Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmReIpKnQsk70U9QOrzHrrEo-dI.roa
File: MmReIpKnQsk70U9QOrzHrrEo-dI.roa (raw, json)
Hash identifier: 1nOhKb0SF6Gb8ISholRQiR/iaH2btOXBNGfOmaj1MtI=
Subject key identifier: 32:64:5E:22:92:A7:42:C9:3B:D1:4F:50:3A:BC:C7:AE:B1:28:F9:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018825C17C88979C659A02BC5F6D53E26069
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmReIpKnQsk70U9QOrzHrrEo-dI.roa
Signing time: Tue 16 May 2023 18:10:17 +0000
ROA not before: Tue 16 May 2023 18:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:c1:7c:88:97:9c:65:9a:02:bc:5f:6d:53:e2:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 18:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32645e2292a742c93bd14f503abcc7aeb128f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:27:c5:91:c1:f9:ee:5c:1d:4e:e5:1d:9a:
5f:3e:65:ad:3c:d5:ac:cf:bc:47:bd:bb:37:02:bb:
ed:31:27:a0:d0:d3:e1:0a:a8:a3:86:16:fb:34:ee:
4a:ba:63:73:a0:03:d3:31:04:ce:e9:b0:f1:de:85:
f9:05:b2:6f:7e:09:2c:e2:92:0d:f9:57:4c:cf:fa:
98:fa:59:36:e5:90:37:c4:81:32:41:c4:78:b8:2f:
39:9b:d8:d7:45:91:cb:c4:f9:64:8b:2d:f0:71:40:
e9:c7:74:1a:42:1d:bc:5d:55:1b:64:b0:37:99:84:
81:4f:f6:45:3f:e9:37:73:61:07:95:8c:c5:6e:d5:
ee:a1:91:32:19:c4:9c:86:25:b5:f7:2a:91:05:43:
53:8a:6a:4c:6b:2b:c7:95:f3:69:af:f4:e9:b6:2b:
49:66:26:2b:a1:7a:57:d7:7c:e0:37:99:33:9b:fe:
42:49:28:4b:29:33:a1:68:1f:32:65:53:1e:3c:04:
54:0e:71:ed:07:47:df:94:8c:0e:c1:3d:a9:b9:0a:
16:18:4e:36:ef:58:88:a6:83:c1:e1:ad:8a:72:54:
52:8d:5f:c7:5a:09:05:46:d4:bd:43:21:67:3e:ad:
ff:37:59:86:ac:9c:3c:bb:b1:a0:07:26:11:6a:45:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:5E:22:92:A7:42:C9:3B:D1:4F:50:3A:BC:C7:AE:B1:28:F9:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MmReIpKnQsk70U9QOrzHrrEo-dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:c0:f8:f8:e7:70:6f:68:0b:80:86:84:d9:ad:93:d0:78:95:
1a:bd:6b:72:9c:51:c5:5c:b0:9d:78:f1:31:77:9e:aa:2d:5f:
19:f4:65:cb:69:3c:9a:28:0f:8a:de:20:f2:68:1a:e9:c9:82:
b6:93:42:44:9c:c2:6e:a5:03:94:dc:22:ef:53:4d:6f:0c:ab:
17:6c:7a:5e:41:80:c8:05:5d:19:01:95:7c:d4:a4:10:26:0f:
f9:99:19:43:6f:57:a9:14:80:4f:ca:75:d1:74:47:61:c9:15:
5b:6c:92:f7:49:4a:4a:46:53:52:ce:4b:69:a0:2c:2b:e2:29:
93:68:18:66:2f:fd:99:dd:f8:76:d0:74:89:46:b6:7b:9f:7c:
af:4d:2c:bc:d9:df:9e:8a:9e:62:c0:0d:93:81:ba:c0:f7:c4:
bd:67:bc:5a:56:b6:ff:b1:2d:2f:ea:d0:1e:0f:82:41:dc:ed:
52:cb:b8:8c:da:06:7d:b8:d0:0a:cd:62:3d:9f:25:a9:e4:e0:
11:bf:db:16:d9:6a:a3:54:aa:3d:75:36:a2:1a:74:48:7a:f3:
ec:20:28:6c:a6:f5:3f:a9:11:40:06:89:4c:6f:be:70:78:ff:
86:30:e7:b3:ee:f3:50:cc:2f:64:dc:ac:77:7a:c5:0e:3b:7f:
07:a6:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:46 2025 by rpki-client