Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_MdgdEygNp9FYH2XYJIIoI4LQQ.roa
File: u_MdgdEygNp9FYH2XYJIIoI4LQQ.roa (raw, json)
Hash identifier: R8MrxUxkMYBdGRswWtUeYne17QPCwz6l9uLPXlbjJBM=
Subject key identifier: BB:F3:1D:81:D1:32:80:DA:7D:15:81:F6:5D:82:48:22:82:38:2D:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66C2B00B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_MdgdEygNp9FYH2XYJIIoI4LQQ.roa
Signing time: Mon 31 Jan 2022 23:09:09 +0000
ROA not before: Mon 31 Jan 2022 23:09:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724035083 (0x66c2b00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 23:09:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbf31d81d13280da7d1581f65d82482282382d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:fe:bc:6b:8b:67:2e:6d:49:67:54:d4:91:
a0:24:1c:7a:b9:e0:7c:c8:ce:e6:e3:e2:c0:fa:0f:
57:2b:73:c1:9d:ce:9e:8f:c7:58:79:ed:07:67:e0:
52:17:3c:ec:f5:b3:80:2f:8a:d2:1d:88:8d:7a:1c:
a6:cc:e3:3f:aa:c0:e7:c3:c4:1f:e7:50:f7:1a:54:
7f:e0:5e:c2:8d:65:35:3b:c9:4e:8b:e6:62:a8:71:
a4:96:78:56:5a:df:fa:0e:0e:67:7e:e2:9c:92:40:
5e:2a:be:bc:8f:44:99:90:75:cb:64:44:41:4f:c6:
9c:6a:1b:49:2f:79:5b:03:cf:7b:4b:ba:09:98:42:
ff:0b:52:c3:07:75:d9:a6:93:5e:d3:50:77:20:2a:
a0:eb:08:41:77:0d:27:9e:b4:ce:2e:1d:cc:28:5d:
30:74:70:e3:f8:9d:25:74:3c:16:a7:9a:ca:1f:c0:
b9:db:83:39:44:a4:b6:a8:79:01:a4:b2:8f:d0:19:
de:ea:5c:8f:c3:d2:56:05:a8:a9:36:53:5a:79:99:
75:dd:5d:43:db:0e:ff:64:29:e4:cd:5c:e3:e9:d1:
6e:94:32:54:98:10:5f:39:d8:53:0f:3f:5c:e1:cb:
5f:d8:08:bb:df:45:f7:0b:06:8d:63:f9:2f:06:be:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:1D:81:D1:32:80:DA:7D:15:81:F6:5D:82:48:22:82:38:2D:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_MdgdEygNp9FYH2XYJIIoI4LQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1b:d0:37:bf:34:42:14:cf:85:0c:16:d9:9d:7d:6a:91:aa:
63:ac:56:27:a2:23:39:8f:00:e1:af:84:68:6b:16:4f:6a:6b:
d3:ee:f9:f4:bf:2f:6b:ac:9b:55:1b:ca:09:be:8f:08:0e:fe:
dc:47:91:4f:3a:e7:12:7f:e4:96:e3:09:06:e9:c2:f5:b6:00:
e0:c1:7f:20:26:4f:21:d7:99:44:3d:00:ce:e2:35:50:41:17:
ca:64:7f:32:90:19:79:db:6a:13:12:fc:18:28:03:31:7c:ca:
59:5b:9c:33:50:dd:80:f7:b9:fd:1e:09:14:61:79:38:7c:27:
ae:7e:45:fc:a0:71:15:93:2d:cc:0d:81:97:c3:1b:8d:d1:9e:
80:93:fa:bf:33:eb:6f:e9:30:66:cb:7f:d1:14:91:14:0a:49:
5b:00:d1:f8:0f:f1:6c:9c:83:42:79:fb:24:05:c6:8d:02:d0:
b4:64:3d:c3:ec:b7:f5:05:c9:2e:77:e6:f2:f6:b1:9f:fb:bf:
9a:e9:33:e6:bb:0f:0f:5f:70:a4:6e:f3:b0:96:d8:f1:7b:d3:
95:aa:a7:e4:70:26:22:1d:23:8f:71:16:d4:d8:bc:27:05:16:
d5:64:a2:f1:da:b1:ad:b6:d3:b1:23:e7:f5:dc:a9:bd:5f:53:
5a:b5:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:24 2025 by rpki-client