Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXxNHNbkHWfXfa6KGZpFDudKQag.roa
File: mXxNHNbkHWfXfa6KGZpFDudKQag.roa (raw, json)
Hash identifier: dpK+RU95LczpzCPgI0sIAVbtprvilxdH9Vac0WHcWHY=
Subject key identifier: 99:7C:4D:1C:D6:E4:1D:67:D7:7D:AE:8A:19:9A:45:0E:E7:4A:41:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A401B85B31FA07EDFB85BB53551951B2B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXxNHNbkHWfXfa6KGZpFDudKQag.roa
Signing time: Tue 29 Aug 2023 07:04:20 +0000
ROA not before: Tue 29 Aug 2023 07:04:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:401b:76e3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:1b:85:b3:1f:a0:7e:df:b8:5b:b5:35:51:95:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 07:04:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=997c4d1cd6e41d67d77dae8a199a450ee74a41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:3b:8b:c0:96:91:8c:83:1d:f5:47:74:3c:
a7:18:61:4e:8e:a5:16:ac:22:d1:30:ef:6a:de:b7:
06:cd:33:b0:b8:c8:99:72:50:83:eb:f1:fa:9e:19:
a4:fe:8a:3a:56:2b:ec:c5:6b:4a:c9:c6:20:cb:65:
52:ff:86:af:f6:3e:84:65:f5:a6:da:54:eb:4c:a3:
9c:ea:33:bb:87:81:d4:ea:3d:13:e2:17:af:31:66:
b1:8e:4e:08:0a:c2:0c:5c:68:e8:ab:2b:ab:23:c2:
bd:d9:6c:42:34:99:ea:6c:4e:9d:5e:97:03:b4:3d:
47:22:97:00:1c:99:a1:06:f4:a9:bc:6f:bd:44:01:
86:9c:da:ef:de:44:11:8e:90:6d:3f:b7:e1:04:22:
77:ff:16:ab:ad:c9:13:80:99:12:79:3b:e6:80:55:
96:a8:98:f4:bc:23:ad:1a:a3:99:52:74:88:25:13:
b5:9f:57:f7:2f:d8:3c:fd:83:30:34:dd:f8:02:e4:
6e:10:4b:44:58:05:7a:e6:75:a0:05:36:b8:8f:72:
c7:c2:62:87:75:58:27:6f:4f:5b:1c:b4:c1:7d:38:
ac:49:34:cc:ec:86:1f:d0:c8:09:0f:df:68:f9:58:
67:49:dd:91:26:fb:62:6a:7c:24:c2:c1:a7:7d:5b:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:4D:1C:D6:E4:1D:67:D7:7D:AE:8A:19:9A:45:0E:E7:4A:41:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mXxNHNbkHWfXfa6KGZpFDudKQag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:27:66:3d:9d:8d:fc:24:9b:14:26:53:60:19:52:75:7a:bf:
47:f3:0d:3f:68:19:e2:2d:8d:1b:73:f0:6e:35:f9:1f:83:5b:
a6:85:5a:bc:c3:c1:15:c5:99:1e:89:59:7f:6c:7e:c8:bf:6f:
21:b8:16:15:42:38:22:88:0e:fe:48:8a:76:d5:4c:e7:54:63:
1c:15:43:c7:f7:39:4f:c8:8d:41:16:64:57:93:dc:dc:48:56:
10:06:a0:b1:97:1e:a9:17:ec:8f:06:30:24:cb:7e:88:16:1d:
86:27:62:76:f0:67:19:0c:27:0f:64:88:72:d8:7e:67:15:cd:
86:42:6c:01:63:8d:92:75:5a:67:13:8e:5e:84:ca:5a:2a:d0:
89:a5:09:21:7f:6f:31:e8:44:55:49:f7:77:a7:73:fe:fc:85:
55:dc:f0:7a:fa:17:f8:b9:b1:1e:e2:d8:71:d8:1e:df:e5:16:
90:85:af:48:dd:46:1b:16:45:45:57:77:67:5c:c4:28:d5:b6:
45:95:0b:08:d2:8e:f3:b8:0c:62:04:2e:37:f0:aa:81:cc:95:
ce:0e:95:4c:e7:10:05:9c:64:45:03:0e:4a:c0:0c:99:55:3d:
e9:fb:36:7f:02:ad:16:64:ca:8a:89:a1:53:f0:dc:14:e3:24:
5b:89:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:17 2025 by rpki-client