Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBRlkfNCK3j8-xrQgEJ3py_f4CU.roa
File: mBRlkfNCK3j8-xrQgEJ3py_f4CU.roa (raw, json)
Hash identifier: gE0vPUmiQXym9XcuqJ+Zy9M+VDTSdQ5Z+4E/sfmy6yI=
Subject key identifier: 98:14:65:91:F3:42:2B:78:FC:FB:1A:D0:80:42:77:A7:2F:DF:E0:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188071223DD68746CED959BAFBDAAC72DFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBRlkfNCK3j8-xrQgEJ3py_f4CU.roa
Signing time: Wed 10 May 2023 19:10:09 +0000
ROA not before: Wed 10 May 2023 19:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:12:23:dd:68:74:6c:ed:95:9b:af:bd:aa:c7:2d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 19:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98146591f3422b78fcfb1ad0804277a72fdfe025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:36:0e:d3:63:5c:23:95:3a:36:d2:c7:3a:
82:9e:a4:b5:53:12:91:a1:fd:89:11:11:f6:99:d7:
d0:e6:d9:1e:ef:40:64:94:9f:bd:2c:7d:19:23:57:
26:38:3d:21:99:94:fd:5b:08:6c:4b:43:25:bd:bf:
0d:09:cd:8e:16:7d:ab:78:39:ef:39:b0:2d:ac:ff:
12:36:1c:12:67:59:8f:dc:cb:e2:70:42:7f:48:08:
d0:9c:0f:4f:a5:05:8f:cc:de:58:b9:b1:da:8f:2f:
18:b3:5a:95:f8:ce:a1:da:59:13:11:94:72:d3:0f:
41:40:85:58:41:62:04:0e:5d:a8:90:3f:d6:fc:c4:
f9:0c:90:ce:1e:50:50:90:ed:d5:1b:f9:f5:4d:8d:
a1:b1:df:19:40:be:1b:70:24:ba:41:1f:aa:bc:51:
77:d9:01:9c:62:5a:88:30:ee:51:4f:1d:6a:d3:ee:
16:46:32:69:47:80:8d:52:4d:f0:ef:8f:c7:1b:56:
73:03:03:37:8b:ac:59:ed:f8:ab:42:d1:ff:a1:bd:
52:75:6e:02:e1:2a:50:ee:1c:c3:08:fe:c8:e6:12:
0c:cc:43:c2:bd:af:99:d4:b3:57:64:14:80:19:f9:
22:76:92:69:e3:5a:a0:ed:3e:b0:2a:d3:88:fa:17:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:65:91:F3:42:2B:78:FC:FB:1A:D0:80:42:77:A7:2F:DF:E0:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mBRlkfNCK3j8-xrQgEJ3py_f4CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:e4:12:a7:47:f3:03:d5:c6:1c:fa:f4:2d:a6:9d:3f:65:fb:
02:bd:2c:b4:78:23:a2:ab:05:d7:e7:b1:75:61:58:92:36:2d:
6f:27:d5:12:7a:e6:db:73:2f:1e:ea:d8:03:b1:a8:77:38:f3:
27:9b:58:7a:18:8f:4d:8b:3c:57:67:1c:f5:99:08:86:a3:be:
2e:95:52:69:d6:67:89:dc:9c:4a:57:00:29:ec:55:da:82:ee:
68:2f:a0:fc:72:4b:9f:85:ad:8a:44:64:88:83:8f:95:29:3a:
59:1a:ff:b3:77:b7:b9:fc:a3:e2:f7:61:0e:24:9e:04:6e:be:
0e:9e:de:5d:bc:32:cb:06:f5:05:4e:be:b4:8e:dd:9f:5c:5f:
22:34:78:4c:d5:e6:6e:ad:45:a4:b6:32:b0:44:72:b1:c6:1e:
4f:dc:12:5b:54:74:34:64:4c:d8:3d:23:7a:e4:f5:1f:10:5a:
f5:b6:89:7b:4c:a5:5c:e7:af:19:aa:0d:e5:76:40:75:43:c0:
48:65:22:af:23:75:0a:e7:94:87:b1:9a:2e:74:77:11:e3:b1:
7e:88:25:71:7e:65:14:15:67:58:41:4a:c7:54:0c:a5:d5:01:
f5:57:58:6e:a0:e8:9f:cc:50:85:75:dc:86:db:81:39:a2:63:
b2:71:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:10 2025 by rpki-client