Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrplKSTer1Qh9ajWV_WfioQxKkY.roa
File: mrplKSTer1Qh9ajWV_WfioQxKkY.roa (raw, json)
Hash identifier: m7xHFb3PD7DldvjeyBYr1wDm4Q7kktm3pGyGCrF+9n4=
Subject key identifier: 9A:BA:65:29:24:DE:AF:54:21:F5:A8:D6:57:F5:9F:8A:84:31:2A:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864EC2BDFAD8C1398893D517120FEF737D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrplKSTer1Qh9ajWV_WfioQxKkY.roa
Signing time: Tue 14 Feb 2023 07:10:30 +0000
ROA not before: Tue 14 Feb 2023 07:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:c2:bd:fa:d8:c1:39:88:93:d5:17:12:0f:ef:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 07:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aba652924deaf5421f5a8d657f59f8a84312a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:55:9c:e2:eb:ff:83:cb:5d:53:ad:55:34:
7d:1c:4a:f7:1a:7b:b1:93:72:7b:cf:ef:80:8f:16:
49:5e:a1:b8:e0:36:34:b8:a8:7d:8d:68:bd:c3:dd:
c3:8f:0c:75:1c:e7:e6:d9:6b:36:29:46:47:d0:2d:
a5:96:0c:e1:5f:38:b0:2a:6c:7f:fa:2f:35:f2:12:
0d:16:22:03:f1:e4:02:54:d3:69:9e:9d:4b:5e:9b:
e9:71:d4:80:fa:58:91:02:29:92:9e:d3:79:d1:c8:
43:56:1e:fc:81:f6:89:e5:97:1f:37:8e:cf:a6:84:
aa:2b:92:85:ae:79:32:a1:44:fd:03:2e:72:8d:a0:
c4:31:1a:b2:b0:be:f6:93:51:86:cd:16:31:ec:c9:
b4:f2:40:59:71:92:b6:d5:8e:4e:cb:fd:8c:78:a7:
3f:6c:e4:55:84:dd:8b:f4:e0:45:c9:92:fe:97:44:
4d:7d:71:38:e8:7e:c1:8b:a5:05:9e:3c:a2:2b:75:
51:e1:f7:e0:9b:ad:63:09:dc:a0:ad:27:27:50:e5:
5f:59:d4:3a:26:f2:cf:a2:b6:4d:2e:04:13:fc:36:
27:4c:11:48:90:3c:b9:96:9a:e1:ae:cb:49:6d:8b:
0d:85:76:70:c0:a4:0c:aa:52:83:d2:0b:f5:a1:91:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:65:29:24:DE:AF:54:21:F5:A8:D6:57:F5:9F:8A:84:31:2A:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrplKSTer1Qh9ajWV_WfioQxKkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:8f:60:30:e8:37:4b:b6:ef:06:3f:8d:ba:ae:3f:21:89:74:
90:58:3b:a2:34:97:e6:8e:fd:de:92:60:be:65:04:ef:ab:c5:
5e:fa:bf:10:36:a9:02:92:82:c6:5a:9f:94:25:8a:5c:fc:a9:
86:4c:e5:50:a6:12:0c:ef:80:04:f0:a1:c0:09:4d:b1:fb:55:
57:cd:5c:94:93:23:74:8d:b5:34:1c:b2:7d:f9:3e:44:8e:f8:
df:4a:0a:a1:5f:46:48:8e:88:da:c0:1c:54:51:7d:d5:a8:ba:
5e:c6:c6:78:db:8f:01:e9:f7:fd:d3:02:ac:ba:a2:28:63:b9:
5a:6e:80:d4:7d:06:9e:2e:97:18:a2:ec:e3:94:30:c6:e0:2d:
03:26:a5:4c:4c:56:a9:8d:ce:76:18:0e:e0:f9:28:4f:42:86:
42:a8:78:f5:94:f2:21:6a:c2:3a:d0:18:e9:57:dc:ec:40:8c:
c1:91:73:d9:4c:22:40:d3:52:98:19:d0:00:d8:70:7a:94:dc:
20:1c:20:d7:74:8b:41:51:fd:e7:31:9f:8e:ea:86:8c:59:30:
a4:02:98:b9:fc:4a:5e:0b:fb:ee:10:3d:a8:2b:4e:03:45:bf:
b4:ed:13:9d:06:d9:b0:b1:89:2e:d0:b3:16:3e:77:96:35:ff:
3b:e5:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:51:41 2025 by rpki-client