Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBBvlwVvQ-brJGy4NWYc0aGl28U.roa
File: mBBvlwVvQ-brJGy4NWYc0aGl28U.roa (raw, json)
Hash identifier: JN1pH0UrwnD8OeRnrBsS6mzpkQjOnYXKINgs7hF6yP0=
Subject key identifier: 98:10:6F:97:05:6F:43:E6:EB:24:6C:B8:35:66:1C:D1:A1:A5:DB:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018542519A6F707281051195198FAE675E0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBBvlwVvQ-brJGy4NWYc0aGl28U.roa
Signing time: Sat 24 Dec 2022 04:08:42 +0000
ROA not before: Sat 24 Dec 2022 04:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:42:51:9a:6f:70:72:81:05:11:95:19:8f:ae:67:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 04:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98106f97056f43e6eb246cb835661cd1a1a5dbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:22:9a:cf:63:27:e5:e6:22:24:ea:bb:b3:
90:25:23:3d:1e:20:12:f6:e2:ca:8e:bb:7a:5b:f9:
e2:2c:c2:b7:59:e8:aa:9b:2f:e0:1a:6c:6d:e8:1d:
16:d9:b4:b3:a6:eb:d8:2e:c7:a2:33:19:0c:21:07:
71:7c:df:e4:75:8a:3e:68:77:3e:37:59:76:2e:12:
84:45:61:af:1e:fc:57:15:ca:e2:27:4b:e9:7a:9c:
6f:55:95:a0:25:7a:35:2c:46:64:fb:c9:c3:2a:ba:
85:63:a6:7d:33:6e:7f:d5:45:8d:55:c2:02:54:83:
2a:a9:78:26:aa:2c:fb:7e:af:82:2c:88:29:07:52:
a9:84:f3:08:97:fb:40:07:9d:76:d3:8b:b8:d9:48:
0a:d3:63:c3:7a:2e:0a:7d:03:de:b1:8a:60:36:95:
60:78:fa:8d:25:0a:2e:dd:25:21:4e:32:01:4c:7f:
a7:fd:b1:3e:66:5b:3c:f0:71:3e:be:55:9f:05:d7:
c8:7e:25:50:eb:a6:9c:e5:71:68:5c:93:d8:06:7f:
8d:42:55:25:60:3c:3c:a7:f3:1d:8e:e6:a4:88:45:
4d:31:37:d4:eb:2d:b7:1a:f6:a0:90:ba:0b:a6:40:
de:de:54:3d:01:5f:28:a5:96:5c:44:2f:25:6d:a1:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:6F:97:05:6F:43:E6:EB:24:6C:B8:35:66:1C:D1:A1:A5:DB:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBBvlwVvQ-brJGy4NWYc0aGl28U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:f1:c9:c1:9f:d7:3e:ec:29:9c:e9:cd:a0:7c:2c:af:38:7c:
d5:40:2f:4d:31:83:ff:01:b0:7d:f3:b4:4f:ef:15:4b:41:0c:
2b:a7:20:8e:06:9d:47:1b:b0:18:da:d5:bd:7b:23:3c:f0:c3:
85:8a:75:fd:b1:0f:e7:9a:4e:83:c5:d0:9a:d9:e3:1e:ab:dc:
89:7f:92:4e:5e:43:77:62:1c:3d:1a:16:d8:a7:ce:d1:03:8c:
7b:88:02:fc:b4:e3:2d:6a:d2:41:cb:76:fa:b5:a8:f8:71:57:
1d:2b:0e:46:fd:59:8e:fc:ff:6b:bf:96:6f:02:ff:6c:61:9e:
bb:45:24:da:4e:c0:ef:b4:b3:1c:f4:57:03:b6:2b:01:06:95:
1d:2b:00:26:3c:16:27:45:00:92:be:81:41:e5:b8:0e:c5:15:
23:96:e0:80:48:bc:e4:bf:b6:4b:ee:73:b3:d9:72:a3:1a:bd:
4b:a3:d9:e1:b2:10:2b:c6:ea:c1:81:4c:ad:ba:92:5c:b5:71:
b7:88:6e:a3:e9:88:c6:a9:e0:17:2d:14:98:e0:82:9c:d9:a7:
25:6c:5a:44:ed:a8:68:ce:a6:ab:c7:3f:d3:c0:e5:54:03:42:
3e:bb:10:07:2a:7c:a7:0d:d6:3b:b4:0d:3e:29:98:2b:52:03:
83:7f:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:00:46 2025 by rpki-client