Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyRsMPA684ECf3cObQYpJU1TmF8.roa
File: MyRsMPA684ECf3cObQYpJU1TmF8.roa (raw, json)
Hash identifier: gEn8MRGeBIe3XsQNaY92S2rT/GZ7TXV4jIPlTKSvkoo=
Subject key identifier: 33:24:6C:30:F0:3A:F3:81:02:7F:77:0E:6D:06:29:25:4D:53:98:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F84EB86B33FC8217848D9FF7C95606C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyRsMPA684ECf3cObQYpJU1TmF8.roa
Signing time: Fri 21 Oct 2022 02:10:51 +0000
ROA not before: Fri 21 Oct 2022 02:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f8:4e:b8:6b:33:fc:82:17:84:8d:9f:f7:c9:56:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 02:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33246c30f03af381027f770e6d0629254d53985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:ef:46:b0:d7:22:80:7a:66:f2:9f:18:7f:
7c:d5:38:ca:0f:e1:df:b9:cf:43:c4:5f:38:29:09:
b8:19:58:f4:fe:d2:b7:18:dc:d2:70:02:fd:eb:35:
8d:6e:ba:10:af:4c:ba:54:44:64:35:f5:94:61:4d:
9e:25:77:7f:ed:d2:02:4e:d6:3b:b0:bd:0a:54:6a:
72:df:14:f3:21:4a:e8:17:5c:19:97:b0:11:b3:10:
ef:af:c7:5d:db:29:fd:4d:ac:b6:f4:44:7e:d2:e4:
76:17:d5:27:c8:75:74:53:e9:83:d7:9d:69:6f:5d:
0a:26:6c:4a:84:3a:6e:6c:5b:f3:5c:f2:55:1b:ea:
a7:d9:b0:e9:a7:bf:08:96:d8:89:b5:c2:ca:e5:bb:
19:eb:8b:ca:cf:ab:ac:39:d3:24:89:42:bf:a7:5b:
32:2b:e5:93:e5:b9:fd:47:50:22:03:3c:14:02:3d:
a2:ca:bd:e8:b5:9f:c5:be:fa:9e:92:34:48:1d:6e:
4a:49:4f:65:12:ee:f2:0a:a4:10:ed:01:27:7e:6a:
2b:65:99:21:da:85:10:c4:90:31:16:80:00:d5:cb:
73:3e:f5:a2:98:d5:a1:02:92:33:1c:5d:b1:31:33:
d3:ef:08:65:86:60:b8:bc:49:af:fb:c1:fd:43:f8:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:6C:30:F0:3A:F3:81:02:7F:77:0E:6D:06:29:25:4D:53:98:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyRsMPA684ECf3cObQYpJU1TmF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:37:df:14:11:02:42:4b:09:b6:bc:e4:78:9a:df:21:8f:b1:
ed:68:5c:cf:8c:a2:2b:27:a4:27:a0:1d:da:02:9d:38:10:c6:
13:57:1a:95:65:19:5a:c0:87:a0:ab:f0:bf:2b:35:e8:2a:33:
74:7b:c6:cc:77:fd:da:b0:9e:8f:30:fd:aa:f1:23:88:2e:45:
2f:6c:89:45:19:db:0f:65:39:34:39:00:2d:a9:21:eb:20:80:
ae:1f:b9:15:d5:2e:b5:b4:4c:69:58:8c:72:a3:97:43:7d:99:
a3:15:a3:91:07:a4:52:cb:97:71:20:57:1e:98:39:dd:f9:47:
15:92:18:90:1c:ad:68:95:78:c9:e5:60:62:49:e6:fc:05:72:
c2:39:cb:5c:a2:1d:ec:ac:8d:f8:66:1b:be:85:e9:70:80:f0:
e6:dc:6c:15:22:04:db:91:b2:96:01:c6:3f:0e:19:40:c6:1e:
68:11:7c:82:30:7d:d4:bd:50:0e:19:75:c2:38:fb:ac:80:2b:
c4:76:cb:69:ea:98:c8:af:82:a4:f6:0c:88:a9:65:f7:8c:60:
ce:bf:62:f9:8c:4f:03:35:52:c1:24:a3:ab:9c:c6:49:fa:de:
58:9a:46:60:58:0f:bc:1a:de:fd:8c:ee:bd:92:17:0a:a8:ed:
c0:24:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:20:05 2025 by rpki-client