Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mobx7HDI_EEb87b8_efU4IF-Acg.roa
File: mobx7HDI_EEb87b8_efU4IF-Acg.roa (raw, json)
Hash identifier: 4/soF9GS76w3XLOIJeaquOUGsZ8krk5D2UCqKD3FrGY=
Subject key identifier: 9A:86:F1:EC:70:C8:FC:41:1B:F3:B6:FC:FD:E7:D4:E0:81:7E:01:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A15CB22C6D91A762007F044227BE9778
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mobx7HDI_EEb87b8_efU4IF-Acg.roa
Signing time: Wed 11 Jan 2023 15:04:44 +0000
ROA not before: Wed 11 Jan 2023 15:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:a15c:44b0/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:5c:b2:2c:6d:91:a7:62:00:7f:04:42:27:be:97:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 15:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a86f1ec70c8fc411bf3b6fcfde7d4e0817e01c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:e0:45:96:26:9b:83:38:16:b0:3d:e3:da:
65:ef:28:91:8c:b2:3b:28:04:29:26:bb:ef:1b:13:
02:f8:12:b1:eb:74:04:65:08:2c:0d:e3:02:53:10:
b9:d1:b3:4f:df:50:72:72:ea:7a:84:ea:cc:d8:2f:
05:0e:61:60:05:25:68:01:7a:34:e7:9d:a7:99:b6:
f0:5f:04:44:3f:c0:fb:98:32:72:8b:e1:c3:3f:1a:
0f:bc:9c:73:d9:5a:be:9c:02:c9:2e:36:f7:e1:e2:
45:dd:56:e2:38:e5:63:71:3f:69:1f:d4:46:ae:e1:
37:8c:54:a6:5e:f2:32:f9:21:a5:eb:74:8c:60:5f:
f8:af:d6:36:65:e2:fd:ac:76:9e:09:b0:0c:c1:be:
d6:05:99:be:ff:f8:a6:dd:cf:4f:4a:a3:96:f8:ee:
a9:e5:7e:82:41:c8:da:77:7a:e6:a4:18:04:27:4b:
9e:b5:bb:bc:22:0f:14:cb:40:cd:7e:32:53:09:43:
a4:be:89:63:7a:d9:f6:26:ed:22:7a:4e:13:fc:ec:
e4:ba:57:95:5b:c5:d0:98:db:c1:4b:a1:32:45:5c:
c2:a9:96:32:cb:a5:34:ad:a0:7d:f5:26:d1:cc:e8:
70:36:81:67:35:d0:91:6a:04:41:98:4a:d3:94:8c:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:F1:EC:70:C8:FC:41:1B:F3:B6:FC:FD:E7:D4:E0:81:7E:01:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mobx7HDI_EEb87b8_efU4IF-Acg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:dc:f9:a4:29:ad:60:ab:10:b9:3e:fb:1f:42:64:a6:0c:0c:
64:83:eb:f8:86:eb:c4:b3:a3:88:e3:98:ad:eb:92:70:ba:17:
5f:4c:0b:13:0b:e0:f1:d5:29:d3:e0:a8:c4:48:50:49:f0:c2:
bd:e3:2b:9b:be:17:89:7f:43:4d:6f:f4:d2:59:9f:64:d1:36:
43:0c:07:98:94:2b:29:dc:4f:d3:1e:f6:07:3b:79:79:80:1f:
49:af:79:99:7a:64:7d:3c:35:a9:1b:73:ad:86:1f:1d:12:2d:
a3:2d:1d:f6:89:08:bf:51:89:45:dc:4d:1e:cb:d8:66:41:cd:
b4:37:bc:7a:79:2c:fa:82:bb:c8:d7:b6:2b:84:7e:0f:5c:08:
f5:40:00:26:8f:15:01:b0:8c:de:c7:a3:a3:76:54:ba:32:1a:
c7:6b:9f:a0:2f:f1:1a:90:73:ec:90:16:18:fb:5d:f5:29:54:
e8:a7:0c:26:12:d2:42:31:cd:f6:d7:f9:aa:04:0d:3d:35:1f:
d5:83:e2:29:ac:5a:61:32:a6:d2:ef:9e:90:aa:9a:23:c3:a2:
3f:3b:94:0d:11:3a:6e:cd:d1:53:f8:3e:f0:35:fd:61:58:f9:
9b:5b:1e:83:6e:84:5a:15:d1:0c:12:74:92:13:ad:46:da:c5:
f6:d0:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:47 2025 by rpki-client