Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLvSyMBUH6pApQkmfEmuI0LsmXo.roa
File: mLvSyMBUH6pApQkmfEmuI0LsmXo.roa (raw, json)
Hash identifier: ts3yd2VdEPUdtYntERKmbr4m1RRCKSj/v4AZQcEaJ6o=
Subject key identifier: 98:BB:D2:C8:C0:54:1F:AA:40:A5:09:26:7C:49:AE:23:42:EC:99:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C97A3DDCABB525753F2342C557DC98FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLvSyMBUH6pApQkmfEmuI0LsmXo.roa
Signing time: Sun 06 Aug 2023 06:12:58 +0000
ROA not before: Sun 06 Aug 2023 06:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c9:7a:3d:dc:ab:b5:25:75:3f:23:42:c5:57:dc:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 06:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98bbd2c8c0541faa40a509267c49ae2342ec997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:aa:97:68:84:0a:ae:5e:bd:6e:42:2f:80:
24:f6:6f:f3:c1:d6:0b:5d:f5:2f:95:e3:b7:ab:1b:
7d:ed:2e:c9:88:99:00:4c:05:96:5a:df:c4:fa:59:
85:0f:9a:44:8f:1d:bf:e6:50:f4:53:e3:b1:03:e8:
73:9a:56:6a:e3:45:d5:9a:6e:4f:9d:3a:9e:75:f4:
4b:b3:f8:20:c0:1f:6b:ae:43:34:0a:e5:a8:5c:96:
95:c6:07:aa:5f:1f:4d:87:0e:d2:b9:ce:cc:92:94:
03:35:29:4d:13:c2:34:1e:d4:a0:00:0c:1e:09:0e:
9a:a5:87:a3:a2:94:f0:ed:62:42:a7:5c:45:04:d4:
c8:36:45:3f:bb:bc:0a:c9:b7:d2:37:a6:64:92:d6:
68:2d:ae:6d:ce:0f:31:38:c6:b4:d4:0a:f2:f8:42:
0f:1d:25:fb:24:2f:bf:da:08:02:64:a8:db:11:42:
23:fc:44:bd:9c:68:fc:65:e4:c5:37:b8:72:a6:1e:
22:08:29:77:0c:62:cd:22:1e:f9:c1:6b:71:f2:9e:
96:c7:8c:16:9f:3b:7c:84:40:85:19:ba:48:65:2f:
b2:3a:22:26:15:e9:4d:91:f4:24:26:33:43:2d:19:
c7:08:9e:50:51:2c:fc:90:12:b5:cb:20:a8:49:ce:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BB:D2:C8:C0:54:1F:AA:40:A5:09:26:7C:49:AE:23:42:EC:99:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mLvSyMBUH6pApQkmfEmuI0LsmXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:0f:d4:92:a1:69:65:2b:db:38:b5:3c:51:f4:a7:aa:fe:c7:
95:b4:17:ac:c1:08:84:68:bf:ef:4a:0c:ce:a8:4f:4b:72:38:
f8:0f:66:0d:bd:87:fa:a6:f1:f1:7a:3e:34:6a:2b:70:ba:e7:
eb:a5:7b:75:d1:40:1e:97:d1:ce:81:4c:0e:72:c0:83:bd:50:
33:03:7f:2d:77:69:d6:73:de:7f:1d:06:7a:6f:98:3a:a5:d3:
ab:04:b0:65:3c:ae:e9:21:95:16:1b:a0:e4:08:9b:97:75:31:
6a:d0:53:f9:a6:53:16:ac:2e:55:5d:36:5e:d4:56:ce:10:6c:
2a:81:7c:dc:85:63:41:49:c8:e6:fb:36:79:e4:e3:a2:6c:fb:
a8:2a:00:d7:c4:b0:d5:99:4a:ab:77:f3:92:cd:3d:98:af:81:
96:b7:6c:10:bd:c5:3b:20:29:bb:bf:ff:23:8b:7c:d5:9c:bc:
28:c7:fa:5f:c8:dc:df:cd:5e:f7:0a:f7:69:59:46:00:9f:0f:
dd:52:55:13:d0:55:6e:bf:23:7c:12:19:44:77:a5:36:07:8a:
71:00:57:81:97:6a:ee:c7:c4:37:c2:6b:79:a1:12:a6:a8:92:
57:18:4f:e2:ca:8a:d1:70:2a:26:73:45:48:a6:ff:f5:1e:92:
cd:e2:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:07:58 2025 by rpki-client