Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlrW4U3iwANvGlB8BRT1ybNcx1U.roa
File: mlrW4U3iwANvGlB8BRT1ybNcx1U.roa (raw, json)
Hash identifier: EkqyhztdQblZ+VjrdS1Xk6sdsa5+FMn9VGkKGSGNEj8=
Subject key identifier: 9A:5A:D6:E1:4D:E2:C0:03:6F:1A:50:7C:05:14:F5:C9:B3:5C:C7:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3E9AFE71F404CA9C6644B22D418E3B84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlrW4U3iwANvGlB8BRT1ybNcx1U.roa
Signing time: Tue 29 Aug 2023 00:04:19 +0000
ROA not before: Tue 29 Aug 2023 00:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3e9a:e9cd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:9a:fe:71:f4:04:ca:9c:66:44:b2:2d:41:8e:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 00:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5ad6e14de2c0036f1a507c0514f5c9b35cc755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:a3:9c:2d:d5:bd:b1:0e:3f:c6:cc:f0:8e:
4d:f3:b2:4a:1c:0d:dc:fb:23:6a:55:35:1d:5e:a8:
10:56:60:6e:23:a3:35:d2:d6:5b:e0:e7:1d:d7:16:
9f:7d:bb:e3:e7:2f:20:43:03:10:de:2c:80:a5:a5:
b0:6a:5c:a7:a1:36:bc:8e:b1:9c:a6:85:2a:a6:96:
c6:11:5a:28:1f:57:0c:bc:18:59:82:6c:78:e7:e2:
67:27:85:22:26:3e:b0:8d:d3:80:f4:91:c1:ad:60:
19:31:01:b5:13:64:64:01:af:28:4b:57:03:95:fe:
fa:2d:ab:ae:32:a2:e5:d9:e9:ed:16:f6:d0:d1:1c:
5f:f8:f9:c6:51:28:ea:9e:8b:ce:53:10:b0:be:b3:
26:44:e7:13:58:f3:bd:33:b7:b4:11:72:de:35:74:
20:9e:86:0e:5e:c8:c4:d2:fa:54:d7:57:b7:5a:0d:
ec:b5:d4:c7:04:4f:a6:e1:3d:38:70:cf:b2:5a:33:
35:14:ba:98:06:29:df:25:09:07:13:c3:3d:21:60:
8d:f4:85:6c:e1:1f:16:85:4e:ef:8e:5f:08:d0:1a:
30:39:73:04:ff:cb:c6:7d:cb:7b:ac:9f:b1:6a:f3:
c2:35:a8:ab:cd:5f:67:94:34:26:9c:8f:ab:09:07:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:D6:E1:4D:E2:C0:03:6F:1A:50:7C:05:14:F5:C9:B3:5C:C7:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlrW4U3iwANvGlB8BRT1ybNcx1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:9d:9b:6e:c4:ec:49:fd:5b:ff:e2:56:4a:c2:01:8a:33:c1:
09:48:95:1e:d6:f5:c0:b0:3f:c0:9f:62:09:69:f0:40:02:24:
f1:02:44:23:5a:9c:22:c3:b8:74:86:9e:a7:37:51:d2:6d:70:
c5:0d:ff:94:6d:53:6d:d3:de:1c:e1:de:93:2d:44:a7:bd:24:
cf:ca:36:cb:22:16:3d:b7:89:8c:14:29:81:c5:23:d1:a1:f7:
2f:e0:c3:13:92:4e:7b:b7:17:56:c6:63:84:bd:cf:f2:1d:b2:
24:15:4d:34:3a:3c:34:66:97:d1:2c:d1:24:02:2d:de:04:46:
ce:8b:29:a0:c6:f5:4e:50:e0:fe:9a:26:03:b8:1b:c4:89:ef:
ef:4d:38:1b:9e:c9:c0:b4:ab:d0:c5:9f:86:d5:3f:9d:a3:46:
70:34:1b:db:1a:04:a4:39:2e:8d:4a:9b:28:3a:aa:d3:7e:ce:
f8:d5:c5:d6:d2:5d:2f:ea:af:2d:a4:c9:a0:2c:50:41:bf:25:
6f:1c:46:43:94:9b:ce:16:c5:38:e7:2a:04:fc:de:54:be:78:
40:ac:17:bc:a2:11:dd:7e:89:16:7b:1c:92:f3:53:a1:1e:2e:
55:5e:58:7c:da:93:32:c0:9d:d0:06:22:b5:fd:41:41:24:8a:
40:7e:8f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:06 2025 by rpki-client