Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrtJTjGskMzNRyP9wAKHBHW4BFo.roa
File: mrtJTjGskMzNRyP9wAKHBHW4BFo.roa (raw, json)
Hash identifier: 73+fKJLmZNjDj/DxKnzVw8bXBbZ3RSMC9lTtk/OcpZY=
Subject key identifier: 9A:BB:49:4E:31:AC:90:CC:CD:47:23:FD:C0:02:87:04:75:B8:04:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827F4F59F26243CD46069F1BB6D71AEBFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrtJTjGskMzNRyP9wAKHBHW4BFo.roa
Signing time: Mon 08 Aug 2022 21:14:42 +0000
ROA not before: Mon 08 Aug 2022 21:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7f:4f:59:f2:62:43:cd:46:06:9f:1b:b6:d7:1a:eb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 21:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9abb494e31ac90cccd4723fdc002870475b8045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:7d:9b:b7:c6:bc:55:ef:60:86:5e:af:0e:
c9:a9:6d:62:3d:20:b3:9b:cb:39:f5:f3:f2:3f:3c:
86:ac:91:ca:34:b6:81:ef:fd:d2:3a:ee:89:70:74:
04:a1:25:b8:7f:5e:7b:40:5c:4e:49:76:c5:b1:48:
0e:c8:72:bf:9a:46:32:ba:83:fd:3d:e8:e0:53:26:
ef:cf:50:cb:1d:91:d6:55:06:b2:7f:2d:3a:f7:d8:
bb:28:e4:6c:d0:ea:70:30:ee:a8:b7:25:0b:4a:1e:
bd:67:dd:66:a0:06:36:94:c6:af:4d:ae:9f:89:05:
a4:ea:18:23:63:d5:fd:71:71:fa:63:d8:76:7f:5c:
cb:27:24:3f:e4:72:e5:eb:dd:96:40:a6:b1:60:94:
85:81:b0:62:1f:e3:54:86:8b:94:e3:fb:39:03:ac:
8b:50:52:df:a3:6d:ed:29:10:b5:cb:40:b9:bc:50:
53:0c:07:88:25:4d:d1:b0:e3:9e:79:56:99:d4:fe:
58:98:e1:78:79:fe:7a:ad:b3:26:b9:76:c6:7c:5d:
6f:3d:8d:06:a0:56:97:fd:24:a2:1a:ed:df:83:ef:
28:e2:03:ef:d0:00:a8:a6:93:b5:da:e7:26:38:9f:
cd:0d:f6:e6:2c:5e:d6:8e:f4:98:d6:8a:e2:e0:56:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:49:4E:31:AC:90:CC:CD:47:23:FD:C0:02:87:04:75:B8:04:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mrtJTjGskMzNRyP9wAKHBHW4BFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:16:a5:bc:2b:e2:fd:cf:1b:9a:79:c3:45:47:0e:36:8b:e3:
d7:f1:5a:fd:86:f6:b7:42:cd:e4:0e:77:f2:65:13:29:94:b0:
a5:fc:dc:2f:f4:8b:67:f0:23:9d:c0:95:2f:9a:d8:a4:5d:d3:
7d:e9:97:62:21:2c:46:79:07:da:60:f3:21:f5:e9:0c:c6:f4:
6b:5b:39:78:13:dc:98:fb:71:d0:4f:67:06:b0:0c:4b:00:1e:
61:f7:5f:1b:a7:78:b5:60:24:d4:34:b0:3f:9a:98:87:f1:7e:
28:11:32:46:32:0f:7f:7b:13:fb:89:7d:a3:61:22:51:75:40:
f4:e4:4d:d3:30:0d:4d:8f:66:3c:e2:3c:11:d6:2d:9a:a1:d2:
15:91:2a:5f:75:2e:1b:23:a6:ef:52:23:73:cc:92:dd:be:f9:
2d:9a:84:97:c0:03:3a:06:53:6b:ea:d5:ff:d4:b9:d3:ef:f3:
44:d9:8e:d2:f1:17:33:f4:e5:5d:5e:ef:50:04:d9:67:8a:0a:
65:8a:93:6b:12:a3:b8:7c:36:6d:6d:c5:59:fe:88:76:5b:40:
d8:fd:5c:aa:5a:82:de:6f:9f:18:30:e9:2f:b6:97:0f:40:ec:
cd:0d:64:74:43:26:a5:18:5e:4e:53:3e:e9:4c:14:3e:8c:e6:
08:0c:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:21 2025 by rpki-client