Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXv33EjFEEKZefZdLRrH1lR4My0.roa
File: mXv33EjFEEKZefZdLRrH1lR4My0.roa (raw, json)
Hash identifier: +lzuORD6/xg7N4wDigQ8mOdLj5oyrQfg/xjIshidzMA=
Subject key identifier: 99:7B:F7:DC:48:C5:10:42:99:79:F6:5D:2D:1A:C7:D6:54:78:33:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A8A367A5439A0044E49B8171431FCDDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXv33EjFEEKZefZdLRrH1lR4My0.roa
Signing time: Sun 30 Jul 2023 21:10:28 +0000
ROA not before: Sun 30 Jul 2023 21:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:a3:67:a5:43:9a:00:44:e4:9b:81:71:43:1f:cd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 21:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=997bf7dc48c510429979f65d2d1ac7d65478332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:67:31:67:18:b7:8b:9c:4e:f1:97:9f:85:
a9:0f:6b:ef:20:1f:0a:e5:63:b6:14:8a:69:05:6d:
a1:c8:dc:92:33:5c:46:ad:65:d1:9a:82:f9:26:3b:
d7:aa:98:05:50:f3:bc:29:a6:99:88:82:30:67:31:
b0:2e:0c:7f:d2:55:89:7e:ad:7a:65:e1:ae:9f:a3:
f5:8b:aa:34:4b:d7:20:8d:c5:be:37:03:d3:93:85:
19:80:37:a0:0c:d8:00:c9:fe:d0:a8:18:85:ce:86:
c1:00:ab:ee:a6:12:67:6c:c8:68:f8:e1:12:d2:bc:
42:e9:61:72:f1:d1:32:e3:2b:93:ff:ea:44:4f:a7:
cc:e2:72:03:d7:87:65:be:d6:98:6a:09:97:ce:97:
d0:22:05:71:d3:87:3a:04:b6:1d:25:37:1a:e3:2a:
13:3b:34:d7:16:fd:82:46:76:2a:e6:df:42:43:f7:
27:12:8c:46:56:97:7e:ce:ec:64:34:85:66:ab:39:
b9:28:2b:3d:95:22:62:d7:78:1f:f0:1d:d3:db:6b:
3f:b9:41:18:a1:96:0e:b6:2a:99:b2:bd:58:8f:61:
94:f6:80:ea:fc:67:2a:5a:c3:46:a9:9a:71:73:ff:
04:74:f6:1c:81:e2:35:be:fd:c4:e1:93:6e:32:81:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7B:F7:DC:48:C5:10:42:99:79:F6:5D:2D:1A:C7:D6:54:78:33:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXv33EjFEEKZefZdLRrH1lR4My0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:ab:de:76:a0:2c:12:cb:f3:96:5e:6b:e6:64:71:90:bf:ff:
86:2c:f0:4c:5f:70:00:d6:b1:73:7c:85:cc:79:17:8c:d3:f7:
e0:9f:b9:88:65:db:85:11:5a:1f:3f:bf:23:56:51:98:3c:aa:
fc:b5:77:9f:15:3e:ec:2e:e6:89:07:50:7f:85:59:4e:ef:54:
06:33:7e:45:b4:01:d1:cf:de:67:a4:5b:67:7f:52:3d:d9:30:
ae:6a:34:0b:4e:c9:b2:9e:4a:71:b0:f0:ae:f1:b1:a8:6e:01:
2d:2a:67:3b:72:43:45:e7:93:1a:3e:da:bf:1e:11:b7:20:54:
0b:84:73:bb:40:94:c1:c9:4b:3d:83:3f:49:10:33:9f:ae:bc:
ea:d6:11:d5:a0:83:9c:de:59:07:b1:a0:d2:1a:ec:0b:7c:ad:
45:64:73:c8:da:76:5c:f3:cc:b9:7f:84:94:55:8e:f8:32:23:
21:2d:d4:aa:31:ad:57:e4:c2:32:70:63:7f:2e:4a:de:ee:f1:
4d:af:db:57:8b:84:2e:1f:a4:11:ba:03:62:ed:5e:17:0a:d0:
d3:bd:f3:33:90:7c:05:8d:cb:4e:e8:b6:78:3e:d4:b1:f1:aa:
9d:c9:dc:e6:3a:55:fb:05:14:02:ee:f6:4e:15:c1:f3:8d:11:
7c:67:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:33 2025 by rpki-client