Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mh0FkgbJzfAj-P1PC3PYvHHc34o.roa
File: mh0FkgbJzfAj-P1PC3PYvHHc34o.roa (raw, json)
Hash identifier: 8Oth70CBb3bE2gWVgfqo9vQEIekwwBOKVeEvudeuqtY=
Subject key identifier: 9A:1D:05:92:06:C9:CD:F0:23:F8:FD:4F:0B:73:D8:BC:71:DC:DF:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CCF3F92CE633A278762C302A276CFE94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mh0FkgbJzfAj-P1PC3PYvHHc34o.roa
Signing time: Tue 23 Aug 2022 23:05:17 +0000
ROA not before: Tue 23 Aug 2022 23:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:ccf3:55a7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cc:f3:f9:2c:e6:33:a2:78:76:2c:30:2a:27:6c:fe:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 23:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a1d059206c9cdf023f8fd4f0b73d8bc71dcdf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7c:7b:c0:60:b7:9f:fd:15:44:54:06:75:97:
14:2a:ec:06:69:d2:bd:6e:3c:15:8b:a1:69:ae:7a:
ab:5a:7b:5d:ab:98:22:70:34:67:12:2e:98:a4:a7:
93:a5:0d:c9:47:ca:2f:e3:5c:cd:f0:92:6b:42:a5:
15:bf:d8:a6:9e:05:5c:9b:c7:c6:e4:a2:cf:b2:89:
f2:be:4f:8e:e4:79:64:3c:da:30:6d:2d:ae:06:87:
e7:07:e5:6e:48:a3:49:6c:be:4d:cc:fa:4a:9c:e5:
ec:26:f4:dd:34:f2:14:8d:d1:c5:01:79:0a:ce:de:
82:b8:77:03:c3:24:51:4c:09:a1:78:b9:40:f9:80:
98:74:8f:f1:c1:de:79:72:82:79:88:de:fe:55:ab:
2c:f1:14:92:00:82:40:1c:9f:3b:4e:c2:a0:f1:f6:
af:02:e9:bf:d9:07:3a:94:d9:ce:b5:2c:6d:6f:fa:
0e:ea:77:4a:f3:dc:ae:ae:b3:d6:37:55:71:00:ee:
9f:21:0f:64:e6:e6:55:7b:6f:7e:c4:3f:e6:be:1d:
5f:e0:c2:95:d7:c5:3c:a6:e8:7c:bf:f4:97:7f:b0:
43:4f:d1:5a:b4:2f:37:ea:1e:64:71:2e:9a:b1:0c:
a9:53:52:c7:e7:c0:41:9d:68:c2:56:d7:fb:a7:f4:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:05:92:06:C9:CD:F0:23:F8:FD:4F:0B:73:D8:BC:71:DC:DF:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mh0FkgbJzfAj-P1PC3PYvHHc34o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:8c:18:b9:64:97:d5:7a:20:fd:63:4b:46:f3:c7:21:2a:20:
59:38:8c:07:3e:93:83:a9:0a:63:b7:13:07:b5:36:b3:53:cc:
55:3c:af:fd:e7:e4:ef:cd:6d:c3:75:d1:5f:de:cf:4d:a8:52:
84:35:ce:8a:0c:7a:9c:fa:cd:e5:ff:04:40:86:81:0b:52:2d:
a1:57:43:9c:29:7f:f4:2c:87:84:28:31:27:71:d5:1e:62:f3:
e2:97:e9:ed:44:a4:24:d1:3f:b9:52:e7:43:66:7c:03:5b:46:
52:ad:7c:98:be:0e:48:d5:a1:3b:fe:56:be:7a:f2:b1:59:e8:
80:bf:e0:06:ec:c3:e6:49:42:59:01:c5:34:81:80:76:6f:e0:
d6:c4:59:60:81:9f:1a:61:cd:ce:a4:39:27:57:e7:01:f0:1c:
bc:41:a6:f4:9e:73:e4:91:f2:87:ac:33:83:76:d8:65:49:b7:
1b:6f:f5:16:c8:f2:54:dd:c5:36:79:1c:25:9d:c0:56:ab:cb:
bf:25:6e:ca:10:44:af:c6:8f:76:48:5b:f6:ab:6e:bf:99:6a:
f2:5a:d8:a1:d7:11:60:ee:d8:f8:b0:b0:13:5c:b3:dd:26:1d:
82:50:a8:85:e6:b9:0f:9f:81:7d:49:f9:81:d8:b4:23:5b:6c:
fe:ff:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:47 2025 by rpki-client