Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnFPL4mYlw6epEvj5IdTplSvzys.roa
File: mnFPL4mYlw6epEvj5IdTplSvzys.roa (raw, json)
Hash identifier: bid8qdGCoyxu+zbE0V5VjmXZcli76wdYrHkPhoPVUjM=
Subject key identifier: 9A:71:4F:2F:89:98:97:0E:9E:A4:4B:E3:E4:87:53:A6:54:AF:CF:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 744ABB60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnFPL4mYlw6epEvj5IdTplSvzys.roa
Signing time: Mon 21 Mar 2022 01:10:50 +0000
ROA not before: Mon 21 Mar 2022 01:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951054688 (0x744abb60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 01:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a714f2f8998970e9ea44be3e48753a654afcf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:c4:29:08:8c:5d:0e:40:33:13:f4:ef:77:
55:90:ff:d7:45:8f:88:18:07:08:89:69:20:0a:fc:
98:2e:ff:6e:ed:68:ba:8f:08:31:18:ca:54:03:22:
28:6c:bc:c1:63:5e:be:5d:c8:01:1b:6e:e9:50:0b:
e7:2c:c4:57:b5:e4:e9:b2:6b:0c:ca:a1:5b:67:cf:
2e:73:b5:94:56:7f:cf:1c:50:0f:e8:fb:1c:90:7d:
c7:4f:16:42:52:50:04:2d:e2:3f:aa:84:1c:0f:e9:
04:ac:4b:49:f9:62:48:11:04:a5:3b:e5:72:f1:3e:
db:5c:c5:f8:4e:87:02:ab:a3:79:88:51:43:16:1f:
b1:81:42:a2:b4:9c:8b:1c:f5:7a:a4:e7:cf:f7:57:
7d:7f:67:70:d7:09:ac:66:76:e8:a7:79:c4:01:5a:
b1:c2:65:a5:47:8d:f3:c8:12:1b:8b:dd:d5:6d:92:
52:2a:d7:e8:fa:9c:6e:df:ba:e6:f9:fc:d0:a5:1c:
51:ec:0c:64:de:a4:92:b8:1a:40:c3:8d:69:a9:9d:
f6:e1:0a:fe:d2:f5:33:d5:86:f5:b7:33:2d:af:45:
96:fd:e0:b4:f1:db:38:4d:74:ab:40:d2:a2:38:8d:
33:1c:26:89:0e:87:29:a6:4e:96:f2:03:78:57:29:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:4F:2F:89:98:97:0E:9E:A4:4B:E3:E4:87:53:A6:54:AF:CF:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnFPL4mYlw6epEvj5IdTplSvzys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:af:b0:84:fa:23:80:64:3b:c5:85:27:a6:34:db:c0:74:18:
1c:a1:8e:4b:a7:25:83:ed:0e:37:37:a8:fb:44:3d:65:ed:ca:
a5:c9:ba:a8:f2:10:57:38:17:22:a9:67:ec:c2:c8:b0:1b:8c:
32:a8:67:ec:9b:05:4b:b6:a3:5c:eb:9f:3e:b1:05:28:f8:d0:
af:91:e8:bc:9e:3a:bd:74:aa:2f:7e:20:6f:8c:ea:f0:fc:6c:
8c:af:c8:f2:c6:0f:11:b2:ba:00:f6:33:6d:9a:fa:ea:a2:d5:
4f:22:cb:e2:a7:6f:44:14:53:93:ce:5b:12:d4:e8:f7:cd:71:
35:79:cb:63:d6:3a:b7:ff:3a:64:23:24:ad:0b:9c:ac:ad:a0:
aa:a4:3f:3a:f9:dc:07:70:78:c9:3c:2b:1d:2b:9f:27:55:25:
7e:4e:71:ab:ea:ac:5e:dc:12:f3:a3:50:bb:92:b4:bc:44:67:
0e:94:8e:1e:6e:9b:5b:ad:99:40:10:fa:e7:4d:51:6a:4f:b9:
8a:29:77:d4:f1:53:c7:eb:24:59:1c:58:e5:80:6f:09:97:5a:
db:e3:a3:3b:c2:8e:08:86:e0:a1:b8:a9:2c:90:5b:3f:9b:0d:
65:11:ca:81:d5:e7:0f:f4:35:eb:60:41:f3:a8:a3:51:14:58:
ad:d1:5a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:31 2025 by rpki-client