Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmkHSRReA6kvaJo3xcwTTmZMlts.roa
File: RmkHSRReA6kvaJo3xcwTTmZMlts.roa (raw, json)
Hash identifier: EPudv5YuYWh4eNLkS3+Lg+bF9MZKNoYgB8s8ctiE8tQ=
Subject key identifier: 46:69:07:49:14:5E:03:A9:2F:68:9A:37:C5:CC:13:4E:66:4C:96:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189993224D11D64C93222102141DCC23E1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmkHSRReA6kvaJo3xcwTTmZMlts.roa
Signing time: Thu 27 Jul 2023 21:12:27 +0000
ROA not before: Thu 27 Jul 2023 21:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:32:24:d1:1d:64:c9:32:22:10:21:41:dc:c2:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 21:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46690749145e03a92f689a37c5cc134e664c96db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:ff:93:bb:78:91:d9:10:3e:7e:a1:5d:40:
f1:d5:ca:2a:ea:86:dc:ff:ad:a6:46:e4:c1:17:25:
8f:3e:c7:11:61:2e:8d:24:29:3f:d8:f0:e2:0e:8d:
24:f3:76:8c:49:c5:47:dd:86:8e:3a:d0:e1:56:16:
10:07:c5:9d:5d:51:9a:6c:9f:24:97:86:21:c8:f4:
55:10:d0:aa:df:78:eb:4c:6f:99:d2:b8:cf:70:b7:
68:96:42:65:2d:04:1e:5b:b0:91:8a:90:d3:96:26:
85:a0:84:d9:38:2c:62:c0:10:0f:25:24:6b:da:79:
b0:53:5c:26:b7:b4:03:ff:7e:9b:35:b0:84:b0:ea:
6b:76:51:7f:c0:bd:fc:59:5e:e6:48:65:ee:40:24:
74:a7:b8:b0:2b:36:39:bb:bc:ef:93:eb:b3:90:50:
fe:a8:ca:d2:d0:14:58:0f:01:f2:9e:ee:14:f8:b0:
2d:c2:a0:d2:4d:8e:48:d8:10:b3:fb:7e:03:3e:26:
7f:f7:6c:fc:3a:b6:33:ce:26:1f:c7:b5:1c:23:f9:
6c:7b:b8:a4:c3:15:a9:43:31:63:97:16:34:8f:b2:
9a:c1:f7:aa:97:3f:a3:88:e3:9b:ec:e1:d8:d7:41:
6d:9f:d2:38:1f:dc:be:98:a9:09:d0:46:f1:34:52:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:07:49:14:5E:03:A9:2F:68:9A:37:C5:CC:13:4E:66:4C:96:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmkHSRReA6kvaJo3xcwTTmZMlts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:9c:dc:d9:b0:6e:36:59:78:ba:4e:45:8b:84:e8:77:67:d1:
0d:0b:3c:51:cc:8a:70:bd:7c:8e:bf:04:ae:a6:28:2d:08:43:
5a:50:ea:ad:b8:3a:8d:8d:92:94:eb:df:69:89:14:20:da:59:
2f:c6:26:e2:e3:ea:34:72:92:8d:4b:80:83:75:ee:cc:6b:a6:
7e:25:66:97:3b:f7:ad:79:6a:02:43:f9:a6:05:b1:ee:b9:bb:
4d:fa:de:45:6e:10:a2:9e:fd:85:34:c7:1f:24:ea:38:ba:a2:
44:2c:52:0d:c9:8a:14:d7:86:53:39:36:51:cb:67:db:de:5a:
d6:52:41:03:79:0c:3e:b8:45:09:9f:fe:95:5d:d2:9b:e3:cc:
a3:d9:c8:0d:a4:eb:52:63:5c:bf:70:09:35:f3:e7:b6:a1:07:
48:a4:47:42:c6:2c:fb:39:00:17:05:de:38:eb:dd:e8:1d:20:
a6:96:73:81:52:87:a7:d2:86:7c:c6:f7:c3:7e:5e:cf:13:48:
90:29:1a:4d:a0:ab:08:2f:8f:02:8f:f1:28:e8:67:1c:8c:d6:
7f:83:93:45:af:2f:5d:e8:3d:f7:fd:af:32:65:0e:7b:64:54:
39:63:99:dd:f3:d1:f0:63:0e:31:48:f9:d9:82:ca:cb:ac:2e:
66:2e:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:30:33 2025 by rpki-client