Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mSPr_Fw9IYGoe43Fu_7tItvNKkQ.roa
File: mSPr_Fw9IYGoe43Fu_7tItvNKkQ.roa (raw, json)
Hash identifier: NiKNKMlhFaYADH4JqXEtCpP2OjUPj+g+PQmEP2+yHGA=
Subject key identifier: 99:23:EB:FC:5C:3D:21:81:A8:7B:8D:C5:BB:FE:ED:22:DB:CD:2A:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A18EA5F99CC470C4851575BEFE5919F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mSPr_Fw9IYGoe43Fu_7tItvNKkQ.roa
Signing time: Sat 29 Jul 2023 12:10:27 +0000
ROA not before: Sat 29 Jul 2023 12:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a1:8e:a5:f9:9c:c4:70:c4:85:15:75:be:fe:59:19:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 12:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9923ebfc5c3d2181a87b8dc5bbfeed22dbcd2a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:5b:94:86:c1:ac:8b:20:8e:b7:ed:2a:32:
ee:f3:73:ee:4b:42:28:72:97:a1:ba:ae:07:9f:a5:
9d:4e:8f:df:39:4d:98:bc:a7:62:40:8d:d7:0e:f7:
b5:ec:ba:6f:55:c7:95:ee:d3:89:c0:79:f9:11:40:
11:92:56:99:b7:94:60:c9:b9:2d:18:45:a6:34:ae:
b0:02:b6:c1:a7:00:f1:0d:ac:ac:65:8f:25:d0:29:
70:7c:d5:ea:21:08:ca:fa:14:ca:27:de:97:38:6d:
44:67:82:21:39:fb:46:2b:c0:76:43:aa:98:48:9d:
61:ea:fa:94:28:6b:40:3a:93:e4:f2:e7:93:7f:f3:
53:c6:85:08:d0:86:f8:2c:f4:4d:1d:93:0d:4c:1d:
3e:93:98:b0:1c:fa:2d:0a:15:72:11:82:cc:8a:a8:
11:ba:26:55:38:41:2f:63:47:48:32:82:52:ae:c6:
1f:8f:02:30:c5:20:d2:5e:06:1f:87:cf:98:24:0e:
24:50:eb:c8:80:d1:72:79:e0:b2:fc:82:aa:72:d8:
85:f3:24:d4:db:70:e5:16:fc:39:9d:89:48:23:2d:
c5:38:f9:ae:2d:fd:c7:ac:00:f2:c8:24:80:24:9d:
bb:d2:b1:46:4a:92:9c:65:6e:70:9d:1b:1f:f3:ac:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:EB:FC:5C:3D:21:81:A8:7B:8D:C5:BB:FE:ED:22:DB:CD:2A:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mSPr_Fw9IYGoe43Fu_7tItvNKkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:33:4f:1b:8b:39:08:4c:10:63:f3:11:c4:6f:1a:de:30:67:
a5:37:a7:ee:9a:27:1f:7b:c7:71:83:2c:eb:bb:40:f8:35:24:
4e:c6:03:f5:34:6e:4e:ef:24:1a:47:21:a4:51:05:73:d7:d5:
8f:38:ad:4e:58:01:ea:03:8d:c4:96:d9:00:6e:24:94:62:39:
50:46:8c:16:b7:24:fe:6a:40:02:f2:5a:ff:71:e0:e8:50:ba:
8f:e7:c8:8e:1b:7b:cf:ca:64:fa:97:a3:1f:3e:e4:44:af:11:
f2:d5:c7:11:e0:ab:31:12:f5:47:cb:ab:dc:bd:29:39:a1:0d:
15:9e:37:d0:24:27:15:2d:ee:00:e4:83:62:11:f4:0b:ab:28:
91:27:f7:24:a6:da:07:26:b8:c0:03:d7:1b:35:91:56:82:cf:
f8:82:46:85:23:2e:ba:b0:8e:a2:c3:96:9d:5b:93:25:34:fb:
30:34:1b:af:07:a2:96:4c:90:1a:ee:bd:17:65:a0:e0:8e:63:
27:44:58:38:fa:5f:5d:6a:ea:f5:bf:74:54:06:f7:8c:fc:b7:
d2:82:49:8a:ee:d8:ef:d2:69:9c:e8:fe:b4:84:05:39:54:ed:
bd:54:40:44:07:42:f5:2e:0b:df:e8:b6:c8:83:39:2c:b4:32:
d6:9e:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:29:10 2025 by rpki-client