Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmniWPvGqlGbmldaVmNnmU-W4F0.roa
File: RmniWPvGqlGbmldaVmNnmU-W4F0.roa (raw, json)
Hash identifier: 4VOjD8pVopMJBoaThmQjwyz7cBYsyxcl5IQBpflUx+E=
Subject key identifier: 46:69:E2:58:FB:C6:AA:51:9B:9A:57:5A:56:63:67:99:4F:96:E0:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837A8C256691B7EE933BC7C11B9B9C60BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmniWPvGqlGbmldaVmNnmU-W4F0.roa
Signing time: Mon 26 Sep 2022 16:05:48 +0000
ROA not before: Mon 26 Sep 2022 16:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:7a8b:70d0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:8c:25:66:91:b7:ee:93:3b:c7:c1:1b:9b:9c:60:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 16:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4669e258fbc6aa519b9a575a566367994f96e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:a3:05:0e:9e:0e:24:91:f8:62:e2:24:a3:
cb:0a:9b:80:0a:bf:2c:a7:05:3e:3e:54:35:78:81:
c3:a3:90:c9:36:e4:42:35:b9:8c:45:f5:11:cf:60:
f0:1a:f2:03:ae:23:33:64:1c:c3:1b:0e:a1:9d:bd:
90:63:da:9e:52:47:5d:27:d4:da:73:18:54:2d:3e:
43:a2:21:34:d9:19:8e:3e:3e:3b:14:e8:2c:6e:8b:
4d:19:07:da:23:b6:a0:9b:ae:be:7f:1d:72:ba:24:
ac:03:b8:24:e2:bf:4c:95:99:64:7a:8c:b5:29:58:
3b:40:cb:56:03:7a:97:8a:25:e6:cd:0b:96:ad:33:
08:b3:05:4c:cc:4d:d2:99:08:4c:66:e9:d1:36:74:
d6:c0:8e:9f:65:b0:5f:8a:6d:47:a1:8f:3c:2d:3b:
12:fb:30:57:cd:48:d0:e4:c3:78:88:02:64:97:21:
4c:b0:d5:5a:b9:32:04:02:2d:02:44:6b:09:4f:c8:
48:d1:fc:42:13:25:6b:2d:86:71:f1:30:0f:53:5f:
ea:15:66:84:3b:76:6c:a2:89:4b:f7:37:17:ec:b4:
42:a4:18:f5:ca:ab:49:9a:3e:02:8d:fe:8a:1e:27:
ae:f0:6a:8c:a9:73:ef:73:01:b8:36:52:97:e6:4e:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:E2:58:FB:C6:AA:51:9B:9A:57:5A:56:63:67:99:4F:96:E0:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RmniWPvGqlGbmldaVmNnmU-W4F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:57:07:96:7a:d1:58:a9:10:10:df:1d:09:22:67:86:0c:11:
0a:bf:7d:50:80:50:01:03:19:9a:d6:c8:16:01:f3:ef:ae:a5:
0c:4a:49:29:06:fc:95:87:43:33:d9:c6:85:a9:66:90:07:d6:
64:0f:96:2e:31:6c:3f:e1:1d:17:c1:10:ba:aa:a3:f6:da:4f:
30:ce:63:70:0d:7b:21:8b:aa:49:d4:b0:46:09:db:a9:45:9d:
53:f7:a0:7b:1b:e6:66:e5:85:53:5e:d3:a5:15:96:67:3a:c5:
54:8b:5f:92:38:b6:6b:80:d9:f0:6b:79:db:ee:16:c7:61:63:
bd:e7:00:47:22:6d:88:de:f4:cc:11:c0:69:c4:81:43:55:9c:
e6:bd:7c:9a:92:11:95:3c:c3:e3:93:8f:73:aa:ac:f7:ab:4c:
63:01:19:c1:6f:30:4b:d4:f5:83:1c:6c:a1:fa:8d:11:05:ac:
59:87:28:4e:70:82:a9:3f:e2:75:2f:cc:1f:fd:24:1e:1f:f4:
ae:c4:df:65:c2:3a:3d:19:f5:46:81:91:18:59:6d:f2:89:ac:
63:b3:2f:02:d1:2a:12:12:59:a3:c9:17:f9:c3:57:fe:c8:01:
1f:a2:7f:94:85:ec:b5:3a:a7:1e:49:80:19:83:e0:ad:03:f5:
d2:ca:4a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:55 2025 by rpki-client