Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4gw3gMOcpS3wjCSEU736nyetMM.roa
File: m4gw3gMOcpS3wjCSEU736nyetMM.roa (raw, json)
Hash identifier: pXg5j+Ku9rEn4bDqkrKj905V6b/krAsjwlqiSIVhP7Y=
Subject key identifier: 9B:88:30:DE:03:0E:72:94:B7:C2:30:92:11:4E:F7:EA:7C:9E:B4:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85B373EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4gw3gMOcpS3wjCSEU736nyetMM.roa
Signing time: Fri 20 May 2022 10:04:29 +0000
ROA not before: Fri 20 May 2022 10:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243130347 (0x85b373eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 10:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b8830de030e7294b7c23092114ef7ea7c9eb4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:ce:00:f9:76:32:2a:7f:c1:e5:f9:fc:76:
3e:14:44:50:34:e6:fe:8f:06:f3:22:a0:e8:28:06:
13:13:cf:3d:6c:e8:46:9c:1d:3b:2e:10:2f:42:a6:
64:38:c5:36:cd:e8:84:92:b6:52:d7:1d:f0:45:b0:
65:6c:4f:b9:a5:54:85:4b:68:b6:fe:22:4f:83:e7:
97:7d:f6:c0:5a:74:2a:f4:59:d8:50:a9:de:7f:14:
9a:9b:7e:af:d7:4f:82:d7:0f:83:0d:1f:65:28:4e:
0e:06:a4:fd:74:ad:29:dd:ff:40:7b:9f:7b:30:7b:
a8:f8:0c:9f:d9:8c:63:7e:89:a0:6a:d0:05:ca:c9:
d1:38:39:5f:95:6c:f4:c3:cf:f7:59:21:76:fa:cc:
f8:8a:b5:e2:9a:af:26:1b:07:3b:c1:a3:7a:65:a8:
8b:83:57:3e:4a:c5:57:2c:ed:ab:70:64:9f:6d:5f:
b9:f4:ba:de:33:70:ad:0f:6a:ad:05:17:12:27:c2:
04:d4:de:6b:d6:ca:ed:6b:7d:50:ce:ed:98:d8:03:
f6:ae:f8:55:79:f1:69:b1:b2:74:79:7a:b4:e8:08:
dc:91:0b:30:1c:d1:7d:67:1e:da:dd:3f:9a:3f:3a:
6c:36:52:72:96:82:d0:82:53:92:f6:b5:51:e2:6b:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:30:DE:03:0E:72:94:B7:C2:30:92:11:4E:F7:EA:7C:9E:B4:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m4gw3gMOcpS3wjCSEU736nyetMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:5a:dc:e1:6d:de:55:eb:7a:2e:ce:94:95:c9:e5:85:e5:fe:
83:f5:0e:72:30:db:c0:2a:c5:ee:94:d1:1c:e1:49:82:12:c4:
86:e7:cc:4b:e5:92:75:c6:42:b7:c3:88:d0:90:53:3f:38:25:
b0:7f:27:96:f7:2b:75:2f:da:c4:b8:e4:df:14:bd:dd:8d:42:
4d:21:c2:9c:2a:69:af:2a:9a:10:42:57:86:2d:c4:81:e3:4d:
6a:47:64:83:cb:15:40:28:67:b5:60:15:0b:42:35:a7:81:13:
b8:e7:b7:17:78:56:ab:f6:66:95:83:8f:f3:aa:61:bd:8e:d3:
7e:0a:1b:d7:1e:8f:84:9c:b8:cd:ef:61:26:81:8f:be:fc:e3:
21:b8:47:f5:9a:60:8a:af:a8:13:0f:55:f7:ba:96:ba:e6:75:
ce:71:b8:4a:f1:ee:0c:09:fe:9e:9d:62:1c:a4:64:26:02:48:
6a:88:e9:a3:9b:4f:73:27:aa:13:c6:9d:6a:77:4b:19:8a:a5:
0b:6b:3a:72:eb:65:7c:6f:3f:43:e2:bd:44:ff:dd:5c:08:52:
18:53:d3:ce:63:cd:c2:93:1f:0e:5b:62:cd:77:6d:90:94:4b:
17:50:88:49:6d:93:6b:22:48:26:01:31:b7:98:ec:38:eb:c1:
15:62:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:56:37 2025 by rpki-client