01:da:30:e6:ac:19:bb:74:c2:ba:73:17:48:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 08:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=330e71cc8402aa8ab4e0f45fe3f01ee8f1afea2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:44:2b:26:81:99:04:bd:cf:09:d3:1a:cf:
a3:fb:fd:c3:3d:ad:d5:e0:5b:87:04:86:2a:0c:a6:
fc:0e:69:04:66:6c:2f:98:98:bf:04:de:41:80:ac:
8c:24:e0:2e:39:a2:0f:99:29:2c:0b:78:57:f9:58:
d3:a9:08:6c:f0:0c:3e:65:73:9f:46:a9:42:5d:7a:
5e:40:a4:6c:9d:4a:59:af:4f:09:3d:bf:30:30:95:
18:d1:3d:95:af:9e:b6:12:fb:88:14:9e:97:19:8a:
11:6c:7e:f4:55:73:03:ea:40:bd:21:60:22:5a:c8:
58:52:c6:4c:4e:3e:ce:5a:bc:59:c2:19:88:c8:35:
31:f0:6f:05:ec:b4:52:f4:f0:35:ed:cd:8d:9d:6b:
7b:62:41:b5:71:01:1f:8e:89:ab:6f:77:d3:0d:2b:
f9:a8:79:7a:74:fb:0b:90:a6:92:e4:d7:b2:e2:a3:
32:04:15:32:7d:12:b9:94:30:76:76:71:95:49:84:
5b:68:7b:94:58:bf:6c:6e:c9:d4:bc:8b:56:ce:31:
95:6d:d8:51:00:8c:a6:23:d5:b5:08:8e:10:9e:1c:
6a:40:8c:26:94:76:1a:b7:5f:26:4c:24:7a:16:11:
b8:f8:31:ea:e9:7f:35:7e:c6:33:0c:11:99:20:15:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:71:CC:84:02:AA:8A:B4:E0:F4:5F:E3:F0:1E:E8:F1:AF:EA:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mw5xzIQCqoq04PRf4_Ae6PGv6i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:4b:f4:81:98:00:5e:99:6b:f3:20:18:2a:e4:e0:ee:bf:9b:
9f:58:97:4c:3b:df:cd:d7:79:ea:ad:87:0a:a6:0c:26:f5:b8:
08:11:42:5b:bd:13:12:58:83:bd:d2:75:b2:a2:0a:ea:dc:a4:
1a:79:36:d3:f6:d3:eb:b3:5a:09:2f:f2:4f:e6:f1:e6:a9:51:
00:19:83:3c:1f:d9:b1:c1:d5:57:8e:fe:36:36:2d:7b:d6:fc:
c1:99:80:bc:7a:25:f1:39:5d:ed:da:52:69:ff:78:bc:a4:da:
7d:a6:2e:6d:92:f1:ba:53:27:a4:70:7d:3b:28:27:e7:c9:9c:
40:c8:58:1f:ca:9d:93:a4:23:e4:49:7b:91:0e:2d:45:42:d7:
16:12:f3:f3:73:67:db:64:26:ca:5c:7f:e6:46:5e:d8:0a:e4:
1b:83:4d:6f:09:92:9a:5f:d7:1c:8f:2c:07:a5:f0:57:1a:31:
0b:9e:f4:17:f4:3e:01:d2:78:e2:86:3c:4c:99:77:5d:62:b8:
62:25:1f:7c:54:95:c1:27:d0:75:4c:62:09:c7:67:fd:3c:34:
cd:aa:9b:3b:d1:93:19:1d:0c:8b:70:0d:7d:6b:29:55:ba:6e:
72:53:34:55:5e:36:6b:59:4c:1f:4f:42:66:a8:79:b2:9c:62:
af:16:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:33:47 2025 by rpki-client