Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rmMw9PGQsmATs_7sQuIGRbA8XQg.roa
File: rmMw9PGQsmATs_7sQuIGRbA8XQg.roa (raw, json)
Hash identifier: sufre75JxAKIyKlph836ePZstmqGueR853xRs//9OnY=
Subject key identifier: AE:63:30:F4:F1:90:B2:60:13:B3:FE:EC:42:E2:06:45:B0:3C:5D:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BD918D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rmMw9PGQsmATs_7sQuIGRbA8XQg.roa
Signing time: Sat 11 Jun 2022 13:08:02 +0000
ROA not before: Sat 11 Jun 2022 13:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346260696 (0x8bd918d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 13:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae6330f4f190b26013b3feec42e20645b03c5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:de:81:2e:13:96:68:17:1c:95:01:35:71:
21:0d:b4:72:77:97:6a:fb:69:ee:2e:c1:9e:2f:ae:
c2:be:9f:78:ba:ec:26:a3:79:45:a8:92:f6:c1:19:
19:61:51:47:61:c7:2c:a3:73:02:b1:3b:6f:a1:d0:
42:ed:cf:82:a6:56:56:2f:8d:8b:a8:00:84:c0:2f:
6c:16:23:84:60:db:20:37:85:fd:ed:62:fa:c6:d1:
c0:78:1e:11:e7:28:da:62:a5:be:25:a7:17:75:9a:
df:43:ac:97:39:47:32:43:51:1f:d4:cf:14:79:52:
54:4d:d7:93:7e:0c:67:d5:e0:18:58:ec:90:32:2d:
0b:bb:59:d7:37:63:59:65:e3:55:f6:78:d1:ec:6a:
12:56:3f:3f:71:79:2a:e9:b9:cc:db:0a:73:86:93:
2b:e3:d6:31:d7:1a:ac:a3:07:31:62:8e:58:eb:7d:
f2:e9:9f:a2:79:1c:f5:57:49:a2:b6:84:69:80:cf:
6b:9e:71:76:6c:ce:73:ec:18:0a:99:77:d6:66:ea:
14:7a:b0:70:11:8f:76:7f:77:1e:85:f1:1c:74:b9:
b2:88:dd:60:ef:3e:3d:ff:4b:65:c1:bd:5b:51:90:
5b:32:99:7e:3d:ae:78:e8:3d:23:31:d9:cc:e8:cc:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:30:F4:F1:90:B2:60:13:B3:FE:EC:42:E2:06:45:B0:3C:5D:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rmMw9PGQsmATs_7sQuIGRbA8XQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:9d:9c:a2:c3:58:15:4b:c4:ff:d4:ed:07:15:ee:be:bd:d3:
26:02:f1:63:a0:73:68:1b:3c:6c:c1:02:0f:a1:71:36:d1:47:
dc:78:ae:d2:17:e5:9d:d0:94:b8:db:dc:de:86:7d:ac:02:d0:
ad:31:16:3f:1e:11:8b:0e:cf:19:8d:95:6d:e5:05:57:22:68:
65:7d:91:88:7b:9c:12:fa:eb:0d:00:13:d9:40:1d:8b:48:ad:
26:23:5d:1b:85:bd:7f:4a:61:66:bd:88:ac:b9:d7:fa:68:59:
54:ab:5c:09:17:d4:00:8d:27:35:62:09:8e:b7:08:87:7e:b2:
54:8b:87:7b:5c:46:b5:10:72:06:ca:73:f7:7a:1c:a2:75:04:
5f:1e:80:6f:5b:85:e7:d5:a3:21:70:95:ee:d6:3e:ec:0d:58:
5a:7a:18:f3:26:e9:c4:af:d5:b7:36:63:03:fe:da:17:4d:f2:
a6:e3:3a:05:b4:9b:16:03:c7:ca:74:9e:95:2c:56:94:19:c0:
72:02:97:ad:ec:95:d8:58:fc:dd:63:ce:ea:aa:84:4e:d3:f6:
1c:0f:ec:63:c2:f2:3f:a0:c4:b6:d9:2e:aa:21:cc:f3:d5:f3:
24:d6:8e:f5:ad:57:07:f4:ed:99:79:a7:1c:f0:b7:6c:84:96:
dc:89:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:40 2025 by rpki-client