Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhbHQl23qsygpKI3PcYnoN5iACU.roa
File: mhbHQl23qsygpKI3PcYnoN5iACU.roa (raw, json)
Hash identifier: yOU+QnDKza7TAXtPcm9DVtfkQ1mRbpKug/UiYBvZMqo=
Subject key identifier: 9A:16:C7:42:5D:B7:AA:CC:A0:A4:A2:37:3D:C6:27:A0:DE:62:00:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EEA10A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhbHQl23qsygpKI3PcYnoN5iACU.roa
Signing time: Wed 27 Apr 2022 10:12:46 +0000
ROA not before: Wed 27 Apr 2022 10:12:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129268902 (0x7eea10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 10:12:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a16c7425db7aacca0a4a2373dc627a0de620025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:d1:a1:7e:c4:59:91:01:65:08:b8:ae:47:
e7:8c:78:ff:94:3d:51:af:9a:1d:be:5d:b2:c8:65:
5b:9b:97:4a:59:7f:d1:25:04:df:81:20:81:21:af:
03:cf:a5:36:94:9c:23:fa:15:96:e6:25:6c:2c:47:
fc:92:18:f4:10:e2:e5:81:62:3e:34:64:4f:2d:07:
1a:84:50:cd:6a:09:e2:02:f5:f9:7f:4c:ae:be:1c:
7b:ba:d6:5e:29:b3:60:71:50:5d:9f:2e:01:f9:57:
d8:a2:9c:61:5d:e6:5a:1d:cb:63:92:76:d3:f4:63:
80:66:f9:91:e7:23:13:74:dd:70:1e:5b:3e:eb:35:
40:1a:31:e4:1f:20:ee:18:b9:ae:a2:9a:a6:5f:f0:
dd:45:ec:18:e4:b1:6c:bf:85:b7:7e:e7:e0:71:26:
d4:ac:93:b5:bc:35:f2:04:ba:fc:d9:41:26:9c:97:
fe:6a:02:8a:95:c6:7d:8b:fd:54:33:2d:73:04:01:
86:d9:ed:2a:9c:3b:bd:68:66:a7:9a:4e:1a:b1:89:
10:fc:0d:a0:31:fe:da:c5:80:96:8a:b4:8c:a3:61:
4a:b7:ea:87:05:91:42:fd:2c:be:22:36:0b:e6:2f:
51:88:53:e7:bd:d2:a8:29:64:4f:f3:b6:8d:7f:5d:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:C7:42:5D:B7:AA:CC:A0:A4:A2:37:3D:C6:27:A0:DE:62:00:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mhbHQl23qsygpKI3PcYnoN5iACU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:27:e4:78:33:87:e5:cd:cc:64:68:cf:6a:ca:c3:e3:b5:3b:
b0:a4:6a:92:c9:b0:46:65:90:ff:91:5a:22:f3:ba:43:bf:1e:
54:5d:10:1b:ab:f1:af:a8:0b:34:9b:7f:37:eb:b8:93:f2:b6:
4b:8d:98:eb:b5:97:0b:d8:4a:49:8e:c8:95:35:8f:d1:2d:f1:
03:25:be:fc:d7:a9:4d:a9:7d:b7:ec:ac:40:37:03:b5:8b:5e:
f1:2a:43:79:d1:db:ec:31:29:fc:f5:7a:f1:c9:e2:dc:dd:fe:
37:14:2a:00:5f:ea:29:1d:30:b8:f1:0a:ad:03:ec:49:59:f4:
82:e5:3b:67:34:cd:a4:f7:d1:c7:ea:fa:92:51:2f:82:fa:45:
db:d7:00:53:cf:5d:1e:6d:d9:b2:58:e1:cf:88:2d:ee:95:04:
20:d6:f7:6e:de:46:92:15:95:04:44:d4:f3:74:d1:60:d0:36:
f1:39:13:17:3b:48:c4:05:d6:d2:5a:5b:25:a4:9d:e8:4c:5b:
aa:5a:a2:43:01:ea:01:9d:3f:6d:20:f8:9a:2a:ff:81:bd:0e:
88:01:5c:56:90:ae:19:b5:22:41:95:b9:66:76:a6:ac:d3:52:
da:2d:f5:7a:5e:42:3e:e9:54:75:4c:f7:59:91:05:51:06:9a:
d8:3b:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:03:22 2025 by rpki-client