Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mUXeWb_PxbgVJ73to396843LkuA.roa
File: mUXeWb_PxbgVJ73to396843LkuA.roa (raw, json)
Hash identifier: vK1kN0nn/OJ2+6khjSjxV2P6DDYwUAydegfuRTUkN8w=
Subject key identifier: 99:45:DE:59:BF:CF:C5:B8:15:27:BD:ED:A3:7F:7A:F3:8D:CB:92:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0A7FD85A7DAB436A47D4440504ACBB60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mUXeWb_PxbgVJ73to396843LkuA.roa
Signing time: Fri 18 Aug 2023 21:14:25 +0000
ROA not before: Fri 18 Aug 2023 21:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:7f:d8:5a:7d:ab:43:6a:47:d4:44:05:04:ac:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 21:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9945de59bfcfc5b81527bdeda37f7af38dcb92e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:46:48:de:b6:7f:91:3e:a0:34:10:ee:0f:
0f:56:f4:c2:ec:d3:83:1b:97:ef:51:58:78:21:59:
b1:80:ee:6e:dd:e8:7b:d3:a3:68:7f:3a:a3:7a:44:
47:11:eb:37:0a:d4:ff:8f:c5:ba:b7:39:e3:0b:96:
a2:8d:88:7b:d2:bb:4a:27:9e:b7:7c:99:9e:ec:5e:
04:90:c4:1c:5e:b3:0b:f1:40:5b:c2:fc:77:be:d4:
e4:15:21:f4:9a:0a:f8:25:f6:1c:a3:87:19:44:07:
17:8a:6c:11:11:e5:d5:0e:48:5f:1a:cc:a2:de:7b:
35:8c:9b:74:ed:40:31:2b:f6:38:cb:bf:93:19:b3:
ce:65:36:c3:d2:4f:64:fc:a6:ef:7f:92:fa:8a:b1:
31:1a:7f:ef:8f:7e:4a:d9:12:3b:fd:8d:e0:ae:63:
24:1a:ac:b0:54:50:06:c4:55:13:40:44:1e:d9:b5:
04:d9:62:7c:55:b2:f3:29:e0:27:bc:ba:ac:64:20:
2b:83:06:85:26:89:33:dd:4b:f8:fe:25:ca:0d:16:
a4:2c:05:99:7f:da:e8:b4:3e:cc:47:6a:25:ab:a8:
08:8b:22:51:cd:b6:b4:58:e7:27:c1:b2:82:35:66:
bf:2c:34:e5:8d:b3:62:e8:3d:67:7e:c9:5c:4c:4b:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:DE:59:BF:CF:C5:B8:15:27:BD:ED:A3:7F:7A:F3:8D:CB:92:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mUXeWb_PxbgVJ73to396843LkuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:1c:8d:de:28:8b:10:d7:cf:c7:d9:cd:65:be:32:ec:da:f1:
21:0c:57:b7:ae:1b:89:82:cc:3f:51:1b:07:1f:a3:b3:0d:5c:
ce:08:7b:d4:95:d9:4c:c8:f9:36:e3:0e:fe:72:4d:f3:4e:3f:
8a:d6:9a:c3:17:19:22:15:5d:48:a6:b0:28:0b:19:75:ff:b4:
35:74:67:af:da:04:12:92:af:0b:b3:6a:ba:a9:86:59:65:96:
e1:11:d5:b9:42:5b:4f:da:b6:f0:c2:79:8e:be:c2:d2:56:70:
84:e0:ca:0d:ab:cf:26:a1:f3:ac:da:27:a3:63:7e:bd:3c:5b:
bd:3c:28:c7:8e:18:8c:6d:3b:e1:87:10:1b:68:ad:37:3a:90:
f4:5e:6d:c3:74:d2:53:e8:aa:d7:e9:1e:f1:9f:27:95:a5:d8:
30:c2:db:b1:8e:37:ef:70:b8:29:ca:46:ab:da:24:e0:7e:91:
95:c8:d6:d6:80:5d:f3:98:6f:df:53:c0:a5:02:f8:f7:3f:e8:
83:1b:83:73:7d:57:15:ff:8c:50:e6:bd:bc:2a:5e:26:35:01:
72:27:62:df:ce:14:ee:1b:57:ab:c3:87:ad:07:12:8e:f3:94:
5b:ca:23:ce:87:37:6c:38:e6:ad:be:7b:fc:31:1b:8e:7f:be:
e5:cd:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:12:25 2025 by rpki-client