Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvqlQ3TxCUklZFkrofTf9lft9y4.roa
File: mvqlQ3TxCUklZFkrofTf9lft9y4.roa (raw, json)
Hash identifier: 5SOzhYOw63SVK0+RRzuASBA0L7lsTt/JCXaLe2yAvIY=
Subject key identifier: 9A:FA:A5:43:74:F1:09:49:25:64:59:2B:A1:F4:DF:F6:57:ED:F7:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185074F4677C52B8DF6DEC51E618A23892D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvqlQ3TxCUklZFkrofTf9lft9y4.roa
Signing time: Mon 12 Dec 2022 17:08:33 +0000
ROA not before: Mon 12 Dec 2022 17:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:4f:46:77:c5:2b:8d:f6:de:c5:1e:61:8a:23:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 17:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9afaa54374f109492564592ba1f4dff657edf72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:9e:3f:10:ef:c2:07:77:32:c0:0a:3b:11:
d1:00:b3:49:cc:ec:14:f8:dc:6e:1a:ba:93:3b:81:
48:4f:ea:5c:5e:f9:7c:98:40:43:98:ab:18:bf:cc:
14:2b:e3:ad:87:cc:7f:37:de:7b:33:60:5d:0f:0f:
77:81:93:43:10:0a:c1:1a:2d:53:1c:7b:97:93:cc:
b3:63:7f:78:f7:b4:57:3e:45:3c:05:66:7e:58:6e:
18:0d:f4:ae:85:5d:55:8c:85:1b:e8:14:a6:18:fa:
6a:65:ec:91:29:cb:8d:18:d2:4f:dd:bf:d1:90:60:
9b:15:34:43:c0:7c:24:d9:eb:07:e1:5a:61:6b:17:
a5:33:db:df:2c:57:5d:f6:4d:e7:49:73:f6:6c:55:
21:9f:71:72:f3:43:f7:b6:76:e8:35:92:d3:2c:c4:
2a:f0:9d:4d:4d:f7:9c:42:02:32:99:88:ae:af:f2:
fb:9d:e1:dc:7e:85:ac:2c:9d:a5:81:13:52:1e:17:
19:b3:d6:67:7a:b9:cb:e6:b1:36:3c:d2:e6:0b:61:
1c:f1:52:b5:45:df:d2:70:4a:7c:af:92:f2:87:73:
d7:ad:94:a6:7c:64:87:24:33:d0:1c:ff:06:64:65:
1f:f6:66:37:5b:f1:63:24:f5:e9:8d:36:3d:0c:9b:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:A5:43:74:F1:09:49:25:64:59:2B:A1:F4:DF:F6:57:ED:F7:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvqlQ3TxCUklZFkrofTf9lft9y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:11:71:c5:11:fd:ed:b5:5d:47:63:78:a7:03:0c:65:11:35:
1b:68:73:bb:85:ec:7c:53:78:4d:76:d9:2f:e8:ea:f3:3a:53:
54:b0:f9:96:a4:54:59:33:72:d5:a2:2a:4d:5f:1b:c0:b2:ef:
82:b5:7c:27:b8:58:64:16:b8:3a:52:a4:7d:c1:76:fd:99:92:
2d:61:2e:5b:13:99:90:82:91:44:71:19:d3:4d:0c:22:41:a1:
a6:d2:ed:6f:38:53:9f:5f:65:10:2d:36:3c:dd:98:fd:b9:7d:
f0:4c:70:28:be:62:aa:b1:d7:f5:b4:a5:b9:f4:50:ef:5a:de:
8d:48:3c:9e:3b:a3:c6:1b:b1:2e:f9:57:ba:23:c6:48:c2:00:
23:b8:80:57:c9:6f:e1:3e:10:2c:47:d4:4d:e4:0b:4b:af:07:
11:1e:d0:d2:b0:27:8d:bf:ac:88:8d:05:a4:eb:92:e3:fc:07:
6a:9e:8f:b3:bf:93:79:86:14:68:a7:bc:f1:e9:1b:a7:28:3b:
86:2a:27:31:92:23:f4:d7:64:00:fa:ff:d3:7e:83:3a:2f:b2:
00:a5:c9:88:03:05:19:5a:10:58:e8:b0:05:c1:6f:1b:a6:23:
06:0c:45:e7:95:93:a0:f2:33:ca:60:27:10:48:d6:95:53:f9:
a2:46:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:21:36 2025 by rpki-client