Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mELysbdc6AmktJF10UaU6eo-tiQ.roa
File: mELysbdc6AmktJF10UaU6eo-tiQ.roa (raw, json)
Hash identifier: YdvQF/ih3iZxKG450vWyv65Z5ULtAaqAtHYR1JQG6Qo=
Subject key identifier: 98:42:F2:B1:B7:5C:E8:09:A4:B4:91:75:D1:46:94:E9:EA:3E:B6:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184827DF71B75FA48ED22200B71CC42429D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mELysbdc6AmktJF10UaU6eo-tiQ.roa
Signing time: Wed 16 Nov 2022 22:10:04 +0000
ROA not before: Wed 16 Nov 2022 22:10:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:82:7d:f7:1b:75:fa:48:ed:22:20:0b:71:cc:42:42:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 22:10:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9842f2b1b75ce809a4b49175d14694e9ea3eb624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:61:82:2c:93:e4:9c:9c:70:b6:6d:d0:08:e1:
cd:38:b7:b8:a6:b5:4f:b0:44:fd:da:c5:89:73:0e:
e7:06:1d:f3:c0:69:fa:00:52:24:88:bf:f0:a7:b8:
f9:4b:70:4c:a0:ee:86:46:ce:68:a1:23:d2:0d:4f:
f5:21:93:be:be:4a:dd:4c:3a:e9:27:26:97:8f:66:
a3:70:2a:97:2a:b6:56:70:6d:79:c3:f7:f5:22:f8:
8d:81:c1:ad:7f:bd:29:5b:4f:44:15:f6:97:81:5e:
df:cb:5b:92:15:b2:ff:56:e9:05:43:f0:2c:b0:90:
39:44:0a:5c:8e:11:ed:61:10:42:c6:4c:98:2d:7b:
07:37:e2:26:f4:58:31:c8:78:13:3e:14:54:b0:ee:
d8:55:fe:78:a7:21:e7:e2:48:04:fd:30:f5:28:ca:
89:e7:2e:0f:4f:f5:fc:55:6e:49:78:09:64:a3:e5:
10:05:24:9c:af:f2:9d:a0:d8:dc:54:f9:d1:10:c3:
95:cf:da:ed:b9:ed:33:8b:3d:b4:f1:c9:eb:62:22:
b0:cb:53:ca:2f:2f:1b:cc:08:51:71:9a:a3:0f:eb:
01:9c:90:60:73:02:f5:d3:c8:fb:4a:ff:43:15:d6:
8c:56:96:4b:6a:01:e5:e9:6d:59:62:23:dc:44:16:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:F2:B1:B7:5C:E8:09:A4:B4:91:75:D1:46:94:E9:EA:3E:B6:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mELysbdc6AmktJF10UaU6eo-tiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:51:ab:ba:1c:24:e2:2b:c1:9e:89:72:7b:54:b2:31:3e:00:
88:56:c3:50:af:56:98:51:56:89:69:a2:cb:3a:51:0d:80:a6:
7f:f8:71:6c:34:df:46:7d:fa:22:4f:a0:f1:78:69:6d:b6:70:
70:be:82:3b:10:c2:55:84:76:a9:96:23:4b:f4:1b:dc:f7:20:
12:97:2a:cb:f1:dc:3d:c5:fd:ac:3e:ed:8c:7a:94:4f:74:52:
fa:65:86:42:72:40:8d:d7:62:97:4a:fc:11:9a:83:d7:06:5e:
52:3c:cc:7d:40:3b:dc:0c:3f:9b:ae:d1:f6:85:20:be:a6:98:
72:88:75:f3:c4:f0:a5:a5:3f:28:78:56:45:34:b7:c3:91:ef:
69:f9:79:32:c0:32:4a:23:dc:b9:77:7c:f7:89:8c:72:74:10:
dc:80:e5:83:bc:b9:34:7e:0b:d5:b6:42:45:7d:f9:48:6c:ed:
80:8e:cc:09:ea:b3:a9:98:6e:87:d1:5e:11:84:7c:dc:4f:1a:
03:4d:58:bf:ac:1c:dd:41:54:e7:b0:94:1e:bd:ab:40:67:72:
f3:d2:c3:f2:70:5f:29:0e:a5:42:c3:78:89:c3:8c:de:18:b7:
0d:ea:86:ca:b6:01:db:04:82:67:1d:3f:4c:e4:5c:c6:e8:f6:
b3:37:ae:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:30:19 2025 by rpki-client