Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNtd4wsHioz4MHLTNdXHdQEoJ-I.roa
File: mNtd4wsHioz4MHLTNdXHdQEoJ-I.roa (raw, json)
Hash identifier: zLGToB0E8qRLOW6RGN+2/7u8ufoDAMv+Ud/HjEkcm1E=
Subject key identifier: 98:DB:5D:E3:0B:07:8A:8C:F8:30:72:D3:35:D5:C7:75:01:28:27:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850CDFD489C05BD1005652A119401A725B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNtd4wsHioz4MHLTNdXHdQEoJ-I.roa
Signing time: Tue 13 Dec 2022 19:04:33 +0000
ROA not before: Tue 13 Dec 2022 19:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:cdf:7a26/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:df:d4:89:c0:5b:d1:00:56:52:a1:19:40:1a:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 19:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98db5de30b078a8cf83072d335d5c775012827e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:d1:b3:12:06:e5:8c:c2:a1:6a:c6:e6:7c:
7a:12:0f:34:e7:9e:51:00:aa:1e:20:9f:7c:d6:1a:
6d:c9:ae:2c:e7:01:07:ec:f1:c7:6a:fc:62:68:65:
29:19:43:2c:a5:a1:eb:55:1b:24:50:6d:bc:73:bd:
41:e7:68:10:67:e1:66:55:18:82:47:64:a1:6a:aa:
54:68:2b:e6:57:7b:a7:73:68:a3:d2:02:87:34:f0:
ce:c2:d9:38:e3:9e:e7:ae:5c:2e:5a:b3:88:5f:04:
5a:4e:66:fb:28:de:93:ab:61:ce:93:e6:36:73:70:
0d:c6:22:ce:9d:6e:14:1c:e4:51:e2:15:a9:df:9e:
1e:da:17:4d:a5:7f:4c:0d:10:20:8c:9b:30:5b:3e:
e1:99:cf:d2:9a:51:d0:2c:a9:01:24:a7:8f:5e:be:
d1:b5:d8:bc:3d:79:08:1c:0f:64:8d:b4:d4:e1:01:
54:fb:08:50:57:dd:98:29:b9:b2:38:c5:1f:cf:d5:
69:47:db:95:45:6a:f2:57:b3:d9:6c:d5:3d:2f:23:
11:a4:e6:8e:a8:51:d6:f8:7d:d2:bb:e9:45:b4:f1:
61:e1:96:ca:95:6d:ef:33:a2:09:17:40:35:18:be:
66:6f:b5:7e:02:b5:37:d3:a2:18:62:d9:e2:8f:d0:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:5D:E3:0B:07:8A:8C:F8:30:72:D3:35:D5:C7:75:01:28:27:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNtd4wsHioz4MHLTNdXHdQEoJ-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:ef:46:14:f4:f6:e0:99:1b:38:fd:ea:1b:b5:10:be:70:9c:
eb:98:93:52:51:9b:cb:da:9e:6c:f2:0e:d8:c2:66:9b:3c:13:
7d:8d:a3:2f:6e:29:ac:94:c6:a2:d0:a7:03:44:bd:6f:eb:c9:
e3:77:a0:06:9b:ad:33:f1:df:d5:84:b0:e4:80:28:f5:ef:65:
6c:e8:3f:66:cf:7b:34:9e:ab:73:1c:83:db:f5:83:e7:8a:59:
10:a3:eb:42:70:38:f0:03:00:31:54:d3:c7:c1:cd:67:3a:55:
02:ea:c3:2d:66:15:bf:dd:d4:a9:16:38:14:68:a3:fa:5b:6d:
6c:38:dc:7e:1f:fe:8b:2f:3c:ce:9c:79:5e:9e:9d:32:48:2b:
e0:3f:29:34:2f:86:bf:ff:79:29:a8:0f:9e:3f:8b:a3:c2:f6:
c4:1e:35:29:90:a5:06:be:c6:b0:b1:78:6a:00:92:dc:9b:bc:
58:f3:e4:3a:cc:a1:c9:15:6e:d4:c5:01:31:4a:df:b5:4c:32:
7f:0a:0e:61:8d:69:20:89:9f:7b:f8:91:a3:5a:fc:43:43:59:
47:c6:ad:01:c8:b8:73:18:98:a3:1e:35:a6:69:87:d8:4a:84:
ca:08:75:02:d3:ba:b4:d4:8f:22:4b:a5:85:1f:83:4c:42:d0:
b6:d3:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:10:01 2025 by rpki-client