Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmEL3OaNBRLyPb261CpvSB1Zc54.roa
File: mmEL3OaNBRLyPb261CpvSB1Zc54.roa (raw, json)
Hash identifier: YSU1nC59F2ea38t8LXTiRX5Q2vnTfFGnDOjOz1Lfsts=
Subject key identifier: 9A:61:0B:DC:E6:8D:05:12:F2:3D:BD:BA:D4:2A:6F:48:1D:59:73:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D630194
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmEL3OaNBRLyPb261CpvSB1Zc54.roa
Signing time: Thu 24 Feb 2022 18:13:25 +0000
ROA not before: Thu 24 Feb 2022 18:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835205012 (0x6d630194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 18:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a610bdce68d0512f23dbdbad42a6f481d59739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:05:76:9a:66:21:05:7a:8d:f0:94:e9:91:
b4:d8:63:62:ab:ae:95:3b:63:6d:a1:f3:a8:31:a7:
e4:33:5f:05:c2:6f:24:df:e0:5f:9c:e0:37:0c:71:
94:99:cb:25:1b:b6:24:ad:25:72:16:12:5d:1c:d3:
8c:eb:72:be:2e:62:a0:8f:19:39:d4:0b:a4:f1:4a:
df:9f:30:e2:d8:82:6c:15:be:ac:ab:57:be:e6:67:
e4:35:26:90:89:ca:48:99:b1:80:95:65:19:f9:d8:
9d:87:7a:0f:cc:11:66:8c:be:94:02:d9:ef:3a:1e:
d0:f1:80:bf:20:f8:aa:ce:1a:38:be:8d:d5:67:58:
ac:b2:e5:f1:b2:3d:08:cb:8d:47:99:2e:45:f2:43:
18:c2:a6:f2:48:5b:c5:1b:f1:8f:88:6a:1d:28:a1:
24:fe:4c:bf:7b:e5:6c:f8:4f:05:d8:55:e9:aa:79:
08:e6:69:d0:15:19:b8:3d:cd:3c:2e:aa:f5:0f:c4:
89:1b:22:19:5d:fc:84:a7:21:a3:2f:9d:4f:5b:81:
59:ba:d9:f4:58:31:51:69:ff:96:90:f3:42:25:45:
f5:ac:e0:9a:e1:29:fb:5c:10:8c:7a:54:7b:63:d4:
da:69:47:37:4e:d8:f0:4d:fe:9d:cb:db:90:d8:17:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:0B:DC:E6:8D:05:12:F2:3D:BD:BA:D4:2A:6F:48:1D:59:73:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmEL3OaNBRLyPb261CpvSB1Zc54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:d2:c8:db:37:1d:ce:ff:9a:03:5d:db:53:e9:b4:75:9a:ce:
99:b5:b3:31:1b:b8:35:e7:33:c1:bc:89:3f:a1:90:d4:98:14:
e5:11:1f:1c:fb:92:48:15:13:e4:ab:4d:ff:8a:fe:7f:33:a5:
26:15:d1:8d:0c:ca:92:e3:8b:3f:bd:73:bf:d1:dc:20:66:8d:
f7:6e:02:56:8c:bc:2c:c7:d7:ca:cc:2f:b0:ae:4b:28:f8:e8:
c3:f3:00:7c:f8:b9:55:c1:78:16:cf:04:77:34:50:c5:72:0a:
2e:78:65:81:62:40:63:a6:f9:da:a8:5d:17:78:ab:72:1d:ce:
ad:5e:cd:69:4a:da:c3:3d:fa:25:1b:1f:06:9a:96:d2:ad:b6:
a1:2e:91:19:d9:35:ac:b9:ab:59:70:43:03:d9:63:0c:47:c3:
01:50:a9:3d:3b:d7:44:8b:8c:83:ab:7b:7f:61:9d:7b:7a:56:
c9:01:ba:86:88:b2:90:58:68:db:da:d0:89:57:fa:56:0c:e3:
20:ad:ae:22:67:f6:53:6a:30:7c:61:86:1f:ab:25:44:a3:98:
ca:3c:ca:65:99:dd:0a:9c:5d:26:4f:17:28:20:31:a3:d3:66:
6e:36:3d:da:7a:b3:b3:57:64:be:e5:d0:e7:8f:2c:c3:e3:ce:
77:6a:9c:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbWMBlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NDE4MTMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWE2MTBiZGNlNjhk
MDUxMmYyM2RiZGJhZDQyYTZmNDgxZDU5NzM5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJKBXaaZiEFeo3wlOmRtNhjYquulTtjbaHzqDGn5DNfBcJv
JN/gX5zgNwxxlJnLJRu2JK0lchYSXRzTjOtyvi5ioI8ZOdQLpPFK358w4tiCbBW+
rKtXvuZn5DUmkInKSJmxgJVlGfnYnYd6D8wRZoy+lALZ7zoe0PGAvyD4qs4aOL6N
1WdYrLLl8bI9CMuNR5kuRfJDGMKm8khbxRvxj4hqHSihJP5Mv3vlbPhPBdhV6ap5
COZp0BUZuD3NPC6q9Q/EiRsiGV38hKchoy+dT1uBWbrZ9FgxUWn/lpDzQiVF9azg
muEp+1wQjHpUe2PU2mlHN07Y8E3+ncvbkNgX1ocCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSaYQvc5o0FEvI9vbrUKm9IHVlznjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L21tRUwzT2FOQlJMeVBiMjYxQ3B2U0IxWmM1NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQB80sjbNx3O/5oDXdtT6bR1ms6ZtbMxG7g15zPB
vIk/oZDUmBTlER8c+5JIFRPkq03/iv5/M6UmFdGNDMqS44s/vXO/0dwgZo33bgJW
jLwsx9fKzC+wrkso+OjD8wB8+LlVwXgWzwR3NFDFcgoueGWBYkBjpvnaqF0XeKty
Hc6tXs1pStrDPfolGx8GmpbSrbahLpEZ2TWsuatZcEMD2WMMR8MBUKk9O9dEi4yD
q3t/YZ17elbJAbqGiLKQWGjb2tCJV/pWDOMgra4iZ/ZTajB8YYYfqyVEo5jKPMpl
md0KnF0mTxcoIDGj02ZuNj3aerOzV2S+5dDnjyzD4853apza
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:45 2025 by rpki-client