Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlxqH6WBSyufTKroI6szk2C-lO8.roa
File: mlxqH6WBSyufTKroI6szk2C-lO8.roa (raw, json)
Hash identifier: BZAEEjgCciNWWxMETeQpqhW+nJZn+wnqbgb3kVHPthk=
Subject key identifier: 9A:5C:6A:1F:A5:81:4B:2B:9F:4C:AA:E8:23:AB:33:93:60:BE:94:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894EF62A6B5850E39C7A166EB6580C3D8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlxqH6WBSyufTKroI6szk2C-lO8.roa
Signing time: Thu 13 Jul 2023 11:15:02 +0000
ROA not before: Thu 13 Jul 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:f6:2a:6b:58:50:e3:9c:7a:16:6e:b6:58:0c:3d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5c6a1fa5814b2b9f4caae823ab339360be94ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:c9:2a:b1:2c:07:a6:04:07:70:bc:cb:97:
22:48:af:4d:24:5d:aa:dc:00:5a:0a:79:65:6f:34:
67:97:a1:86:5c:40:ec:f3:2c:f2:85:54:a5:ae:ca:
1a:77:7f:ec:7e:18:60:c9:ae:32:bb:ff:23:db:23:
6b:fb:67:d7:49:96:fb:97:0e:8e:d8:ee:c7:dd:e4:
55:52:8b:c8:88:c4:9d:ac:73:37:24:df:f7:45:58:
74:84:38:42:bf:3b:94:89:00:ff:cc:ca:3d:d0:dd:
45:00:e4:c6:28:28:b5:81:e3:c2:86:d3:bd:e3:86:
ba:1a:e8:19:c9:c0:26:e7:66:a7:27:e3:34:11:d1:
7f:86:2d:25:23:af:85:45:bb:6d:c1:ef:ec:6a:4a:
80:c8:f7:ca:b9:fd:1c:22:45:b1:5d:29:01:1c:bb:
d9:96:03:5f:cd:bf:97:42:25:d9:c1:db:ba:b8:ad:
f9:f0:d7:78:b3:3a:b2:2d:81:7b:99:26:60:18:31:
79:84:bd:62:c5:34:3f:1f:b8:eb:a5:72:f0:29:ec:
ff:d1:90:d9:02:18:61:2d:a6:e4:37:d3:84:f7:e2:
aa:f9:35:be:53:f8:ec:00:ef:82:43:38:24:07:2c:
a9:74:9b:78:f9:a6:04:e0:b1:a3:d6:79:e2:11:53:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:6A:1F:A5:81:4B:2B:9F:4C:AA:E8:23:AB:33:93:60:BE:94:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mlxqH6WBSyufTKroI6szk2C-lO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:ad:9b:df:4b:e7:f1:7e:0d:0d:7f:36:c1:18:66:0e:4e:83:
37:70:51:3c:cb:42:05:4d:53:2d:61:df:f6:ab:ee:af:a6:15:
57:8e:8c:6f:79:aa:8a:64:e6:9b:23:d1:08:78:fe:53:50:01:
5a:9f:d6:20:9d:d0:92:da:04:c5:0d:3a:73:76:c8:55:3c:29:
aa:8e:a9:c3:11:79:e5:5f:65:44:eb:82:db:6d:bf:b9:55:55:
30:a1:f5:2b:54:65:ac:7e:3d:c3:de:f9:cb:52:05:5d:72:fd:
f8:bc:09:98:db:14:2e:48:fc:a1:4d:77:1d:20:29:89:c5:fe:
b6:4a:76:4c:e0:4a:63:68:f3:61:37:40:84:3d:a2:29:1d:9d:
ca:b6:32:09:60:32:e8:be:f5:cf:42:e4:5c:93:5c:8c:85:0a:
32:71:35:7f:8f:c9:77:53:3b:89:ee:4e:a1:71:5b:a6:c2:7c:
ed:21:82:df:70:99:85:bd:68:0b:a6:4b:ce:e0:8b:86:7b:ee:
d3:0d:72:ea:49:91:ee:3b:04:74:f1:f3:06:b2:d9:54:0f:df:
36:83:28:77:e2:dd:3f:58:1a:29:40:9b:f9:3e:84:24:3b:5c:
d3:46:a1:eb:1a:93:f5:33:7a:49:0a:5f:61:ea:a6:9e:1c:07:
d6:63:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:55:25 2025 by rpki-client