Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_MfkaWBZB2kaYZ6awCRa0alD4pc.roa
File: _MfkaWBZB2kaYZ6awCRa0alD4pc.roa (raw, json)
Hash identifier: 2G/2M+vhS7goXbZKk48+NsVzYYyqeTeSjKo1CEDrQXM=
Subject key identifier: FC:C7:E4:69:60:59:07:69:1A:61:9E:9A:C0:24:5A:D1:A9:43:E2:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AFC84FF604218F743D815ACFBAF9C3A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_MfkaWBZB2kaYZ6awCRa0alD4pc.roa
Signing time: Fri 25 Nov 2022 17:14:11 +0000
ROA not before: Fri 25 Nov 2022 17:14:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:c8:4f:f6:04:21:8f:74:3d:81:5a:cf:ba:f9:c3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 17:14:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcc7e469605907691a619e9ac0245ad1a943e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:e9:aa:f2:12:70:3c:d2:07:75:54:33:d4:
68:38:3a:1e:cb:a4:27:87:bf:8f:67:72:96:74:1d:
63:9d:ac:74:83:8b:09:f8:fc:e1:cc:4e:ed:8f:35:
61:71:c5:ed:0b:52:a4:53:69:bc:17:4b:13:7a:a4:
d3:29:cd:dc:6e:a2:37:c3:35:2a:4b:8b:38:6b:6e:
7d:d0:33:c9:9a:3c:7d:b7:73:24:97:dc:78:6a:65:
ee:66:0f:85:41:d5:98:99:85:09:c3:df:af:54:7b:
6e:c6:80:a9:94:8c:76:30:03:2b:d9:a2:54:e9:4e:
9d:4f:2d:08:fa:d1:ed:31:13:1d:27:21:3e:d1:a2:
fa:65:fc:0a:1c:e1:f3:a4:d1:f0:02:0a:94:5d:88:
2d:2f:48:01:e0:80:ac:75:f3:9e:4f:3b:9f:36:94:
8b:6c:b9:45:07:8e:37:ee:9e:6f:26:f3:4d:9e:2d:
c7:3e:7d:c4:26:27:f9:24:74:d6:86:08:0d:ce:4d:
4e:6e:7c:62:0f:19:8b:f2:97:ee:58:48:85:fc:fe:
78:c0:f4:e6:18:43:c7:5c:b9:1d:a8:74:ee:36:92:
20:be:89:48:62:5d:68:9a:79:20:1c:0b:56:b2:7c:
24:c5:86:76:3b:22:02:34:4f:4a:99:d7:11:7b:4e:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:E4:69:60:59:07:69:1A:61:9E:9A:C0:24:5A:D1:A9:43:E2:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_MfkaWBZB2kaYZ6awCRa0alD4pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:4a:8a:4e:88:a6:85:af:57:6f:68:a1:7b:45:bc:f1:8e:ed:
98:ad:4e:d3:1e:17:ba:63:2e:25:dc:57:1b:c0:86:b1:cd:0b:
e2:b2:00:3f:87:48:f3:57:8c:06:de:d4:a1:f8:a3:47:d6:ce:
8d:ba:5b:27:4e:49:56:3b:01:f4:88:02:0c:07:91:e3:63:c0:
81:d5:fc:98:d3:2b:77:99:60:00:b7:d9:1c:89:30:38:33:b6:
7f:bf:a6:d1:30:c5:10:f6:16:d0:b0:a8:38:c5:b4:c9:98:b2:
d0:2b:4f:10:18:d2:4a:da:68:76:01:44:fc:61:4c:a7:1e:5a:
2c:34:f8:2a:8e:60:8a:18:47:2a:f0:e9:8b:51:8b:12:d2:bf:
34:70:7b:fe:f0:4e:d8:9a:91:10:03:a1:ce:7a:77:88:e8:b9:
2d:d2:4e:69:ad:db:56:79:bc:51:8b:18:8e:e2:be:c4:bf:a2:
c3:cb:f5:a9:1f:5c:3c:3e:84:50:f3:84:d1:36:1f:15:89:a2:
92:a3:cb:90:d6:43:3a:2e:85:51:6c:6a:c5:af:c5:a2:56:05:
2b:13:97:37:99:c6:8f:b1:d9:f2:c7:25:c9:26:eb:03:ae:c8:
c2:68:33:49:14:e1:f3:69:89:0d:26:87:27:72:31:cd:ee:8b:
15:24:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:12 2025 by rpki-client