Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVtSt7Qcsp2r9fzGG-LyQihnbw8.roa
File: mVtSt7Qcsp2r9fzGG-LyQihnbw8.roa (raw, json)
Hash identifier: TWVr8y1vU4gPyzByZqYX6oCmwdsERxvkeG0bk+Arj2k=
Subject key identifier: 99:5B:52:B7:B4:1C:B2:9D:AB:F5:FC:C6:1B:E2:F2:42:28:67:6F:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186247CE20235B69985445AB718B4AD3A02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVtSt7Qcsp2r9fzGG-LyQihnbw8.roa
Signing time: Mon 06 Feb 2023 02:10:09 +0000
ROA not before: Mon 06 Feb 2023 02:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:24:7c:e2:02:35:b6:99:85:44:5a:b7:18:b4:ad:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 02:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995b52b7b41cb29dabf5fcc61be2f24228676f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e8:e0:c0:96:e0:27:aa:d2:12:81:de:5a:2e:
77:2b:35:aa:8b:86:0c:78:8c:a6:65:00:94:d4:62:
bb:94:93:a9:e8:4f:dc:d7:90:86:54:88:88:1e:88:
bf:e3:f6:fd:b6:37:7a:0a:4f:f2:e4:2c:1c:af:a3:
2f:77:ee:01:68:48:07:33:b4:62:ab:6b:ac:00:fe:
60:ac:3e:03:34:4e:e0:f2:eb:32:5b:63:26:eb:73:
16:4d:4b:51:b5:94:55:5a:f3:92:74:a6:a8:a7:91:
a5:c5:5c:55:8c:8d:d5:f4:a9:f4:37:57:28:b9:4d:
5c:7a:fe:dd:fc:f8:2a:e6:e4:76:be:b5:41:99:c6:
3e:e4:d4:4e:d1:60:2d:69:03:21:fe:43:17:39:aa:
05:6a:e0:7e:98:26:73:41:32:39:98:d3:30:96:61:
b1:82:8d:3d:1b:d2:04:c2:d5:dc:c0:18:fa:d9:b7:
38:a1:11:80:d6:82:e7:e5:bc:92:c8:8e:01:12:f7:
f1:11:0d:30:7a:cb:52:92:d4:33:bb:d8:b4:40:f9:
2b:c3:4f:59:d4:00:26:ff:c8:15:48:b6:1b:0b:e2:
ac:22:6d:fe:61:da:c6:e8:5e:0e:21:81:7b:b7:09:
86:59:e0:60:28:be:59:a3:41:a7:f3:88:b7:1b:42:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:52:B7:B4:1C:B2:9D:AB:F5:FC:C6:1B:E2:F2:42:28:67:6F:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVtSt7Qcsp2r9fzGG-LyQihnbw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:7b:29:d5:a8:b3:ee:44:4d:10:92:e5:2c:7b:d5:fd:02:f0:
5c:f6:ec:b2:00:ab:9b:fc:03:3e:13:20:98:3f:04:9f:54:07:
b2:67:5a:49:5c:71:ba:b1:16:7f:31:af:0a:f0:e6:51:57:78:
5a:90:08:f8:1a:65:53:3b:87:60:2b:9b:19:84:a7:8a:4d:1e:
25:69:f3:64:92:88:70:81:4f:9b:d1:71:5c:86:3d:ba:df:d7:
14:2b:3e:c7:c0:cc:e3:39:05:40:e8:c8:ad:d1:60:a2:54:b0:
a7:84:4e:f8:63:37:e4:7a:35:bb:c2:b0:27:ab:d4:68:c0:d2:
ea:d7:68:1f:e8:9a:a2:e1:29:f4:cb:30:13:ec:25:e2:3d:92:
5f:44:a9:63:7f:63:13:f9:71:9c:03:a6:31:87:6d:51:09:74:
1b:a6:4d:c4:10:4f:27:b6:8a:1c:9b:7a:fe:ea:84:cd:75:40:
e1:6a:b8:51:00:db:3e:4c:20:0b:55:d5:19:c7:8f:f8:3c:8b:
63:17:fd:a8:38:58:bd:ee:28:f9:d0:4f:8c:c1:c7:8f:c0:de:
f8:c5:ff:e0:f1:8a:6c:85:0c:84:29:a6:23:03:98:7f:43:22:
c1:b5:6b:31:6a:4a:31:4e:d4:56:6d:85:7d:78:f9:fb:3a:75:
5c:16:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:17 2025 by rpki-client