Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlOo1vXozSTiLgJLyJBBsT8bLQs.roa
File: mlOo1vXozSTiLgJLyJBBsT8bLQs.roa (raw, json)
Hash identifier: 77uAsiN1CJ+kfR00e/C6vapo8b7QKrvCamjkMl1riRk=
Subject key identifier: 9A:53:A8:D6:F5:E8:CD:24:E2:2E:02:4B:C8:90:41:B1:3F:1B:2D:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867C3B76FEFFCBE2F388CA4750C6B71CED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlOo1vXozSTiLgJLyJBBsT8bLQs.roa
Signing time: Thu 23 Feb 2023 03:05:17 +0000
ROA not before: Thu 23 Feb 2023 03:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:7c3a:e4d4/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:3b:76:fe:ff:cb:e2:f3:88:ca:47:50:c6:b7:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 03:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a53a8d6f5e8cd24e22e024bc89041b13f1b2d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:f5:5a:18:a1:8e:16:64:f5:8b:53:44:c8:
10:40:54:b1:73:fe:bf:5f:b7:0e:8f:d3:2b:7a:7c:
95:eb:39:4a:f1:e8:6d:c7:c0:ed:48:78:5f:2f:45:
74:15:df:72:2e:21:9c:4e:c1:c9:66:8e:7a:85:10:
c3:56:32:fc:19:04:8f:74:8b:55:d7:f3:11:cc:f8:
d7:3b:eb:2a:f5:89:4c:4b:21:ef:33:dd:e7:53:c4:
fd:9c:2c:36:87:c9:59:71:a7:a3:3c:e8:0e:06:a5:
72:6e:c5:ee:e2:7b:88:cc:c4:a2:df:c1:e8:43:84:
77:25:d1:db:d3:fd:76:fc:6d:ac:a9:ca:ee:ed:51:
26:65:f9:65:ae:40:56:04:80:10:10:bb:77:7a:cf:
f9:d8:ff:bd:fa:f9:17:b0:5f:83:61:54:43:9a:10:
69:1f:69:fe:bb:4e:4c:15:35:44:e1:0a:a9:98:cf:
a9:f8:e5:ab:78:5a:66:59:96:75:0f:98:e5:5f:ee:
13:d0:96:a3:1f:de:32:65:6a:eb:7c:7f:16:a1:e8:
01:c6:6d:13:cf:8b:1c:3e:b9:07:74:93:ee:b0:47:
0f:b8:19:09:d7:be:ed:5b:fd:3a:28:5b:c4:7b:ae:
ef:f3:1d:05:63:6e:3d:35:28:da:64:54:0f:f2:aa:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:A8:D6:F5:E8:CD:24:E2:2E:02:4B:C8:90:41:B1:3F:1B:2D:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlOo1vXozSTiLgJLyJBBsT8bLQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:09:64:3f:ed:7b:14:52:06:0b:ce:3a:7c:73:d5:35:0c:e9:
7e:82:b8:35:fe:e7:77:8b:17:ab:14:8e:14:53:aa:1d:07:2e:
bc:57:ce:fc:14:87:2e:04:2e:55:b2:15:6d:d7:1e:2d:58:39:
dd:28:a4:50:51:09:ff:43:96:5c:71:69:21:85:2f:3a:4f:67:
58:13:96:6e:bb:4d:21:35:60:7c:b0:98:7b:fe:f7:59:f5:4a:
82:50:22:66:47:77:7f:4a:a7:be:7e:63:81:1c:42:d5:12:e4:
06:af:20:6f:14:d8:d5:ea:99:fe:60:04:c1:00:e9:3c:c6:95:
78:2a:7d:99:67:6a:35:d0:ae:8d:9f:56:aa:d2:77:0c:e8:ba:
51:f3:d9:c1:39:b5:12:aa:05:07:15:97:de:49:03:5f:4c:37:
63:b8:68:7f:37:84:3a:29:b3:7e:e6:37:54:e7:e1:50:db:bf:
8a:99:b7:dd:29:7a:bf:5e:29:cb:d2:51:f2:86:7e:be:1c:88:
a8:9e:b3:5e:17:f6:04:e0:ea:d4:ae:b7:71:f2:c9:8d:d4:a7:
c5:07:5b:fc:dd:92:a5:2d:7a:51:95:9c:7e:21:9d:31:cd:40:
be:1b:6a:bb:1c:67:60:0d:dd:15:09:cc:55:3b:54:63:87:c7:
d1:66:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:08 2025 by rpki-client