Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mtg5DBTJYmoiug-_DTjBCiUtm4w.roa
File: mtg5DBTJYmoiug-_DTjBCiUtm4w.roa (raw, json)
Hash identifier: guemB9hK7JRyRUJK56tacmLnAgg8auMCvlUMPHVYPmY=
Subject key identifier: 9A:D8:39:0C:14:C9:62:6A:22:BA:0F:BF:0D:38:C1:0A:25:2D:9B:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AC0DB77C52AFB4861029D2A4D2E59026
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mtg5DBTJYmoiug-_DTjBCiUtm4w.roa
Signing time: Mon 31 Jul 2023 13:05:27 +0000
ROA not before: Mon 31 Jul 2023 13:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ac0c:d0e5/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:0d:b7:7c:52:af:b4:86:10:29:d2:a4:d2:e5:90:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 13:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad8390c14c9626a22ba0fbf0d38c10a252d9b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:52:82:3a:f4:4e:5d:f5:b3:28:58:a6:6a:
d2:bb:fc:db:fc:0c:a2:2c:01:f8:5e:c8:1e:1f:7c:
e3:12:d2:09:d0:83:67:94:ad:29:2e:5e:cd:9e:66:
aa:1b:f0:73:ca:a8:b9:c5:10:5c:0f:0b:14:e6:98:
3c:0f:51:e8:34:4d:3b:59:7e:c3:2a:84:d6:11:25:
91:93:4a:e7:b2:ba:f0:13:da:34:81:6d:66:f6:73:
be:e2:d9:c2:fe:1d:36:e6:38:6d:e8:ab:02:b5:0b:
33:8c:4a:cc:fd:ad:dc:c9:a9:09:c2:98:25:cf:86:
35:a5:c6:42:b6:36:45:35:d7:91:bf:86:8e:45:8d:
3a:24:0a:22:c1:59:41:b7:1e:ce:85:70:e2:eb:54:
cf:a7:08:b9:d0:20:b5:9e:61:27:9a:b9:20:d0:d6:
54:87:df:6a:f5:76:60:d7:09:6f:73:98:81:31:8e:
8c:b7:3c:f5:cb:02:c5:38:91:50:80:ba:c6:ba:cb:
2e:62:36:70:d6:25:88:d0:ca:a0:b7:ec:32:a8:bf:
64:ef:38:32:85:01:4a:04:17:ab:82:34:62:d1:ba:
ea:23:25:f2:17:ae:8d:40:21:e9:47:54:49:d5:8b:
85:30:33:a6:2e:32:13:f0:35:ed:7e:cb:de:96:ed:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:39:0C:14:C9:62:6A:22:BA:0F:BF:0D:38:C1:0A:25:2D:9B:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mtg5DBTJYmoiug-_DTjBCiUtm4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:d5:f1:0f:ca:63:00:b7:be:88:52:df:a4:70:f4:6f:7f:68:
3a:b4:ce:5d:41:4e:f1:fc:b1:e9:7e:55:9a:b0:cb:25:30:01:
3e:73:44:93:a4:10:4d:63:34:b2:1c:7d:9f:5d:1e:0e:46:14:
40:f4:46:ac:2a:4d:f8:fe:e0:85:5e:47:9c:c6:e5:02:e9:e8:
34:87:0d:4e:a4:7d:23:ce:c6:ef:9f:ef:32:eb:8a:4a:bf:39:
18:ad:b6:d3:d1:62:53:10:d5:3a:fb:d5:0c:5f:bd:28:2e:9a:
cd:fc:c0:e9:ac:64:26:0f:7a:2b:59:a9:4d:56:27:2c:55:e4:
48:7c:4a:35:71:2c:d0:bd:bc:01:ff:1a:73:2e:fa:e4:06:95:
6d:da:33:14:d2:5e:20:95:d9:28:17:ee:fb:a8:b2:8c:69:20:
2b:fd:6f:4e:fd:83:cb:43:b7:65:9d:41:d3:0f:75:1c:9c:58:
93:5f:51:3b:b0:6f:2a:d7:e9:2d:6f:ae:73:b0:16:e7:fd:d5:
34:f2:d2:78:cf:d0:7b:9f:d6:35:8a:7d:f4:26:ef:0c:04:b5:
da:a9:30:ab:c1:c2:cb:ac:5a:5c:db:5c:24:4f:f2:57:a4:fc:
bc:56:a9:f9:23:c0:45:09:49:b1:af:2e:27:86:5c:51:23:52:
bb:e7:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:13:35 2025 by rpki-client