Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHkC6p_oyTEOpDMMcoV7e4FgUNU.roa
File: mHkC6p_oyTEOpDMMcoV7e4FgUNU.roa (raw, json)
Hash identifier: pxE0pR75+FwVkaCTeI0krFBr0yAmeUG66eH+BWkGnbs=
Subject key identifier: 98:79:02:EA:9F:E8:C9:31:0E:A4:33:0C:72:85:7B:7B:81:60:50:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018325D24E6DC7DD3A92D5D845863ED03696
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHkC6p_oyTEOpDMMcoV7e4FgUNU.roa
Signing time: Sat 10 Sep 2022 05:14:43 +0000
ROA not before: Sat 10 Sep 2022 05:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:25:d2:4e:6d:c7:dd:3a:92:d5:d8:45:86:3e:d0:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 10 05:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=987902ea9fe8c9310ea4330c72857b7b816050d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:f4:90:07:67:63:ec:6b:21:cc:a5:cb:c3:
7f:70:12:3e:3a:4b:80:b4:16:14:9e:a4:cf:21:19:
35:09:28:10:3f:e9:14:dd:76:c7:63:ea:46:24:dd:
df:2f:b7:40:a9:64:2a:c6:7e:9c:8e:58:60:24:a0:
27:bf:8f:1d:c6:c9:3f:5a:ca:df:01:25:be:3a:86:
c2:4e:13:bd:6a:8b:09:a3:b1:24:17:a4:f7:37:fa:
9a:a2:19:c6:ab:aa:9c:26:be:a3:a9:b8:31:65:73:
14:02:71:c4:ee:87:a3:88:ae:32:e5:d1:72:dd:0a:
a6:91:d3:14:0a:4d:04:37:d8:54:67:05:5e:b9:5a:
99:7f:a5:ff:47:91:d8:01:e9:78:ac:04:65:a8:f9:
14:7b:cb:f6:f8:60:0b:98:e5:21:de:fe:12:71:5c:
30:9f:f0:65:11:a7:3f:e4:9d:a6:5b:0e:4e:eb:14:
06:d4:01:f3:a6:af:7e:7a:db:07:ea:f4:c4:31:a1:
6b:ab:b3:62:3f:57:f8:6d:b6:0c:f6:5f:17:ef:c7:
46:d8:fc:a5:4d:a3:b2:bd:63:0d:58:ca:53:96:8a:
3a:42:60:1f:8f:41:e5:aa:48:a7:50:c3:f6:3e:b4:
dd:56:ef:ee:39:0e:35:9b:6c:ad:80:7f:15:a8:30:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:02:EA:9F:E8:C9:31:0E:A4:33:0C:72:85:7B:7B:81:60:50:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHkC6p_oyTEOpDMMcoV7e4FgUNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ff:67:5f:e6:2e:5f:71:c6:dd:a8:39:ee:bd:3c:e1:d0:b7:
fd:c3:f4:8a:dd:46:65:b4:15:b4:5c:ac:88:0a:55:29:a3:a1:
f5:36:a1:cb:ef:aa:28:60:e8:10:4b:c9:ed:fe:02:f1:97:dc:
5e:ff:45:7a:7f:2f:12:5f:36:b3:f7:12:d2:75:2a:0d:e0:2d:
8f:9b:25:63:60:b9:2d:2d:df:89:31:d4:f8:97:1c:6e:3c:7a:
e3:e0:a1:94:17:1f:a4:17:9e:d1:31:ec:ff:ef:62:37:8a:5f:
35:be:a1:b8:74:72:77:6e:94:bf:8c:ce:7b:29:c9:48:a2:e8:
40:5f:14:b5:43:8d:9b:0c:4b:6a:8d:e3:dd:25:c4:2f:0f:bd:
99:92:6b:95:c8:a3:cf:74:4c:17:a5:ab:e6:e9:d7:bd:84:89:
3c:f4:e6:8c:aa:28:03:af:17:a6:a5:39:20:25:16:c8:3a:ac:
b8:58:00:50:75:f8:a7:90:4c:f7:8d:1c:20:4c:57:08:35:fd:
5e:6e:61:78:1f:ed:ed:52:b8:47:44:4c:03:57:bd:df:0d:01:
be:b4:d0:31:4d:ac:46:80:5d:46:c9:f3:73:89:53:12:62:88:
84:04:72:e1:bd:34:9e:dc:90:f0:c6:ce:c0:37:3a:79:0f:ff:
fa:6a:50:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMl0k5tx906ktXYRYY+0DaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTEwMDUxNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODc5MDJlYTlmZThjOTMxMGVhNDMzMGM3Mjg1N2I3YjgxNjA1MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcT0kAdnY+xrIcyly8N/cBI+OkuA
tBYUnqTPIRk1CSgQP+kU3XbHY+pGJN3fL7dAqWQqxn6cjlhgJKAnv48dxsk/Wsrf
ASW+OobCThO9aosJo7EkF6T3N/qaohnGq6qcJr6jqbgxZXMUAnHE7oejiK4y5dFy
3QqmkdMUCk0EN9hUZwVeuVqZf6X/R5HYAel4rARlqPkUe8v2+GALmOUh3v4ScVww
n/BlEac/5J2mWw5O6xQG1AHzpq9+etsH6vTEMaFrq7NiP1f4bbYM9l8X78dG2Pyl
TaOyvWMNWMpTloo6QmAfj0HlqkinUMP2PrTdVu/uOQ41m2ytgH8VqDDQVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJh5Auqf6MkxDqQzDHKFe3uBYFDVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbUhrQzZwX295VEVPcERNTWNvVjdlNEZnVU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK7/Z1/mLl9xxt2oOe69
POHQt/3D9IrdRmW0FbRcrIgKVSmjofU2ocvvqihg6BBLye3+AvGX3F7/RXp/LxJf
NrP3EtJ1Kg3gLY+bJWNguS0t34kx1PiXHG48euPgoZQXH6QXntEx7P/vYjeKXzW+
obh0cndulL+MznspyUii6EBfFLVDjZsMS2qN490lxC8PvZmSa5XIo890TBelq+bp
172EiTz05oyqKAOvF6alOSAlFsg6rLhYAFB1+KeQTPeNHCBMVwg1/V5uYXgf7e1S
uEdETANXvd8NAb600DFNrEaAXUbJ83OJUxJiiIQEcuG9NJ7ckPDGzsA3OnkP//pq
UFc=
-----END CERTIFICATE-----
Generated at Thu May 1 01:29:24 2025 by rpki-client