Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mfqlgF28K3Z5xcCjGNdP0-1AHNk.roa
File: mfqlgF28K3Z5xcCjGNdP0-1AHNk.roa (raw, json)
Hash identifier: b63FP5Wffi+/J5cHxZ4rBHaaaBGIZQAbcYALC9iAan0=
Subject key identifier: 99:FA:A5:80:5D:BC:2B:76:79:C5:C0:A3:18:D7:4F:D3:ED:40:1C:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A202D6464B8F0114565D35F951408DD8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mfqlgF28K3Z5xcCjGNdP0-1AHNk.roa
Signing time: Wed 23 Aug 2023 02:16:00 +0000
ROA not before: Wed 23 Aug 2023 02:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:2d:64:64:b8:f0:11:45:65:d3:5f:95:14:08:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 02:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99faa5805dbc2b7679c5c0a318d74fd3ed401cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:80:fc:af:fd:cd:5c:d7:6a:66:6f:2c:90:
84:57:f8:a7:eb:2d:ec:2a:49:29:92:58:30:af:22:
a4:20:d6:1f:a6:ef:91:d9:4b:df:f9:e3:f2:8a:55:
52:a2:78:d2:6c:55:b2:c9:ce:93:b2:52:a9:47:e2:
ee:5e:ac:66:f1:b2:15:b7:cc:b5:e6:7d:80:e8:c8:
05:7f:a6:98:dc:de:96:0a:4d:1b:0d:a1:84:07:f3:
ec:53:7b:9e:26:3c:fe:e1:0c:f0:18:22:d3:e1:ce:
0c:ae:4f:2b:c3:76:b4:14:b1:a6:9b:eb:79:1e:c7:
3f:dc:7c:c7:a5:e2:5b:da:0f:c1:d8:93:5e:2b:03:
31:d7:ab:37:85:2a:af:19:cf:02:92:4d:32:3a:ea:
15:cf:04:3e:b7:e8:c3:bd:ae:63:4b:ed:1b:62:dd:
18:40:8b:72:57:31:74:0f:73:09:0c:86:75:57:51:
23:75:d4:0c:af:32:5c:97:d7:d7:89:7b:a4:2a:f5:
13:c0:ca:d1:e7:8b:7a:20:78:61:97:fb:70:c5:34:
7e:8c:8d:5d:f3:2b:78:5e:fc:83:fe:17:52:46:c3:
d9:08:2b:dc:ba:0f:32:af:6a:99:1b:d1:2a:c4:b7:
2c:bb:16:ad:e8:b4:64:5e:ea:4a:d8:ab:1d:aa:46:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:A5:80:5D:BC:2B:76:79:C5:C0:A3:18:D7:4F:D3:ED:40:1C:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mfqlgF28K3Z5xcCjGNdP0-1AHNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:df:2c:cd:a3:ef:27:f1:40:27:11:9d:f3:9a:24:6c:f7:da:
60:f4:54:99:d1:75:85:40:6d:25:96:a1:4f:7c:41:3a:6a:e7:
8e:e5:2c:8c:c2:03:f6:45:f6:9f:82:75:0b:b6:2b:98:4f:b0:
23:39:ee:9e:85:83:9f:44:57:aa:3c:7d:9a:ce:50:1f:d6:2d:
9b:ea:50:6a:72:fd:12:92:85:e6:7c:83:74:57:bd:1b:8a:47:
c4:d6:11:71:ce:f7:a3:f0:22:11:15:2d:07:86:62:fa:6e:87:
8f:d3:26:0b:b6:d9:35:e5:6a:82:11:90:bd:c8:18:4d:97:93:
50:c6:1f:13:e2:f7:de:70:66:e9:cc:2c:ce:eb:ea:49:ff:58:
87:02:c2:49:ca:c5:0d:6d:e6:45:0f:68:9e:2d:36:2b:3b:7c:
ed:82:d7:44:60:45:84:82:df:3d:d4:04:1e:aa:0a:98:dc:b8:
c2:64:0a:ef:60:8b:c7:b4:b8:96:4a:1a:c0:b9:60:4f:65:f9:
12:c1:84:4e:bd:5a:64:3d:b2:0b:1b:65:9e:a3:07:be:60:49:
3a:00:be:1d:ce:00:be:8b:66:d7:13:26:f1:e1:ab:49:58:59:
67:b2:76:d4:20:16:fc:98:39:cb:48:2f:b1:2f:9c:49:d6:da:
44:5f:1b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:55 2025 by rpki-client