Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrRrUjm8dA9QoAh0cRTMYwaehLk.roa
File: mrRrUjm8dA9QoAh0cRTMYwaehLk.roa (raw, json)
Hash identifier: G0sm2UVagYTtfcPOIISn/dMRAQGkCn5X8hT86pgAZ7A=
Subject key identifier: 9A:B4:6B:52:39:BC:74:0F:50:A0:08:74:71:14:CC:63:06:9E:84:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91993778
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrRrUjm8dA9QoAh0cRTMYwaehLk.roa
Signing time: Fri 01 Jul 2022 23:11:25 +0000
ROA not before: Fri 01 Jul 2022 23:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2442737528 (0x91993778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 23:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ab46b5239bc740f50a008747114cc63069e84b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:14:6b:6d:00:fc:50:8f:e4:27:e8:59:b4:
47:20:79:66:cc:16:66:ca:fa:7a:56:d5:b0:51:c2:
db:4c:fc:98:06:dd:63:cc:44:00:f0:ef:2f:d8:82:
a3:87:21:32:93:3e:38:98:c1:d6:ed:4b:0f:bd:c0:
4c:b2:fb:b5:41:b0:24:c1:95:c7:64:92:22:94:68:
e3:d6:a7:dc:04:00:16:b9:6b:84:7c:11:a0:f4:85:
92:3c:6d:9f:03:15:26:b6:35:d7:98:17:60:8c:1d:
ab:00:7e:1a:ab:f7:d1:ed:f5:b5:48:6a:19:10:5d:
a3:2d:be:f8:f9:ce:55:66:48:a5:47:75:d0:b7:e0:
2e:2e:0c:f3:0a:61:20:8a:9e:87:ab:a1:21:ff:93:
87:66:22:d9:7c:3a:79:9e:3c:de:b8:d3:40:26:53:
b6:ff:13:14:93:e3:70:66:46:bd:d0:5c:e7:61:cc:
f0:e0:dd:76:86:fb:34:a9:39:f2:ae:d3:4d:e1:58:
88:cd:33:cc:7b:67:f7:3b:03:b9:5d:a9:bc:60:99:
45:68:26:e5:8b:4d:4c:6b:2e:45:73:04:ac:8f:de:
ed:1d:c4:6e:bd:89:21:17:73:0f:10:19:60:11:b7:
b2:dd:e1:54:53:f0:c4:2a:02:4d:3b:ce:57:9a:e4:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:6B:52:39:BC:74:0F:50:A0:08:74:71:14:CC:63:06:9E:84:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrRrUjm8dA9QoAh0cRTMYwaehLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:7b:8b:a1:e3:35:5f:04:d0:44:8f:e1:2c:f7:38:81:9a:77:
25:05:7b:c9:83:4d:48:8c:6e:97:d4:d8:40:04:46:58:37:0b:
75:aa:22:08:3d:b6:0e:96:85:fd:fd:04:d4:eb:d6:68:a0:45:
9e:c3:fa:68:08:6e:fd:2c:4f:2f:0a:9a:c3:b2:43:99:be:bb:
8f:e4:6f:f6:42:60:88:33:a2:a2:f6:41:6b:0b:e3:80:2d:60:
36:f7:dc:26:fa:27:f3:c4:45:63:af:ee:c2:59:e1:8e:43:0b:
d3:01:df:19:a3:bc:34:19:ba:ec:74:e7:78:b9:d9:a4:32:cd:
74:d2:49:56:1e:29:f2:71:39:20:63:5e:63:59:f8:aa:7f:61:
51:d3:d9:cb:59:3a:9f:4b:07:ad:c9:94:31:82:1e:3b:c9:e3:
ed:a8:50:ea:91:3e:55:7a:17:3c:52:94:e5:3b:be:f9:5b:8b:
95:96:03:82:a7:ac:17:07:a1:1f:3c:f3:f8:43:90:97:86:e3:
3a:64:73:1b:4b:09:4b:08:32:e1:21:69:d9:9e:c3:62:84:7f:
b1:55:90:e3:c5:0a:09:c0:6f:c4:4b:a6:2c:13:59:4b:5f:52:
a2:4d:b0:a6:be:77:3a:f1:81:0f:6e:53:98:be:6b:d7:8c:36:
7a:02:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:43:49 2025 by rpki-client