Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mip0avigDhd2XTvQivcZ_0Gj0t4.roa
File: mip0avigDhd2XTvQivcZ_0Gj0t4.roa (raw, json)
Hash identifier: q31/O382XHxpq29goVke6AHi1SHpfXqnIF84lyiGs2k=
Subject key identifier: 9A:2A:74:6A:F8:A0:0E:17:76:5D:3B:D0:8A:F7:19:FF:41:A3:D2:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018683502D5AB0F29215C691EFBBB20B95BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mip0avigDhd2XTvQivcZ_0Gj0t4.roa
Signing time: Fri 24 Feb 2023 12:05:15 +0000
ROA not before: Fri 24 Feb 2023 12:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:834f:4d29/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:50:2d:5a:b0:f2:92:15:c6:91:ef:bb:b2:0b:95:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 12:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a2a746af8a00e17765d3bd08af719ff41a3d2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:62:98:ae:43:3a:0d:6b:bf:c3:42:9b:af:
2d:82:ff:f1:5c:79:54:e5:ef:56:f5:cb:4b:77:76:
00:87:18:8b:dd:97:1c:78:e4:c3:5d:f1:ec:61:0e:
7b:1f:42:15:36:08:5d:b7:d0:52:64:2e:b7:05:c3:
3c:37:39:8c:ee:d4:7e:9e:8c:3e:5a:84:4b:ba:64:
7d:d6:02:b3:eb:e3:4d:96:ac:3e:0d:f8:5f:f9:ee:
67:2c:e5:13:64:d9:ff:2b:f1:bd:e3:80:ee:1c:0a:
e5:1c:56:99:2c:aa:e4:b0:5d:b0:9f:83:d4:5c:e1:
f2:50:80:a0:fb:30:c6:34:8c:dd:0f:5e:9f:ff:bc:
b5:9c:45:e9:d6:20:ac:ab:5a:0a:95:31:90:28:36:
08:e0:2b:e4:1c:d7:47:38:a0:9d:6d:59:6f:08:6c:
30:99:8f:a3:48:3c:16:fe:ca:d8:6a:b0:b3:63:2f:
05:f6:74:fd:9c:af:8a:62:33:f1:73:07:d8:d6:9d:
e4:c5:f5:b8:55:33:93:89:6a:56:30:f7:78:08:26:
46:cb:40:89:49:18:f0:97:69:62:64:6d:55:95:2e:
34:7d:0f:78:a8:67:b1:6d:2c:6d:6e:d6:62:2c:3b:
57:2d:b3:90:73:ba:61:b5:a2:8c:5e:22:d8:a3:ad:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:74:6A:F8:A0:0E:17:76:5D:3B:D0:8A:F7:19:FF:41:A3:D2:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mip0avigDhd2XTvQivcZ_0Gj0t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:7c:2d:97:d9:2b:96:46:23:36:18:b2:81:89:fa:f5:5e:75:
53:00:a0:e4:83:d0:95:90:4a:39:4b:64:e2:de:f6:0c:ad:02:
60:aa:c2:bf:07:11:a3:82:5b:1a:ed:dc:d1:bf:69:4a:2d:2f:
b2:6e:32:1d:15:9b:81:4b:f6:2a:c5:51:4b:7d:84:01:f3:3f:
64:eb:b0:21:92:96:7f:e1:39:1e:14:3e:a8:cd:dd:f0:5b:5c:
60:81:ac:f1:c1:52:df:9c:0e:b9:fc:ec:6e:02:98:36:98:e8:
14:84:1b:74:7b:3c:f6:12:bc:3b:f9:3a:bc:ff:2b:f6:95:24:
3b:04:91:42:87:57:6d:3c:bb:19:a4:1a:c5:8b:c7:cc:f7:cd:
bb:21:dd:c6:08:08:6c:89:a2:74:ee:67:5a:bf:9e:f0:2d:d9:
49:b9:b6:5b:78:b4:6c:ce:56:94:b5:1c:e0:fb:be:83:dd:c7:
4e:d6:62:52:9c:2d:38:c6:46:1d:ec:2c:c0:bc:5d:45:d0:c5:
e3:f6:89:c4:ba:71:88:9f:4b:bf:f4:8d:7d:92:f3:f1:94:2c:
fd:66:84:fe:7b:4d:b6:90:d2:95:12:0f:64:b8:be:a9:66:17:
a7:2c:5c:11:a9:a8:f2:7d:6f:ec:97:a5:c7:49:a3:f2:18:5b:
5a:0f:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:27:09 2025 by rpki-client