Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m2nh1N8mRmp9x5INOqOpKx3hIkc.roa
File: m2nh1N8mRmp9x5INOqOpKx3hIkc.roa (raw, json)
Hash identifier: GsVm9u24jLzr7N2W1GT8vUhScRCbUhId8AkluO2H+hY=
Subject key identifier: 9B:69:E1:D4:DF:26:46:6A:7D:C7:92:0D:3A:A3:A9:2B:1D:E1:22:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845350118D65DF68F3DAEC41EE904B688B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m2nh1N8mRmp9x5INOqOpKx3hIkc.roa
Signing time: Mon 07 Nov 2022 18:17:47 +0000
ROA not before: Mon 07 Nov 2022 18:17:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:53:50:11:8d:65:df:68:f3:da:ec:41:ee:90:4b:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 18:17:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b69e1d4df26466a7dc7920d3aa3a92b1de12247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:ff:e3:4b:43:81:53:46:82:47:9b:80:4e:
3e:39:d9:66:57:0f:b3:d1:e5:ff:1a:25:ef:e8:0d:
20:d0:da:4f:cb:b8:29:b0:2b:ab:7e:07:80:85:fe:
7d:b5:03:6f:8a:89:5f:8b:00:f1:6d:a8:65:7e:38:
73:36:7f:63:c8:f6:86:2c:4f:ee:53:54:b9:de:c2:
47:cd:34:58:cd:65:37:12:81:48:4e:23:2b:15:0e:
06:56:01:36:34:d6:76:0c:38:d0:b6:aa:07:18:d3:
20:b4:2f:0e:d3:6f:ee:f4:03:53:e1:b8:38:95:91:
0e:b1:23:f3:4d:b2:d8:66:a3:f6:52:e3:c0:40:f6:
5f:e1:4c:1f:73:6d:14:c3:0d:8e:22:8f:a6:d9:f0:
db:6d:1e:f1:1a:bb:a8:51:03:c7:95:ee:60:ca:25:
61:00:9e:02:4d:80:4b:01:cc:07:7f:dc:97:c0:a1:
e2:d5:41:10:5a:8e:6f:d0:33:a8:bc:34:fa:48:e9:
30:0e:61:ac:a0:3d:d9:01:d2:8e:38:14:68:dc:1e:
fc:e6:40:67:2a:c6:cf:2e:57:63:da:5a:f2:02:ee:
89:ab:90:dc:ab:ab:e4:e0:d4:b5:2a:b1:40:a8:27:
08:6b:66:a1:76:ac:8b:c3:a8:d3:e6:7e:cb:30:9e:
cc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:E1:D4:DF:26:46:6A:7D:C7:92:0D:3A:A3:A9:2B:1D:E1:22:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m2nh1N8mRmp9x5INOqOpKx3hIkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:9e:a0:be:8d:4b:31:67:75:67:d4:43:55:76:d8:dc:03:06:
63:38:43:b7:8a:66:db:e0:95:47:ff:1e:bc:3b:4d:87:7c:6e:
f9:3f:48:de:e0:d7:c3:38:96:f8:a0:4b:a9:20:99:42:c1:10:
5f:c7:fb:88:58:35:a0:58:34:79:6b:79:9c:b8:f8:60:55:73:
71:e5:21:aa:d9:a7:2d:24:1a:f3:87:77:e8:30:8b:2f:a6:4f:
a0:09:cb:94:38:ae:c1:b9:0f:4c:9a:d9:31:b4:e5:90:ef:44:
c4:49:bf:3e:b8:35:15:c5:2c:38:1b:44:6b:39:28:8e:b6:15:
3b:13:09:e7:c4:8a:67:d9:18:61:93:90:3e:ec:23:85:75:b8:
4b:42:45:de:20:80:24:70:7d:ab:ec:2e:5f:b3:39:f9:06:63:
1e:87:85:ee:ba:02:84:a4:be:71:d0:8d:86:66:32:ff:78:90:
20:41:82:a9:57:cf:ad:17:1e:47:ac:27:ef:ea:6c:fe:7a:ad:
c5:c2:73:a4:e7:5a:6f:4d:0a:c5:d8:8a:6f:9f:ff:e6:90:3e:
5c:65:87:78:52:31:67:45:8e:a7:42:8a:0c:a7:36:ff:6e:bd:
35:8d:00:6f:a5:61:0f:ec:a7:60:c9:e0:02:c7:61:b9:bc:53:
a8:62:47:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:55:50 2025 by rpki-client