Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mthOSbZXJYKd_zX6FWwmJ-_qmlo.roa
File: mthOSbZXJYKd_zX6FWwmJ-_qmlo.roa (raw, json)
Hash identifier: jKQvIP5vkh/e4/OSdE11YTxBimPN1axq/3ISBAwVD/o=
Subject key identifier: 9A:D8:4E:49:B6:57:25:82:9D:FF:35:FA:15:6C:26:27:EF:EA:9A:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E29ECE3C8ECE9679E966CCA3E9EEE73A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mthOSbZXJYKd_zX6FWwmJ-_qmlo.roa
Signing time: Mon 05 Dec 2022 14:09:28 +0000
ROA not before: Mon 05 Dec 2022 14:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:9e:ce:3c:8e:ce:96:79:e9:66:cc:a3:e9:ee:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 14:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ad84e49b65725829dff35fa156c2627efea9a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:ef:7a:08:38:4b:7a:38:13:3e:1a:e4:f5:
78:9a:c9:13:7a:d9:b0:31:8b:45:df:2d:b4:c3:25:
22:a6:ae:58:a8:08:80:66:14:55:b2:d2:d4:81:ad:
40:24:9d:01:77:81:0d:af:4c:b4:33:88:cd:5b:12:
4a:93:83:7a:ee:6f:e0:b2:1c:0b:aa:e8:6c:9e:b9:
6a:e6:e1:e4:4a:ec:c1:ce:9c:82:05:df:21:1e:1b:
2f:28:f7:6e:05:34:e7:88:b9:7c:21:e4:9c:c8:93:
2d:4f:0d:41:ba:9f:37:f4:44:bd:cb:24:9a:d3:e5:
2e:0e:d3:c6:46:ff:30:48:1b:7f:ad:99:64:24:5e:
c9:cd:38:81:2c:92:2a:6c:84:45:66:df:fc:21:7f:
a2:1f:b9:eb:ad:7f:5b:cb:bc:5d:dd:0d:e7:e4:47:
22:81:ef:4d:62:23:2d:ed:61:40:b0:a4:bd:5b:3f:
78:12:8e:08:a8:ca:05:f7:6c:91:29:90:02:55:4c:
21:ef:dd:df:10:95:a4:98:bb:01:3c:e4:38:bb:61:
14:c5:7c:4a:2a:8f:e1:3f:89:6a:81:27:b2:c9:34:
4c:75:97:59:37:fb:fb:b7:9b:81:ab:31:31:ed:fa:
de:6b:a3:cb:f1:51:9b:7f:b7:64:28:51:a4:99:59:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:4E:49:B6:57:25:82:9D:FF:35:FA:15:6C:26:27:EF:EA:9A:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mthOSbZXJYKd_zX6FWwmJ-_qmlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ab:c2:37:21:9e:61:ee:bc:59:9e:ca:7b:41:bb:3f:59:3b:
c5:45:f4:53:20:01:85:ee:f0:6e:51:91:a7:c2:75:29:cf:12:
bb:2c:5a:eb:4e:2e:ad:d3:4b:5e:0c:7f:22:dd:9d:60:22:47:
51:10:46:40:3a:d6:39:16:98:8c:1e:23:90:42:40:56:ae:23:
42:fe:b8:b5:5d:b4:a7:fc:ef:a5:e1:fd:75:9a:86:3c:a5:b6:
e8:3e:21:30:f7:bf:9c:d4:45:bc:a5:a2:dc:bd:2a:cf:80:fa:
12:a9:d7:4d:14:52:f7:ad:46:b9:90:53:dc:04:ac:3f:84:b6:
66:c7:ae:06:da:0e:49:d3:29:c9:cb:93:32:f3:bb:9f:6f:cb:
82:e0:a2:15:5e:6a:91:41:77:13:d8:e3:74:50:53:58:f3:c6:
be:1f:c6:98:20:c7:81:fb:3e:31:b8:77:a4:86:3e:72:70:21:
f2:d2:5c:ce:da:e5:c2:f5:8c:30:cb:a3:55:6d:5f:25:70:f2:
21:d6:cd:e2:ee:f9:c4:50:99:66:69:cd:0f:60:5a:7d:9c:cd:
e7:80:45:bc:5d:1e:62:de:12:f0:ec:f4:4d:9a:42:0c:f6:e9:
15:87:95:de:e4:35:8d:ae:09:eb:5e:4d:09:c7:8d:96:b2:7e:
e9:63:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:55:48 2025 by rpki-client