Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mQyZjvUCaCA1N6dFm8XP1dino6M.roa
File: mQyZjvUCaCA1N6dFm8XP1dino6M.roa (raw, json)
Hash identifier: duUHNsfsKQVky/yx616HdAyH9Ix0Fhqvy7x0/anRRcc=
Subject key identifier: 99:0C:99:8E:F5:02:68:20:35:37:A7:45:9B:C5:CF:D5:D8:A7:A3:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877DF63B4B84DA8AE96DD334612D006D0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mQyZjvUCaCA1N6dFm8XP1dino6M.roa
Signing time: Fri 14 Apr 2023 04:11:41 +0000
ROA not before: Fri 14 Apr 2023 04:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7d:f6:3b:4b:84:da:8a:e9:6d:d3:34:61:2d:00:6d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 04:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990c998ef50268203537a7459bc5cfd5d8a7a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:0e:7b:fd:a5:9f:7d:97:f7:82:60:e9:55:
f1:f9:e7:40:79:37:ea:cf:c8:13:88:35:1e:97:d9:
a4:b2:5f:5a:28:88:74:57:8c:0c:c2:64:df:52:16:
ce:56:7a:de:fd:b2:af:9b:ce:69:57:20:2f:f0:84:
1c:ed:e3:dc:c6:a1:9c:8d:80:98:4c:4e:d4:f9:d4:
c1:1c:29:95:b2:e4:47:d5:88:b1:8b:67:eb:09:7e:
13:4b:f6:80:23:24:c1:c0:d5:8a:24:9c:a2:34:40:
34:62:ee:dc:0a:f4:e2:4c:96:fc:1c:6a:5e:46:fa:
3c:3b:76:27:0b:c8:b0:67:e4:67:9b:0e:d3:b8:ac:
07:d1:e7:2f:b2:bd:2d:90:18:15:c1:c4:55:15:22:
a7:64:68:8a:02:21:9c:c7:ad:8b:00:e0:e1:2b:7c:
3d:57:6e:cd:52:96:47:73:b4:ee:4f:9d:c4:b8:18:
e1:0f:31:be:ee:39:bc:42:5f:c0:76:7f:25:ef:49:
ae:4e:af:2c:6e:6d:ed:60:2f:00:86:36:25:4d:6b:
6b:8f:e3:e4:4d:24:d3:5e:5e:e7:f9:ab:bb:40:b3:
a7:e9:e5:37:67:d5:38:4e:4e:24:32:98:73:de:cc:
ba:61:d2:5e:52:57:2b:da:57:ab:44:dd:66:8b:58:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:99:8E:F5:02:68:20:35:37:A7:45:9B:C5:CF:D5:D8:A7:A3:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mQyZjvUCaCA1N6dFm8XP1dino6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:7d:ae:43:86:cf:ce:74:71:6b:ab:da:3e:d9:3e:4d:81:5d:
94:0a:11:96:15:c1:5d:c8:f0:a8:de:0b:0a:3d:29:be:e8:62:
4c:70:7c:4b:7f:53:ba:d2:a4:8c:38:f2:83:d2:25:bb:20:1e:
1f:69:a4:63:6b:22:85:d5:e7:2b:63:49:83:79:11:4e:8a:5e:
72:96:35:ec:92:c4:fb:d7:4e:c3:70:e8:90:ec:9f:49:f0:36:
d0:12:da:f6:85:07:12:5c:60:cb:5d:e0:ab:e6:8a:28:08:e9:
a6:07:01:57:6d:32:8b:11:8e:d2:91:07:b2:5f:55:e7:ff:3e:
c0:ed:5b:2e:35:ed:ad:c6:c7:05:4f:da:49:c5:43:18:cd:b5:
15:83:af:c6:e9:c5:e4:10:68:4d:3f:8b:da:46:cf:e1:96:2a:
ae:1a:6a:de:82:e7:2f:eb:6c:a1:68:9e:da:2c:58:2a:17:c3:
d1:c0:3a:0c:79:81:a9:f8:9c:17:ff:0b:eb:9d:60:a9:ae:a8:
bf:39:8c:c6:10:ed:98:06:01:df:7d:89:af:b0:95:4b:ab:98:
9d:36:62:1e:98:57:1f:29:41:27:f4:e8:2d:d0:ee:b3:36:07:
2c:02:d7:77:90:20:98:f5:91:54:a4:6b:b7:5d:46:68:78:c8:
1b:08:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:09 2025 by rpki-client