Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDwHBrL6m8nwsoG1Yk0anOsnFVw.roa
File: mDwHBrL6m8nwsoG1Yk0anOsnFVw.roa (raw, json)
Hash identifier: rOCwd0gZ2F+VjXD5e0pKb8sIlGpghQDKMV563acNve8=
Subject key identifier: 98:3C:07:06:B2:FA:9B:C9:F0:B2:81:B5:62:4D:1A:9C:EB:27:15:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E2727AA0008164EDEF0C16A8BE53B3F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDwHBrL6m8nwsoG1Yk0anOsnFVw.roa
Signing time: Sun 28 Aug 2022 03:15:29 +0000
ROA not before: Sun 28 Aug 2022 03:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e2:72:7a:a0:00:81:64:ed:ef:0c:16:a8:be:53:b3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 03:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=983c0706b2fa9bc9f0b281b5624d1a9ceb27155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:e8:9d:59:cd:cc:75:c1:46:07:06:fc:36:
ee:21:03:e2:3e:21:7e:41:b9:1f:85:98:a5:e3:0c:
76:36:64:27:9f:a3:ae:0e:d9:24:23:1b:84:4c:e5:
6a:1c:c3:52:85:dd:6e:9d:16:3f:68:fa:ca:c6:25:
a1:40:21:f3:f3:37:b9:d0:7d:99:dc:2e:34:46:5c:
af:16:c8:8c:4a:fd:62:5f:a9:1a:2d:cb:ce:4d:ca:
11:93:1d:c6:b5:44:d5:61:d4:76:a7:72:d4:d8:7a:
b7:ed:e2:03:ae:d7:85:b6:c5:5c:af:18:01:6c:2d:
c7:8c:a3:5b:db:68:ff:e8:da:b1:93:f0:2a:11:9d:
41:f5:26:68:ce:c8:14:71:0d:cb:87:b6:64:d2:27:
65:62:54:27:45:1c:3c:25:81:1c:82:ee:9c:ad:e2:
48:f7:5a:ed:ab:85:ff:19:58:0b:32:85:28:03:3d:
bb:1f:de:31:92:af:54:d7:1b:e5:d8:40:1d:31:3b:
8c:e6:97:74:8b:d2:7a:15:f0:0c:27:a7:79:de:57:
78:d3:5f:49:d9:b9:79:09:69:c5:3a:35:1b:3f:ec:
3f:cf:29:95:0f:54:0d:e9:23:7d:91:b7:13:46:eb:
0c:b3:d8:78:f3:df:1b:a6:a8:7e:5b:95:eb:d1:81:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:07:06:B2:FA:9B:C9:F0:B2:81:B5:62:4D:1A:9C:EB:27:15:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDwHBrL6m8nwsoG1Yk0anOsnFVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:6b:24:9f:49:8b:c6:40:af:fe:2c:d9:44:85:37:6f:87:a2:
28:02:c4:6f:49:46:7e:17:30:20:41:f7:4d:3e:56:66:65:17:
c7:3f:27:38:a0:32:4a:b6:83:9f:a0:fe:9a:06:62:25:77:e1:
56:a9:fc:67:58:76:14:c9:03:2f:43:47:7b:85:17:aa:c2:1d:
26:f7:4c:20:12:a6:26:85:58:6c:e7:00:84:6d:10:4e:3a:76:
cf:82:86:ef:00:06:b0:73:70:13:6d:92:32:39:cb:ae:4d:06:
e1:22:df:29:c2:ac:95:9f:1a:4f:c6:b2:80:4e:0b:20:ae:93:
23:0b:93:b9:00:c1:50:f9:44:af:ca:23:b7:bb:6d:7c:ad:17:
94:b1:98:8c:39:af:b6:a8:83:c9:53:60:ea:67:14:c9:29:49:
d1:d1:6c:8d:11:47:2d:6b:e1:18:95:fd:b5:e8:d1:60:bb:0b:
04:fc:02:a4:00:02:57:d8:ef:6f:2b:80:fb:6b:7c:68:8d:fc:
c6:1a:19:84:ca:ca:ee:cf:80:8a:0c:ec:f5:5d:4e:92:fe:68:
fc:6e:de:bc:ad:e4:50:c3:4a:6c:8d:b9:48:9d:cd:9f:55:cd:
fc:0b:48:8d:b8:42:ae:89:45:13:19:1c:3d:25:2e:0a:29:ff:
c1:16:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:37:02 2025 by rpki-client