Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrQy1Jd94ZRp4KrOLzh9gfpDD9Y.roa
File: mrQy1Jd94ZRp4KrOLzh9gfpDD9Y.roa (raw, json)
Hash identifier: Y7S9h/Otm+f+Su42vgadMUWMFYryz5pVs4AKqgzy6qw=
Subject key identifier: 9A:B4:32:D4:97:7D:E1:94:69:E0:AA:CE:2F:38:7D:81:FA:43:0F:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2D0F6AC1E559BAD0F77ABE519F3AD6DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrQy1Jd94ZRp4KrOLzh9gfpDD9Y.roa
Signing time: Fri 25 Aug 2023 14:18:19 +0000
ROA not before: Fri 25 Aug 2023 14:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:0f:6a:c1:e5:59:ba:d0:f7:7a:be:51:9f:3a:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 14:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ab432d4977de19469e0aace2f387d81fa430fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:9f:33:71:0a:d6:f9:3b:a1:fc:bc:1c:83:
c6:6a:a6:1d:fa:e5:9d:2f:0b:83:47:02:8c:0c:74:
79:ba:0a:2c:fe:8a:10:26:f7:31:30:9f:f5:c2:64:
d3:a7:e2:7b:ad:2c:de:ae:f1:0b:8c:c6:a9:3d:31:
9e:4d:4f:ff:74:ae:67:16:c8:5b:a5:29:6f:f0:74:
ab:3a:bc:a2:58:c5:0a:3e:b9:d6:6d:ed:72:c4:e4:
58:1b:3c:8d:a6:b4:60:3a:43:ec:4b:9c:2a:c7:d3:
02:8d:8c:22:36:bc:11:6e:e1:52:f9:49:35:db:d2:
dc:10:4d:03:ab:ad:6e:f4:40:c1:41:ed:04:ea:2d:
6c:a4:26:5a:6e:45:e8:59:e9:2b:e4:15:5b:6a:7f:
36:7f:35:3c:50:ed:b4:75:a3:67:bd:23:9e:85:6e:
c3:b0:db:4e:9f:df:a4:8d:36:cf:d1:36:50:a4:ee:
2d:78:ef:2c:03:46:59:2e:ba:90:57:cc:eb:55:fa:
18:04:3f:40:db:e6:72:73:89:ff:44:7f:4c:f9:41:
7d:97:91:98:f1:69:28:d6:c0:2b:67:e3:03:55:a3:
54:f4:b4:da:3d:cd:93:89:b4:16:f6:97:d1:db:c6:
29:8c:06:91:6c:9b:f8:9a:9b:8c:5d:52:07:a4:cb:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:32:D4:97:7D:E1:94:69:E0:AA:CE:2F:38:7D:81:FA:43:0F:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrQy1Jd94ZRp4KrOLzh9gfpDD9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:1b:0a:d3:29:aa:a0:d6:5d:80:16:de:e7:c6:76:a0:5c:3e:
23:d4:6a:72:5e:e9:4a:c0:1c:c9:43:f0:69:82:da:64:41:11:
83:31:16:30:26:bc:02:e3:4f:42:54:69:08:9a:0a:ae:32:ee:
61:30:39:f7:88:2e:7c:3e:7b:48:6c:25:6d:93:96:68:be:55:
31:36:e3:0d:9f:1c:78:9b:53:a3:49:29:45:fb:d8:af:25:22:
05:99:1c:3f:40:e1:b9:68:f7:0c:4a:72:c7:05:65:28:6c:c9:
78:c5:d9:94:f5:76:f2:2e:4d:e2:f9:26:47:9b:0b:6a:71:3d:
c3:af:96:e2:25:91:38:f8:e8:9d:8e:5e:30:a9:6f:55:8f:aa:
a2:76:cb:46:92:8b:aa:19:7e:e5:96:55:18:0b:8f:2c:2a:ec:
e1:84:69:c5:18:f4:80:7f:d1:37:33:f2:ed:55:79:df:99:8d:
47:a9:00:41:83:3c:dd:cb:23:66:c8:36:64:34:52:1c:8b:17:
fe:b4:f9:f6:b7:e6:6d:e7:d4:a0:93:ee:83:9a:e2:37:50:b5:
d2:c8:dd:f3:b9:96:78:c4:3e:d6:e7:73:b0:e6:7b:2f:10:96:
bc:de:94:8e:71:4a:36:92:17:d0:40:1c:66:8f:1b:24:62:4f:
f8:1d:ce:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYotD2rB5Vm60Pd6vlGfOtbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MTQxODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWI0MzJkNDk3N2RlMTk0NjllMGFhY2UyZjM4N2Q4MWZhNDMwZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymifM3EK1vk7ofy8HIPGaqYd+uWd
LwuDRwKMDHR5ugos/ooQJvcxMJ/1wmTTp+J7rSzervELjMapPTGeTU//dK5nFshb
pSlv8HSrOryiWMUKPrnWbe1yxORYGzyNprRgOkPsS5wqx9MCjYwiNrwRbuFS+Uk1
29LcEE0Dq61u9EDBQe0E6i1spCZabkXoWekr5BVban82fzU8UO20daNnvSOehW7D
sNtOn9+kjTbP0TZQpO4teO8sA0ZZLrqQV8zrVfoYBD9A2+Zyc4n/RH9M+UF9l5GY
8Wko1sArZ+MDVaNU9LTaPc2TibQW9pfR28YpjAaRbJv4mpuMXVIHpMtF5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJq0MtSXfeGUaeCqzi84fYH6Qw/WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbXJReTFKZDk0WlJwNEtyT0x6aDlnZnBERDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGcbCtMpqqDWXYAW3ufG
dqBcPiPUanJe6UrAHMlD8GmC2mRBEYMxFjAmvALjT0JUaQiaCq4y7mEwOfeILnw+
e0hsJW2Tlmi+VTE24w2fHHibU6NJKUX72K8lIgWZHD9A4blo9wxKcscFZShsyXjF
2ZT1dvIuTeL5JkebC2pxPcOvluIlkTj46J2OXjCpb1WPqqJ2y0aSi6oZfuWWVRgL
jywq7OGEacUY9IB/0Tcz8u1Ved+ZjUepAEGDPN3LI2bINmQ0UhyLF/60+fa35m3n
1KCT7oOa4jdQtdLI3fO5lnjEPtbnc7Dmey8QlrzelI5xSjaSF9BAHGaPGyRiT/gd
zqs=
-----END CERTIFICATE-----
Generated at Thu May 1 14:26:09 2025 by rpki-client