Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mt5F7RjO7bcII7pb_lyCpDHx66k.roa
File: mt5F7RjO7bcII7pb_lyCpDHx66k.roa (raw, json)
Hash identifier: 9a1AM1m2+lIZWbW2D8hi+fYx5Zt2JCAmJ/H9BHiavNw=
Subject key identifier: 9A:DE:45:ED:18:CE:ED:B7:08:23:BA:5B:FE:5C:82:A4:31:F1:EB:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C604000ADF9DD044DCCC7EE223A6C530
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mt5F7RjO7bcII7pb_lyCpDHx66k.roa
Signing time: Sat 05 Aug 2023 14:04:58 +0000
ROA not before: Sat 05 Aug 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:c603:4560/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:04:00:0a:df:9d:d0:44:dc:cc:7e:e2:23:a6:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ade45ed18ceedb70823ba5bfe5c82a431f1eba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:3f:16:dc:76:7e:f6:93:d5:0e:1b:67:7b:
19:01:85:c2:c7:51:25:bf:41:29:39:0a:be:58:51:
f3:f6:1b:ee:d3:bb:f3:75:c4:c9:36:2a:fe:f8:cc:
7e:4a:07:03:d5:28:6f:b9:40:ea:d5:3f:5e:3a:5c:
ce:03:80:c6:4f:af:97:56:1f:5c:a0:0b:17:af:7a:
f8:8f:89:b4:80:61:88:e8:54:ae:ab:8c:d6:8a:64:
e9:f4:20:49:62:7a:da:e3:50:37:9b:9c:45:47:9a:
25:ee:7e:7c:9d:dc:2f:cd:9a:29:59:b5:d8:e5:44:
1c:9b:6d:ee:fc:cf:bc:ba:43:a6:be:80:63:30:d8:
f1:22:de:29:d9:37:22:4d:51:66:2d:37:0c:37:5a:
f3:f8:9c:6e:34:83:21:bf:04:88:ae:21:8d:8c:70:
a9:ab:1b:64:21:a3:da:9f:65:2b:5b:e3:d1:ea:5a:
74:a3:8c:13:a5:f3:ba:c0:38:29:f0:2e:81:9a:3a:
df:c0:87:23:95:19:f0:6b:9b:77:24:e3:b4:d5:e3:
80:a8:d8:3b:a1:87:f9:c0:c9:63:88:94:f9:33:d1:
3a:93:cd:76:be:39:b2:0a:d1:3c:d7:a3:e4:89:bb:
26:d1:88:47:28:88:72:20:69:a0:a5:15:97:af:cf:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:45:ED:18:CE:ED:B7:08:23:BA:5B:FE:5C:82:A4:31:F1:EB:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mt5F7RjO7bcII7pb_lyCpDHx66k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:fb:d0:c0:4b:6c:a0:48:e7:6f:5c:d5:cc:0c:b3:f4:ff:45:
4a:10:c2:7b:b9:5d:1c:22:e6:cd:d1:64:3b:7c:d9:f1:ff:f5:
5f:68:57:aa:df:47:9a:b3:d2:34:a9:af:ce:88:54:f0:09:8e:
9a:ef:0f:7e:0d:77:f4:3e:b9:73:13:c3:12:d4:39:2e:e8:95:
00:9f:9c:bf:f4:4b:39:6b:bd:4f:06:f3:6e:99:e7:fd:3d:ea:
20:67:d3:78:d9:cc:e3:0c:fa:59:4f:9a:44:d9:89:8a:40:51:
ff:f5:4d:ce:47:ce:9e:e6:93:99:e5:bf:c0:1b:03:0b:01:10:
b2:e5:14:cb:89:4d:6c:e1:5f:d4:14:2a:0a:30:f6:3b:f0:2d:
7b:21:41:a9:d1:7f:bc:29:d2:9a:39:a0:f5:71:55:a2:e1:b5:
da:9f:a0:21:cb:c7:dc:bc:a1:e5:b0:70:58:ca:81:6f:6b:ad:
b2:e9:8e:d0:18:50:13:14:ce:d1:cb:9b:5d:ac:94:8d:8a:fa:
9c:20:c4:3c:d1:ef:1f:58:33:d0:6c:bc:e1:27:1d:29:9f:f5:
57:7b:21:44:49:6a:7e:85:bf:73:65:8c:db:86:dd:03:0c:46:
8b:bb:36:0b:bd:ec:82:a7:cd:f9:e8:a8:e8:1e:6e:eb:5b:a8:
a8:ca:4f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:44:53 2025 by rpki-client