Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmpDqUb-sqT7J1oT-N7UUmEvBek.roa
File: mmpDqUb-sqT7J1oT-N7UUmEvBek.roa (raw, json)
Hash identifier: LTg1SFdID7CP1kksVdeEgpk/A+fwhsApN8KwwBeL/5A=
Subject key identifier: 9A:6A:43:A9:46:FE:B2:A4:FB:27:5A:13:F8:DE:D4:52:61:2F:05:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018445C5ED34F604F927B247024B066C2808
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmpDqUb-sqT7J1oT-N7UUmEvBek.roa
Signing time: Sat 05 Nov 2022 03:11:49 +0000
ROA not before: Sat 05 Nov 2022 03:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:45:c5:ed:34:f6:04:f9:27:b2:47:02:4b:06:6c:28:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 03:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a6a43a946feb2a4fb275a13f8ded452612f05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:c5:67:f0:ca:dc:6b:0b:60:af:90:bb:24:
4b:1a:59:cd:82:81:45:b1:0e:f6:22:4d:bd:b0:76:
f7:ef:d7:13:78:26:0b:a3:e8:21:8a:38:03:ff:af:
bc:ff:6f:92:d0:fd:62:2f:e9:39:c1:00:62:10:93:
e8:25:42:ca:c1:f2:4d:d8:9a:97:2d:ca:4f:db:a6:
eb:d2:2f:68:fe:03:93:87:c7:a3:cc:0b:ac:61:1d:
f6:f0:6b:91:50:c8:34:50:2f:e5:02:72:f2:c4:49:
d1:b0:93:c0:5f:df:bf:07:49:92:15:65:b1:a4:89:
99:15:ed:98:c5:e2:70:bd:72:3e:a2:ff:59:dd:b7:
21:a7:a3:05:24:18:8d:a2:b7:f0:44:e9:1e:65:59:
d0:eb:80:d1:21:49:a3:c2:69:4f:f1:27:88:cc:08:
df:e8:ef:49:e4:60:7d:a6:03:7e:90:83:f1:d5:08:
51:9e:14:fb:16:1f:a6:59:e0:e3:b7:cb:c3:01:dc:
61:67:dc:90:b7:f4:d5:ac:9c:a1:2e:0f:6f:1c:f1:
84:c7:fa:cf:ef:ce:5a:ff:59:1b:be:40:87:8e:4b:
15:eb:77:e8:40:09:40:80:49:82:b1:70:d2:9c:86:
80:95:80:30:2d:ca:fa:67:ac:f0:68:77:48:32:0d:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6A:43:A9:46:FE:B2:A4:FB:27:5A:13:F8:DE:D4:52:61:2F:05:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mmpDqUb-sqT7J1oT-N7UUmEvBek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:05:72:5d:c5:86:e1:e4:47:5d:c8:77:cd:b1:7f:fb:75:bd:
fe:1b:55:50:f1:9b:f9:40:e6:67:04:f2:d9:97:1c:35:9c:62:
24:3b:06:f9:f3:c4:35:17:52:3f:82:05:c9:05:65:d9:d3:fc:
a2:6c:d7:f1:b1:c1:70:c1:1d:e7:94:c2:81:c1:f2:c5:f2:5e:
cb:9c:bf:24:8b:05:94:56:2c:5b:5b:06:7e:6d:ae:71:36:d9:
a4:a5:2b:ea:c4:86:8b:fa:d1:3c:3b:99:ba:1c:03:48:78:79:
f6:f2:ad:c6:31:ce:dc:01:66:d7:b4:67:d9:b6:95:0a:48:49:
2f:24:33:d8:fd:53:61:92:e4:c9:76:d1:68:ec:e5:63:a6:14:
d7:73:21:c4:14:ab:43:3a:9f:77:7a:13:8b:dc:fb:af:a1:2b:
f1:eb:70:54:f3:66:b7:21:35:8a:18:af:b6:17:22:48:88:14:
3d:c0:12:90:be:28:c8:20:24:84:05:d8:2a:aa:52:2c:21:d6:
ea:d5:14:09:ba:51:19:3f:8c:18:ee:b2:03:16:d8:e8:5c:0b:
2f:82:c8:64:8e:c1:10:5e:0b:61:fe:98:4b:7d:5f:b8:0c:ac:
24:52:e3:3b:ec:f9:5b:45:3f:45:8c:ab:26:d8:d0:2b:ad:b7:
ce:a1:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:34 2025 by rpki-client