Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhIK07BYEQhAzWxKmaEZqZ3fdhY.roa
File: mhIK07BYEQhAzWxKmaEZqZ3fdhY.roa (raw, json)
Hash identifier: FDgn0nHipEPoSob1Ez/HkEK3xoKGUboJbOkQoScz7a8=
Subject key identifier: 9A:12:0A:D3:B0:58:11:08:40:CD:6C:4A:99:A1:19:A9:9D:DF:76:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189958F0CF42059FE353C01B735A1B86182
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhIK07BYEQhAzWxKmaEZqZ3fdhY.roa
Signing time: Thu 27 Jul 2023 04:15:27 +0000
ROA not before: Thu 27 Jul 2023 04:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:8f:0c:f4:20:59:fe:35:3c:01:b7:35:a1:b8:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 04:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a120ad3b058110840cd6c4a99a119a99ddf7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:47:a9:c1:1e:e9:df:82:1f:3b:c9:ba:40:
53:dd:f1:58:1a:8c:58:01:f0:cd:3c:74:c0:31:2c:
86:b1:40:bd:30:5f:fa:6d:ea:a3:85:23:b3:de:f6:
68:90:1f:c5:37:8d:20:48:3b:10:ff:62:00:69:ac:
61:2d:55:12:d9:e3:73:29:ed:c8:0b:3b:9e:94:65:
91:8f:55:3c:32:4e:14:09:aa:f9:79:99:52:5f:79:
fd:32:35:34:46:bc:ab:8c:e2:cc:17:ac:24:9c:08:
a7:77:cc:f2:52:6e:38:7e:c7:28:5d:ef:e9:b4:b7:
9b:06:d6:78:e3:2c:13:34:08:95:c8:86:05:c7:da:
66:79:0d:30:b4:99:d6:8a:12:42:03:be:f7:8a:03:
4b:1a:b5:1a:0b:02:79:5f:a7:44:61:74:86:db:81:
77:f9:53:07:25:fa:3b:b4:22:0c:1f:ee:b2:9d:7f:
da:9f:30:12:7e:fe:ec:d6:a7:7b:18:22:d7:2d:7f:
80:5a:d1:2d:83:3b:72:8b:3d:32:14:7e:9d:6a:b9:
3f:db:10:39:1c:d6:e3:3f:0f:74:55:69:c3:44:46:
b8:ae:eb:d4:e0:12:f3:07:78:50:f8:ad:ea:4a:29:
f0:73:1c:53:3f:ef:27:df:32:6d:40:3e:10:17:3e:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:0A:D3:B0:58:11:08:40:CD:6C:4A:99:A1:19:A9:9D:DF:76:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhIK07BYEQhAzWxKmaEZqZ3fdhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:a3:17:7d:d1:2a:aa:35:34:a2:83:44:3a:8b:da:4f:2a:fe:
1e:8b:d6:64:e2:c1:11:ce:2b:0e:81:66:63:26:3e:1a:4a:7b:
2c:30:fd:35:d7:24:8d:8e:6d:ea:7d:d6:45:96:d3:ce:59:0a:
2f:19:40:e7:8a:8d:b3:f7:76:c8:e1:6b:f7:28:70:3c:62:05:
fe:46:05:86:75:0e:97:46:d5:13:a0:9d:da:87:c7:4b:ea:1a:
be:5f:a1:df:cb:c1:08:16:26:5e:ed:70:0d:0f:07:99:ed:1e:
92:6b:96:c2:76:75:a9:1d:cf:3c:15:45:6f:8e:e3:d8:dd:8b:
54:ef:f0:0b:76:38:5d:8b:a7:cd:59:a0:8b:42:7b:f8:cf:b3:
29:c0:61:47:78:ac:68:42:f6:00:b0:08:7a:18:fd:36:7c:55:
f5:34:e5:54:a8:4d:68:f8:03:0f:2e:79:9e:da:70:0a:8e:df:
5e:20:7a:bc:7f:7e:08:7a:ef:ce:73:46:6e:63:4e:71:b2:1c:
b2:75:9e:f2:70:82:f5:0a:8a:27:37:7d:91:b8:ca:f7:11:40:
7b:63:44:9b:fd:a4:a4:46:8b:ba:54:9c:5c:3f:c8:4c:a8:1a:
18:a1:72:25:7b:12:d1:50:6c:c7:0a:f4:7b:d6:62:ed:af:e5:
94:19:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:41 2025 by rpki-client