Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlCz4fSUlCjdaNdZP5gCVEVu6ds.roa
File: mlCz4fSUlCjdaNdZP5gCVEVu6ds.roa (raw, json)
Hash identifier: MRG9rbeOHRoxDx4LNxZLv7HcUIMETNo4ukNSmphLqek=
Subject key identifier: 9A:50:B3:E1:F4:94:94:28:DD:68:D7:59:3F:98:02:54:45:6E:E9:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821D754E1DFD6D96AEF6CC95FB1A7590A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlCz4fSUlCjdaNdZP5gCVEVu6ds.roa
Signing time: Wed 20 Jul 2022 21:13:23 +0000
ROA not before: Wed 20 Jul 2022 21:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1d:75:4e:1d:fd:6d:96:ae:f6:cc:95:fb:1a:75:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 21:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a50b3e1f4949428dd68d7593f980254456ee9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:f4:53:de:8b:dc:d3:22:af:b1:f5:b4:03:
9e:52:8e:8c:38:1c:63:57:a8:8f:50:bb:8a:3b:f5:
4b:9c:55:af:2c:2a:1a:04:c4:30:10:9b:6e:0f:0b:
a6:51:26:ae:9e:be:e8:8a:55:f0:cd:f5:d3:78:3c:
53:88:42:ac:4e:6d:22:0e:7a:35:f0:f1:f0:8d:df:
94:cd:1c:94:12:10:8f:55:cb:47:ed:ad:c2:bc:d2:
20:c4:e3:f5:86:e8:d5:23:b6:84:c5:a8:50:3d:ab:
da:42:5d:3a:b4:cf:59:31:fd:14:de:67:72:cc:e2:
71:59:af:b3:ef:4e:5b:d4:86:8c:6b:de:2a:8c:a0:
43:2f:21:ec:0d:b4:fa:8d:20:d4:c8:11:f7:cd:b2:
15:dd:e0:40:d9:a8:25:d6:c5:5f:2d:51:e8:da:a5:
09:56:ea:e9:e2:19:2a:38:fc:fa:e5:78:df:ef:0b:
4a:48:c4:c9:3a:0d:97:33:00:68:e5:19:65:50:24:
f6:45:e6:bb:fa:fa:0b:ab:88:10:3f:5b:d1:e8:3e:
e7:14:f4:d8:26:d9:1b:c1:11:a2:3f:9c:8d:25:8f:
9b:27:f9:49:36:55:d1:2e:f1:0d:81:84:bf:7d:c6:
c6:4c:b5:23:3e:59:4d:f9:0f:54:b4:39:53:bc:2c:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:B3:E1:F4:94:94:28:DD:68:D7:59:3F:98:02:54:45:6E:E9:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlCz4fSUlCjdaNdZP5gCVEVu6ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:5d:d6:3f:54:00:dd:90:90:4b:bf:86:c5:6f:c6:43:cb:c4:
3e:ec:80:8a:a0:26:50:8e:e1:73:51:16:12:88:2e:c7:ec:ed:
a5:7f:51:e6:41:89:7c:b8:26:d9:2d:66:7e:a0:1e:df:31:73:
f8:25:60:fe:74:7f:d6:ec:86:6c:cc:d5:8e:74:13:e9:dc:66:
4f:db:f0:14:48:54:62:87:2e:81:5f:10:2b:84:0e:4e:be:6e:
7f:d7:70:aa:25:ca:bf:43:41:44:70:e9:fa:38:c1:d9:25:d8:
28:71:ca:7a:08:86:e5:bf:05:5d:a3:7d:62:80:74:be:41:33:
61:70:fb:8d:ae:0b:a1:b9:5f:e8:f6:e5:2f:80:58:26:3a:59:
c8:4a:ca:7d:37:7f:4a:e6:8a:a1:80:7b:a8:36:aa:0a:7c:8b:
30:ee:a6:d4:39:16:4c:53:d5:e7:bf:56:7d:26:b5:81:87:f3:
4a:74:49:dc:62:f5:78:47:5c:33:63:ea:c2:bb:d7:43:0b:7d:
94:0a:c4:10:7e:0a:ce:0e:86:0d:28:9b:03:ee:91:9f:e3:d1:
d9:fc:b7:69:ab:c9:98:cf:6b:aa:45:d5:bc:69:43:45:03:a2:
cb:5d:e3:35:0a:73:fd:21:68:1a:f6:d1:b6:d4:bc:71:07:4b:
a9:53:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:34:03 2025 by rpki-client