Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mr9ejs-o94ZbJzRbguTp3lbSlkM.roa
File: Mr9ejs-o94ZbJzRbguTp3lbSlkM.roa (raw, json)
Hash identifier: JVTNKCnZ/4FWO2c2GjgPKALEC3Hoc08e/0dm3XmByzg=
Subject key identifier: 32:BF:5E:8E:CF:A8:F7:86:5B:27:34:5B:82:E4:E9:DE:56:D2:96:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A83586F4F84F224434BD6486B706CFF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mr9ejs-o94ZbJzRbguTp3lbSlkM.roa
Signing time: Sun 30 Jul 2023 19:10:27 +0000
ROA not before: Sun 30 Jul 2023 19:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:35:86:f4:f8:4f:22:44:34:bd:64:86:b7:06:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 19:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32bf5e8ecfa8f7865b27345b82e4e9de56d29643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:70:de:29:e4:2b:3e:a0:96:e4:9e:c3:c9:
91:a4:4e:02:58:1a:c1:1c:79:76:c8:d8:d8:45:b8:
9e:79:8a:87:d9:21:dd:7b:62:90:2e:e1:d7:13:b6:
99:49:45:52:8b:6f:88:ea:22:bc:7a:3f:ae:1a:b2:
ac:68:ca:d6:ba:77:e4:c6:6b:71:a7:c7:fa:1a:2f:
77:f5:de:46:ef:c1:8c:a8:89:00:8f:53:1e:35:60:
65:45:8b:5b:05:c6:8c:58:ea:99:f0:66:97:99:c6:
f6:81:2a:6b:de:a9:79:ac:4b:be:2c:b9:d3:82:ce:
e7:29:6e:7c:df:79:f3:fd:a3:dd:71:90:f1:e6:dd:
04:df:5f:df:5d:4b:23:aa:0e:80:36:72:47:de:77:
8e:ab:38:94:5e:5e:37:eb:20:75:3d:a2:58:bf:14:
f1:ae:f3:77:9c:99:f1:9c:47:ed:46:e6:3a:da:2a:
3e:2a:f7:87:57:78:59:75:f2:86:ff:da:ed:29:5c:
40:80:ad:ad:fb:b6:07:f0:a4:f4:8f:3e:85:f3:33:
54:fe:fd:b7:b0:ba:d5:04:21:2f:51:38:cd:63:6d:
c0:3d:4b:20:0b:8f:c7:06:01:fc:43:93:d9:58:0e:
f4:39:b3:70:57:ae:4e:28:53:09:9e:31:f5:06:74:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:5E:8E:CF:A8:F7:86:5B:27:34:5B:82:E4:E9:DE:56:D2:96:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mr9ejs-o94ZbJzRbguTp3lbSlkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c7:6f:11:7e:25:6c:09:da:d0:57:79:f0:53:81:14:32:13:
e6:46:e5:4f:1d:bb:75:08:09:ef:24:f9:df:ca:0a:6f:91:ae:
ce:8e:a1:5b:65:8e:cc:1f:1b:55:cb:95:d3:bb:47:0f:f9:47:
48:eb:97:ef:25:b6:8a:bd:53:6e:60:19:93:51:c6:c4:6a:e2:
28:8a:26:c7:50:75:79:64:ef:29:22:2e:7f:83:d0:e6:3f:89:
1e:84:8a:e4:e0:11:10:f2:3e:ca:5f:27:2c:b3:e2:e8:17:65:
40:0b:50:40:90:d0:88:9c:20:f5:2a:6c:0a:4f:d2:a1:57:e7:
a4:da:72:0f:87:99:20:5e:19:d3:fa:28:f5:29:1f:b7:20:29:
1d:4b:9b:ac:66:ec:99:83:5a:3e:be:70:e6:0e:e9:e1:3b:b0:
89:bc:1e:37:46:1f:90:15:fe:39:70:3e:95:b2:de:29:61:3e:
56:e6:0b:b2:64:5b:bf:43:44:df:a9:34:e1:e1:6a:2c:b1:1c:
89:a4:93:2f:7d:ea:48:15:fb:b6:a1:81:b6:00:e4:e3:d5:24:
73:09:a6:4b:48:cc:c5:97:0a:64:9a:35:da:bf:1f:ca:93:ae:
df:29:25:22:c4:de:c5:79:2d:8c:dc:d9:00:bc:ea:bb:c7:75:
bd:0f:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:14 2025 by rpki-client