Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa
File: MEa_UeYyj-zQeODyGKUDbKSr73w.roa (raw, json)
Hash identifier: YOE4kR0KWQUT5XBYs2NmvsvfwnwSGa3rXPcWPgO19H4=
Subject key identifier: 30:46:BF:51:E6:32:8F:EC:D0:78:E0:F2:18:A5:03:6C:A4:AB:EF:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7058F2F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa
Signing time: Mon 07 Mar 2022 00:10:27 +0000
ROA not before: Mon 07 Mar 2022 00:10:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884877560 (0x7058f2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 00:10:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3046bf51e6328fecd078e0f218a5036ca4abef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:8d:bb:53:b8:8c:97:4c:77:9d:e7:9a:8f:
a0:c6:c5:76:94:1c:0b:e0:c9:9d:47:2e:8e:18:f2:
f5:48:46:c7:89:e4:08:23:b4:25:49:eb:ca:88:13:
44:7d:ee:78:1f:71:f6:35:6a:ce:c0:7c:42:bf:5b:
7c:47:d3:87:1d:b1:7d:be:16:b8:f7:95:ca:96:df:
68:6a:81:c3:d9:8d:ca:bb:a6:24:9e:27:8f:dc:41:
a3:10:dc:5c:de:05:68:bd:64:f6:bc:e6:52:93:63:
39:dc:dd:13:c3:fa:d7:2b:fa:8c:36:fa:cf:7a:9f:
f6:d2:7b:b5:72:08:5d:d2:92:d0:1c:57:c2:cc:1b:
76:8a:22:32:82:70:46:53:2b:10:b4:b7:2d:ee:d8:
4b:b6:09:d4:b5:52:cf:15:12:bf:85:5e:4a:aa:cc:
79:05:49:88:e7:ce:af:31:83:fb:84:4f:8b:86:ec:
b8:ce:31:41:0f:e5:59:0b:e2:5e:fe:52:fa:6b:e8:
bb:9e:96:e3:56:56:0d:a1:13:c9:4e:bf:6a:c8:fa:
a9:72:91:b6:68:63:46:f5:b3:4a:81:d4:ba:be:77:
77:f0:59:68:3d:d9:3c:b3:81:93:58:a7:9f:e2:bf:
54:7a:ae:01:38:27:41:49:82:a3:eb:58:32:b8:4c:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:BF:51:E6:32:8F:EC:D0:78:E0:F2:18:A5:03:6C:A4:AB:EF:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:91:73:86:01:cc:79:98:f8:d8:5a:8d:a8:90:21:f4:33:88:
06:7d:f6:ba:26:cb:ab:47:d3:a1:c4:22:a5:37:90:60:22:95:
cb:ae:85:99:95:d0:71:26:ce:0f:c6:d0:7e:04:f4:1d:dc:48:
b4:bf:db:6d:3e:cb:53:de:cc:ac:9f:37:14:c8:88:b4:23:db:
de:38:24:be:81:9e:4f:87:c4:62:9a:37:be:4e:0a:4f:66:2e:
72:bd:0f:b3:9b:1b:e9:06:e0:a1:3b:be:01:3a:8b:7f:b6:44:
bd:7e:24:35:31:57:7d:8b:1d:99:9c:1d:b4:48:34:13:e3:b9:
ac:53:ed:41:0f:67:bc:b8:ca:d1:5f:3c:1a:5a:63:fa:8d:a1:
26:ea:d7:4b:05:5b:e4:bc:8d:73:0e:bf:d6:f8:32:72:e6:a6:
34:ba:d7:22:c3:36:32:68:7a:0f:e7:4f:c4:31:6d:c2:ff:fe:
54:81:23:fc:1c:d3:b5:85:3e:fc:5d:cb:6f:75:16:a9:1d:9a:
ec:1e:98:06:c4:01:9a:91:3d:46:d5:0e:f2:60:fc:23:7e:c2:
d6:27:c5:c2:af:68:ec:1e:2d:d1:9e:bb:47:5b:75:f7:16:5d:
b2:68:7f:67:5f:0f:c5:0f:3b:f9:8d:50:42:b8:e2:00:6f:85:
fe:f9:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:05:11 2025 by rpki-client