Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mukc6ehXawQ4SNtscIbGmdU-pww.roa
File: mukc6ehXawQ4SNtscIbGmdU-pww.roa (raw, json)
Hash identifier: Zq2lE3Be9EEFGutH3+sX2Vebi38GIESiVEY1nkgFwRg=
Subject key identifier: 9A:E9:1C:E9:E8:57:6B:04:38:48:DB:6C:70:86:C6:99:D5:3E:A7:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67811581
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mukc6ehXawQ4SNtscIbGmdU-pww.roa
Signing time: Thu 03 Feb 2022 12:09:36 +0000
ROA not before: Thu 03 Feb 2022 12:09:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736512897 (0x67811581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 12:09:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ae91ce9e8576b043848db6c7086c699d53ea70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:51:c6:f8:be:ed:ed:0e:76:9e:4a:f1:28:
90:cf:87:16:2f:c2:61:d6:79:47:0c:06:eb:a8:a3:
a3:7a:2d:38:31:2c:3a:78:0c:bb:19:09:cf:bf:ca:
bb:36:06:23:f5:d2:2c:69:41:c7:cd:ca:e4:61:74:
57:84:10:7b:72:01:38:f9:00:82:c2:1f:d8:7e:5f:
de:61:9f:f5:ec:64:1e:f7:81:ca:aa:ab:b9:94:01:
f6:2f:bf:a8:d3:91:7f:5a:d3:3d:ad:d9:cc:c3:bd:
ed:69:ed:c6:f7:11:cd:3d:16:e8:07:e2:00:88:8e:
38:25:07:7c:3b:c1:0b:c0:4b:ac:20:3f:67:91:ca:
45:3f:66:a6:0a:0a:72:f6:c4:ad:75:1f:5e:b9:d2:
6a:fa:8b:df:91:03:1e:4a:72:99:1c:17:4d:f9:2f:
be:1a:75:4d:2d:f5:81:02:e1:59:67:6e:7c:31:3e:
85:1b:49:6b:e7:2f:c7:99:88:a5:f2:79:96:d8:5d:
e6:d7:b8:26:fc:e2:33:6b:a4:91:46:91:50:b9:1a:
5d:0b:00:05:38:72:88:d2:6c:9e:90:f3:25:c2:5b:
e4:60:2f:a3:42:33:64:98:89:2f:96:78:22:a8:b9:
45:be:36:59:07:5e:74:4c:a7:d9:ea:6f:88:fc:52:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:1C:E9:E8:57:6B:04:38:48:DB:6C:70:86:C6:99:D5:3E:A7:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mukc6ehXawQ4SNtscIbGmdU-pww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:11:72:6d:6d:ee:94:67:21:c5:c4:b8:15:86:e4:fb:ce:dc:
57:57:69:04:39:e6:94:bb:50:e0:3b:27:97:a3:80:25:be:9e:
75:50:23:46:56:0b:83:ee:cc:2a:4b:95:35:78:63:5c:42:27:
b8:12:64:bd:ce:50:86:6a:93:3a:e0:af:e3:fe:c1:8c:35:69:
84:f1:d4:13:4e:1e:93:c8:21:f0:70:47:a0:ea:01:e5:6f:76:
db:f4:be:fe:11:8e:f4:03:fd:11:e6:69:f2:a9:18:e4:5c:df:
42:21:19:63:2e:b1:9f:25:6f:8c:17:12:d7:c8:9c:79:fb:d2:
79:3d:c0:ca:62:cf:92:1e:d8:3b:6f:73:e2:8a:1c:76:cc:4f:
7f:4f:f2:08:e6:c8:6e:a1:fe:d5:0b:ef:a9:01:9c:05:51:7b:
37:d7:a7:95:f8:98:50:65:94:a7:80:09:4b:a5:66:b6:28:e8:
1a:8f:35:c1:bb:9a:dc:bf:c3:fb:31:d2:eb:7e:fb:1a:a4:cb:
32:84:44:7e:9a:11:89:79:fc:0d:2b:f8:ea:78:29:20:8d:86:
b5:b5:2f:e7:ff:cc:8a:75:6c:f0:9e:95:c1:4b:09:c1:b3:f3:
0a:db:cb:37:3e:f0:ac:0c:f2:94:c0:56:27:d9:67:07:30:13:
23:2b:80:2b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZ4EVgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
MzEyMDkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWFlOTFjZTllODU3
NmIwNDM4NDhkYjZjNzA4NmM2OTlkNTNlYTcwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjPUcb4vu3tDnaeSvEokM+HFi/CYdZ5RwwG66ijo3otODEs
OngMuxkJz7/KuzYGI/XSLGlBx83K5GF0V4QQe3IBOPkAgsIf2H5f3mGf9exkHveB
yqqruZQB9i+/qNORf1rTPa3ZzMO97WntxvcRzT0W6AfiAIiOOCUHfDvBC8BLrCA/
Z5HKRT9mpgoKcvbErXUfXrnSavqL35EDHkpymRwXTfkvvhp1TS31gQLhWWdufDE+
hRtJa+cvx5mIpfJ5lthd5te4JvziM2ukkUaRULkaXQsABThyiNJsnpDzJcJb5GAv
o0IzZJiJL5Z4Iqi5Rb42WQdedEyn2epviPxSzecCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSa6Rzp6FdrBDhI22xwhsaZ1T6nDDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L211a2M2ZWhYYXdRNFNOdHNjSWJHbWRVLXB3dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAHEXJtbe6UZyHFxLgVhuT7ztxXV2kEOeaUu1Dg
OyeXo4Alvp51UCNGVguD7swqS5U1eGNcQie4EmS9zlCGapM64K/j/sGMNWmE8dQT
Th6TyCHwcEeg6gHlb3bb9L7+EY70A/0R5mnyqRjkXN9CIRljLrGfJW+MFxLXyJx5
+9J5PcDKYs+SHtg7b3Piihx2zE9/T/II5shuof7VC++pAZwFUXs316eV+JhQZZSn
gAlLpWa2KOgajzXBu5rcv8P7MdLrfvsapMsyhER+mhGJefwNK/jqeCkgjYa1tS/n
/8yKdWzwnpXBSwnBs/MK28s3PvCsDPKUwFYn2WcHMBMjK4Ar
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:23 2025 by rpki-client