Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOwDyMfaGC_9H6x33m9to94YOM0.roa
File: mOwDyMfaGC_9H6x33m9to94YOM0.roa (raw, json)
Hash identifier: prQWqYMFwaap4uChnSZXx9zgav7vI6TZ5B2oIOLgHHI=
Subject key identifier: 98:EC:03:C8:C7:DA:18:2F:FD:1F:AC:77:DE:6F:6D:A3:DE:18:38:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875AC488CC9900BB2C529D6A347EA4E6D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOwDyMfaGC_9H6x33m9to94YOM0.roa
Signing time: Fri 07 Apr 2023 08:10:42 +0000
ROA not before: Fri 07 Apr 2023 08:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:c4:88:cc:99:00:bb:2c:52:9d:6a:34:7e:a4:e6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 08:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98ec03c8c7da182ffd1fac77de6f6da3de1838cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:f5:81:41:69:98:79:34:50:bd:c4:70:5b:
0c:10:da:0c:98:ed:ce:77:db:a5:ff:7a:b2:49:c6:
58:cd:86:ee:2a:8a:4e:96:01:5f:bf:e3:9c:b0:72:
04:1e:0e:b6:93:4e:09:4e:62:ce:6e:4e:41:a5:c6:
d0:46:62:b1:67:ec:a5:d4:f9:a8:69:22:eb:b2:71:
fb:4e:b1:3f:a2:7b:95:5f:4b:e4:6e:c3:72:79:c7:
9f:4c:b9:27:bc:fb:9f:c8:12:a9:c9:23:35:e1:2e:
8b:8c:59:67:f4:31:13:97:e3:ab:ea:93:ce:43:ec:
50:05:04:9e:d4:3d:4d:ea:5a:60:a1:8f:d4:a9:c3:
34:40:0b:1e:f7:85:ff:98:0d:4b:be:70:96:ce:98:
52:6c:88:be:c8:ad:53:da:6a:f8:eb:3f:67:a6:38:
6f:23:57:33:29:a3:30:94:26:f2:27:95:4b:09:97:
7e:23:36:d3:50:95:d3:20:8c:23:d7:1d:49:81:10:
4e:a7:ba:34:c4:be:b7:c8:37:dd:d7:a8:3e:9a:2c:
0b:f5:2b:e9:34:f6:48:36:91:87:8b:17:8a:74:10:
9d:00:10:96:48:e9:9a:0c:7e:0c:ba:61:e3:82:e6:
cc:9d:93:72:c7:08:ad:62:69:97:17:05:4a:6b:4f:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:03:C8:C7:DA:18:2F:FD:1F:AC:77:DE:6F:6D:A3:DE:18:38:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOwDyMfaGC_9H6x33m9to94YOM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:e3:60:e9:b0:88:1c:f8:b4:30:43:9e:2f:cc:ba:ba:ba:ee:
46:6c:cc:3a:90:5b:6b:ba:de:9d:f9:f8:00:79:3f:21:f4:16:
17:b8:f8:59:72:3e:b2:f1:db:73:a1:1e:d8:7a:b3:3b:56:29:
6c:a0:41:1c:e2:a9:ce:b7:fe:6e:7b:a7:9e:f8:ba:95:e4:93:
5c:78:93:82:14:9a:a6:f2:a3:28:f0:9e:22:e0:33:a3:12:00:
77:3a:4b:87:49:18:21:c3:57:f6:c4:2d:39:f2:8c:f3:a5:fe:
3a:de:c7:45:f3:0b:2f:f1:b6:56:04:8c:bd:d7:e7:35:ef:f0:
06:84:52:6c:c8:2e:6c:1f:5e:65:bd:05:80:d9:1a:02:b1:79:
09:db:ab:58:d7:17:9e:f5:7c:bb:a1:6d:8d:78:31:f3:e5:11:
67:0a:a0:7a:18:76:28:e4:dc:a7:0b:b7:c1:21:7a:e9:0b:ce:
ba:32:72:9b:2e:20:fb:ea:0e:d1:63:30:9d:2d:b9:be:61:2b:
e2:ec:dc:7b:2a:2c:9c:1e:1f:ef:fd:fd:4f:d1:a8:4c:13:12:
d1:6c:ac:93:a6:0b:d1:20:5b:e5:6a:e6:e6:80:8a:60:46:eb:
df:0f:12:19:46:bf:28:e8:24:db:67:3c:98:a9:c7:61:a6:9f:
47:d6:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:33 2025 by rpki-client