Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ml_sqp5gKcNboDfNjNjFyTw2u-k.roa
File: ml_sqp5gKcNboDfNjNjFyTw2u-k.roa (raw, json)
Hash identifier: IbpigJb9dMwqjGRdZIbYm3IyhZ6LEuQyC8KDJAqkn+k=
Subject key identifier: 9A:5F:EC:AA:9E:60:29:C3:5B:A0:37:CD:8C:D8:C5:C9:3C:36:BB:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87336103
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ml_sqp5gKcNboDfNjNjFyTw2u-k.roa
Signing time: Wed 25 May 2022 23:09:13 +0000
ROA not before: Wed 25 May 2022 23:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268291331 (0x87336103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 23:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a5fecaa9e6029c35ba037cd8cd8c5c93c36bbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:ef:21:37:a5:74:8f:d6:ba:b0:07:a4:80:
b9:5c:d2:ac:36:7d:05:f2:08:40:f6:7c:fc:59:87:
a9:26:1a:97:fc:ef:d9:ca:52:b2:7a:f7:92:96:b0:
8b:f9:78:fc:d8:10:7c:ec:d8:ba:28:61:f7:d1:3b:
f3:ce:c6:47:e4:c9:b9:1a:51:65:14:ba:0b:21:0d:
51:2a:0b:88:37:28:99:0e:11:de:5e:c8:70:71:29:
4a:70:1b:8d:b0:4a:5e:26:ab:99:8c:31:7f:6f:38:
9c:28:35:80:78:df:ad:02:09:36:e6:90:5b:27:c4:
cc:26:56:d4:23:68:21:9d:3a:4e:e2:89:c2:c9:52:
48:ea:d1:0a:de:b1:bd:15:54:1f:b9:5d:7c:0f:3b:
b9:d4:ed:ec:f2:b6:1d:da:34:ae:bf:47:bd:ef:2c:
19:25:79:24:84:61:24:f9:e7:4b:7c:f3:82:f6:00:
27:e4:1f:18:bf:e7:8d:f7:d9:eb:fb:10:99:4a:bf:
73:30:5f:2b:5e:5c:1a:01:07:e5:0b:6c:32:02:4b:
9f:84:fd:d8:82:3a:0a:13:d0:d7:74:34:f0:30:94:
21:b8:26:01:f0:b7:5e:bd:4d:37:33:c9:a6:da:86:
e1:89:ba:65:33:19:e4:1e:41:d5:05:f7:2b:b4:4f:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:EC:AA:9E:60:29:C3:5B:A0:37:CD:8C:D8:C5:C9:3C:36:BB:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ml_sqp5gKcNboDfNjNjFyTw2u-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:d4:74:1c:56:d5:d0:00:91:89:35:9c:0c:61:77:32:6a:31:
22:e9:ae:a1:ca:93:5c:79:df:7d:65:4d:8a:9b:70:fc:82:4c:
16:fa:78:25:82:c3:db:fa:35:b6:ca:2f:4b:a3:da:36:69:63:
ef:aa:2c:0f:3d:cd:cc:54:6a:61:f4:85:5d:3b:80:ec:94:6c:
cc:cd:02:18:ee:e3:b0:88:72:14:7b:2d:5f:e1:5b:49:a9:4e:
17:f6:44:61:0b:72:52:77:43:2c:cb:6d:79:2a:8e:b8:9f:e6:
e7:d1:53:26:f5:41:0b:71:7b:b0:be:30:c4:5e:cd:29:c1:e6:
70:71:f3:35:d1:7b:99:37:c3:cd:90:ff:14:72:2a:fb:63:61:
a0:da:27:a7:98:da:1c:db:2d:9d:3d:c2:4b:78:58:a0:a8:e2:
7e:ce:74:d2:51:df:da:de:77:71:70:2e:7e:8e:ac:5e:fc:08:
c2:52:74:8c:a3:59:0e:d9:f4:e9:46:fd:fc:6b:52:ba:b4:07:
4e:96:97:73:13:54:61:2e:d7:95:c4:f4:f7:93:60:c0:c0:a8:
8c:ae:73:b2:a0:76:b5:c2:84:30:1d:dd:96:3b:80:5b:b8:ea:
ce:b7:a2:0d:20:d2:a0:38:bc:8c:17:a0:5f:63:00:8a:37:67:
ee:fb:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:19 2025 by rpki-client