Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mCPBTcA__hqhZYMQJ8zhFUfJbD8.roa
File: mCPBTcA__hqhZYMQJ8zhFUfJbD8.roa (raw, json)
Hash identifier: Qi/q45RgdAJ3UkPqO0DZz4AuWQm74+VzYrR3hs/kb88=
Subject key identifier: 98:23:C1:4D:C0:3F:FE:1A:A1:65:83:10:27:CC:E1:15:47:C9:6C:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859BCFB5DDAE28B3D74AE28F5698F80439
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mCPBTcA__hqhZYMQJ8zhFUfJbD8.roa
Signing time: Tue 10 Jan 2023 13:12:39 +0000
ROA not before: Tue 10 Jan 2023 13:12:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:cf:b5:dd:ae:28:b3:d7:4a:e2:8f:56:98:f8:04:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 13:12:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9823c14dc03ffe1aa165831027cce11547c96c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:fc:9d:5e:7d:a6:07:da:f6:6b:72:d4:8b:
e5:d1:e1:ab:65:73:cf:9f:82:c0:bb:27:9b:e7:59:
79:9d:ee:71:25:be:5d:bc:a9:93:6f:5a:db:9d:9e:
cf:e5:ef:69:64:70:c3:4d:1e:44:b9:6f:2b:cd:a3:
1a:9a:1f:0f:b0:74:2f:94:82:f6:6b:01:36:be:fc:
3e:69:9a:89:19:f1:41:03:32:4b:51:17:2a:38:64:
db:46:e9:c5:c3:2d:21:1f:b4:b9:75:b1:85:ae:c8:
1b:d3:17:eb:66:bb:12:4d:2f:eb:8d:98:b5:39:fd:
9e:2b:9e:bb:40:b0:41:ae:88:8f:fe:e7:c0:38:7a:
45:c2:7c:9a:f2:bc:ee:f1:ba:4f:ee:fb:5a:0d:ea:
dd:d7:2e:6d:66:0b:f6:34:fb:d6:ea:b9:61:44:7d:
59:0d:7e:c0:5a:aa:73:a6:28:4a:74:6d:fc:d5:93:
bf:6e:ff:0c:bd:db:6d:93:d5:88:69:a7:b4:ae:63:
66:80:fa:51:84:ff:3e:11:24:07:45:7a:26:9c:2b:
50:be:e8:17:6c:d1:ba:aa:d4:b2:2e:cf:59:71:7e:
a2:e1:83:73:e6:de:1d:92:b3:7e:30:ca:b0:21:0f:
95:2a:9b:18:9d:4e:3b:dc:86:d5:86:e2:d8:71:52:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:C1:4D:C0:3F:FE:1A:A1:65:83:10:27:CC:E1:15:47:C9:6C:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mCPBTcA__hqhZYMQJ8zhFUfJbD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:c1:0e:d3:7a:1b:ee:65:2e:60:b2:bd:0d:11:8b:e9:87:2b:
ae:b8:2a:16:ce:d2:a9:a1:24:c9:e8:56:a8:e5:d0:e6:0c:64:
15:70:4b:11:e5:f9:6f:6d:38:12:ff:bc:0a:a0:6a:f7:3d:99:
f6:d3:ab:af:86:88:34:9c:64:0c:3e:ba:56:80:d3:db:84:2b:
43:4a:ca:e0:a1:1a:72:19:82:d4:a6:6a:0f:7e:96:6e:26:7e:
ae:67:05:ff:e3:00:64:69:26:ff:d2:30:b5:4c:7b:d8:26:7d:
e0:b3:cd:4b:e0:c8:fd:bd:d4:7f:6b:fa:5e:8d:52:81:c1:58:
07:80:85:ce:dc:59:35:c9:b1:d6:a9:36:20:40:ca:87:da:64:
11:8e:9b:a7:b2:e3:da:bb:fb:a8:d5:d4:5b:b6:c3:cf:2c:45:
5b:38:91:79:cc:e6:82:53:9c:b4:1a:39:7c:33:df:ba:dd:f5:
1b:f6:50:e0:f4:e8:54:5c:8a:4a:8e:63:59:01:63:69:93:a8:
49:8e:ac:13:90:de:ea:01:76:16:1b:c5:59:10:b4:54:9d:36:
dd:c5:0d:2b:03:53:e7:d7:9d:be:e7:b0:8c:9b:45:1c:f5:49:
66:cb:c9:22:9d:96:7f:ce:48:e0:c7:6c:17:71:37:d9:2b:aa:
f1:4a:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:56 2025 by rpki-client