Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MxX-QjWiuYuwJmWknO3HGgJyED4.roa
File: MxX-QjWiuYuwJmWknO3HGgJyED4.roa (raw, json)
Hash identifier: 6DieETf5jPXpeLsH6N5YaTo0CxK+o5fIFbtBUoc35bU=
Subject key identifier: 33:15:FE:42:35:A2:B9:8B:B0:26:65:A4:9C:ED:C7:1A:02:72:10:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828E1478C294FDA99377732D21558B3675
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MxX-QjWiuYuwJmWknO3HGgJyED4.roa
Signing time: Thu 11 Aug 2022 18:04:42 +0000
ROA not before: Thu 11 Aug 2022 18:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:8e14:616b/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:14:78:c2:94:fd:a9:93:77:73:2d:21:55:8b:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 18:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3315fe4235a2b98bb02665a49cedc71a0272103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:64:78:67:15:1a:c2:30:e5:07:9e:7f:c1:
61:23:63:8e:fb:28:ab:4c:85:75:27:6a:54:01:91:
95:19:3d:ea:cb:b0:e4:b2:f4:57:62:ee:12:a5:31:
eb:56:59:84:b0:b2:bd:37:a4:92:6e:6d:99:5b:51:
4c:76:58:91:b0:4c:36:7b:77:4b:5e:74:c8:e3:65:
5c:8b:e0:c9:fd:37:dc:e7:4e:1d:f8:8c:0b:e0:00:
87:50:70:23:b0:c5:3d:04:7a:04:a3:d3:7a:bf:59:
88:5f:7e:a6:d8:e4:d0:62:51:17:ff:34:63:0b:35:
79:f8:95:9d:54:da:5e:68:d8:cb:a9:54:e4:f1:24:
dc:3e:f2:e9:5c:8c:42:74:8c:1b:ab:55:1c:c3:0f:
ec:76:0a:ef:ba:7a:2a:1a:cb:84:fc:e5:e4:c0:c2:
23:a1:9b:d3:c8:20:e2:9c:e5:f4:a0:04:55:a2:8d:
5b:f5:b2:e0:40:4a:6b:e3:7b:83:f7:fd:23:7e:8d:
31:c5:9c:fa:70:e0:b8:1e:74:ae:ff:f5:e5:7e:70:
e4:62:c4:53:dc:50:b1:1f:72:a5:e2:60:65:23:3c:
ca:fe:62:91:53:8a:29:5c:e0:66:4c:a0:34:45:88:
7f:ae:6f:26:40:eb:c4:03:c5:f5:28:86:9f:06:f3:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:15:FE:42:35:A2:B9:8B:B0:26:65:A4:9C:ED:C7:1A:02:72:10:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MxX-QjWiuYuwJmWknO3HGgJyED4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:44:6e:56:03:22:b8:b6:6a:77:ae:0c:82:c5:f4:fc:52:63:
c3:31:2a:1c:61:53:0b:29:e7:ce:66:b1:ee:4f:19:63:6f:a1:
bf:31:a4:dc:76:cc:38:6e:d9:71:fb:b4:be:2a:3f:c1:b5:b3:
59:51:f1:b3:8e:ea:57:67:8f:93:2e:fb:57:e3:39:3e:6f:58:
f4:9c:c7:f5:49:df:af:34:c5:06:63:a1:b3:d5:c3:bf:5e:ba:
aa:13:ff:18:fb:54:d5:f6:64:70:00:18:32:d5:90:4d:7a:20:
14:83:85:4c:09:6c:cc:b2:58:8a:65:39:5c:5b:41:3b:11:af:
70:8f:b1:39:0a:9b:fd:b8:c9:aa:ac:e9:88:65:e4:e0:7f:86:
a4:0e:d6:16:ec:39:e3:7b:05:01:99:47:47:89:67:6a:ac:cc:
02:98:6d:16:03:ef:9a:92:2d:e4:07:b8:44:6e:de:22:b1:8d:
31:43:e4:e9:bb:a5:af:9b:c7:cb:0b:0c:b0:e6:d3:0c:66:1f:
4c:4a:b3:00:14:70:b3:db:e7:ba:42:3b:70:ae:b5:46:e3:eb:
21:17:24:4c:9d:13:ca:1b:66:5d:52:1a:3f:4e:1f:f2:25:d5:
f2:d1:26:0d:fc:6c:6e:e2:7f:a3:0d:7b:68:c0:1f:11:e4:67:
80:a3:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:21:59 2025 by rpki-client