Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mRK5_VdRWc_WA6xIWxcxheqOt58.roa
File: mRK5_VdRWc_WA6xIWxcxheqOt58.roa (raw, json)
Hash identifier: m1ftNZNbEK5lZy5Ah8kJIZ2H5F/zF0kdvqZObwwDf50=
Subject key identifier: 99:12:B9:FD:57:51:59:CF:D6:03:AC:48:5B:17:31:85:EA:8E:B7:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A98B0C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mRK5_VdRWc_WA6xIWxcxheqOt58.roa
Signing time: Tue 07 Jun 2022 04:16:20 +0000
ROA not before: Tue 07 Jun 2022 04:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325262537 (0x8a98b0c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 04:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9912b9fd575159cfd603ac485b173185ea8eb79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:94:37:8e:2a:18:0f:ca:47:59:27:8f:c1:
39:6b:55:c7:40:52:57:1d:52:14:e4:0a:66:43:c7:
8a:cf:30:77:01:63:cd:6c:a9:39:fd:2b:49:53:ea:
a5:1f:72:2f:11:18:b1:5b:3d:3e:00:d8:7e:00:ba:
45:cc:bf:1a:85:7b:3f:dd:92:50:ee:28:7e:88:43:
a8:0c:2c:d3:34:d6:29:7e:5e:1e:8f:da:12:d3:7b:
ce:b8:17:fa:f2:2d:97:2e:06:ff:d9:77:61:15:21:
5a:0f:c3:83:ca:0e:fc:d1:2c:cc:d6:16:61:75:0e:
4e:18:82:cb:be:36:31:f3:2b:d3:9e:5c:94:1b:3c:
8e:77:95:a8:20:e7:5f:9a:2c:7c:49:6c:de:e3:36:
b2:c8:a5:a9:22:3f:aa:c2:c3:c4:6e:60:6b:ee:b9:
c2:77:d2:03:b2:26:8e:b4:c2:f4:25:3a:0d:48:25:
a9:5b:50:59:56:25:b4:6c:60:6b:27:7f:a8:75:2b:
5f:fb:54:2b:60:cf:9a:70:3a:65:72:1a:56:88:4b:
05:eb:95:56:42:b3:7e:50:e1:07:55:a8:17:6e:5d:
61:f2:51:c1:8f:7b:40:e8:2f:20:87:3c:46:9c:42:
2a:2c:18:ac:31:fb:89:de:f5:ff:99:a6:37:61:29:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:B9:FD:57:51:59:CF:D6:03:AC:48:5B:17:31:85:EA:8E:B7:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mRK5_VdRWc_WA6xIWxcxheqOt58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:23:42:35:5f:4c:6a:17:27:fd:e0:ad:ce:a7:10:d1:88:61:
c2:ea:21:53:a0:a2:e7:50:d9:69:83:00:41:3c:94:ae:eb:85:
67:dc:a1:43:2c:ed:27:5a:9c:b3:d7:d0:81:a0:7b:37:8c:f5:
51:eb:90:12:ee:61:62:f6:61:93:53:c1:5b:5c:19:60:92:2b:
75:cd:32:43:47:cf:53:55:17:35:50:1b:8c:9e:df:9c:3d:93:
df:cb:5b:38:ed:fa:68:4e:a3:67:4c:06:da:f0:bc:33:5d:14:
d3:55:b4:0e:ff:2d:11:f9:44:2f:dc:9e:82:47:39:c2:14:65:
7c:83:82:98:33:c6:af:e1:ec:85:a1:23:9f:f5:6f:c5:c0:88:
47:42:7d:32:bb:ac:1f:15:1b:98:96:6e:27:d6:b1:1b:04:9c:
ec:f6:25:d7:00:77:ba:c2:7c:09:96:19:80:ce:19:be:73:43:
01:65:f9:25:d0:e7:9c:d4:f0:c2:1b:9f:be:0c:30:db:e8:02:
a9:26:e9:6c:67:38:c8:44:c7:05:b7:d8:b4:9b:04:bb:fc:64:
f2:de:7e:28:25:c8:14:8b:12:c5:fa:19:79:2f:b2:6f:ea:8f:
2b:26:d9:df:86:1e:f5:04:53:53:37:18:c4:64:a9:e3:11:27:
3d:38:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:29 2025 by rpki-client