Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mqOOfOwPJGQEvuZ7ncisfti1qo8.roa
File: mqOOfOwPJGQEvuZ7ncisfti1qo8.roa (raw, json)
Hash identifier: bL3LkvZP8CtiQRDvEQ556Vlr4p4Fyi7e/4wDomhxOiY=
Subject key identifier: 9A:A3:8E:7C:EC:0F:24:64:04:BE:E6:7B:9D:C8:AC:7E:D8:B5:AA:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185153E2C060062A72E3A4CD151DD9EB3E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mqOOfOwPJGQEvuZ7ncisfti1qo8.roa
Signing time: Thu 15 Dec 2022 10:04:33 +0000
ROA not before: Thu 15 Dec 2022 10:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:153d:f593/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:3e:2c:06:00:62:a7:2e:3a:4c:d1:51:dd:9e:b3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 10:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa38e7cec0f246404bee67b9dc8ac7ed8b5aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:fb:eb:8b:e2:d9:81:e1:e7:dd:32:41:5f:
30:48:62:e4:51:7f:a8:40:fd:60:b5:2c:4f:42:6b:
72:4c:90:f7:80:6d:92:9f:a5:22:fb:13:64:aa:e1:
a8:b1:63:0e:4a:86:c6:01:1d:b4:d9:db:b7:42:31:
e9:32:b8:60:45:1a:00:5f:f2:df:6a:50:7a:31:9d:
ab:83:4a:94:5c:6a:b6:b7:be:f7:cc:ca:5e:b2:32:
28:c8:07:15:d6:81:4d:ff:7e:a3:ac:0f:1d:c9:c9:
86:66:0b:74:a2:87:7f:85:d4:8b:98:2b:00:9f:b7:
ce:93:98:23:f9:e1:8a:1e:1d:0b:30:85:cb:eb:bf:
73:19:05:d1:60:76:ea:4d:9a:e5:0f:79:d7:0c:2d:
59:01:7c:7b:21:32:d9:86:f1:2b:7a:28:98:a4:fb:
9a:67:43:58:f3:d4:17:bf:05:fa:66:76:62:77:64:
89:d9:3c:5b:f0:41:f6:5a:5e:3a:f2:1b:25:0d:c7:
2b:15:4a:47:87:a7:9b:79:1d:72:f8:3d:99:9c:77:
04:84:cb:77:b3:71:30:a7:c5:9c:a0:52:f7:79:79:
fb:9c:78:c1:98:79:8a:d1:35:fb:19:69:cc:fc:8e:
44:5d:73:bb:7b:c4:0e:28:24:62:c6:b4:32:4f:c8:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A3:8E:7C:EC:0F:24:64:04:BE:E6:7B:9D:C8:AC:7E:D8:B5:AA:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mqOOfOwPJGQEvuZ7ncisfti1qo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:47:a5:32:d2:c3:1a:16:87:4f:a1:09:26:3e:f5:82:87:98:
b8:18:cc:96:ad:93:a3:aa:8c:53:da:62:78:dd:ce:74:11:3a:
d3:05:8c:8d:dc:4c:7a:90:d3:4c:5e:0c:9c:4d:35:7c:d9:74:
09:ca:6b:01:eb:11:13:be:e2:de:b4:4e:1c:59:7e:e9:ae:ee:
83:f4:e4:6d:6d:fe:af:f6:33:6c:ca:e9:a2:49:11:79:75:dc:
41:c4:4a:12:53:f6:a5:44:43:42:03:04:e1:f3:5b:38:63:00:
eb:2a:41:10:9e:21:fe:94:72:20:c7:cc:bd:50:8d:58:e5:9b:
6a:2f:02:13:d9:7e:65:f3:7b:58:42:7e:19:fb:b3:d7:65:be:
d9:89:f2:fc:01:dc:98:d2:1c:cc:36:72:02:5a:2d:23:b3:10:
79:57:d1:88:5c:5e:b7:88:9d:25:ec:51:85:43:3b:5f:1c:cf:
a0:79:fe:2b:bb:53:9d:e8:d9:3c:0d:7f:f9:88:6e:47:24:5a:
c7:67:ce:42:f5:8c:ca:0b:cf:0f:55:ca:fb:b5:14:c4:2e:cd:
64:fc:74:22:c6:c4:7f:52:5b:e8:cb:a4:ae:74:5d:6c:25:a6:
1b:ce:4d:ac:b2:c0:1d:dd:31:30:74:a3:a6:93:50:ca:e7:22:
4a:a8:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:51:10 2025 by rpki-client