Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dMIRecSqyYYAVytXYa7fAWDpYJ0.roa
File: dMIRecSqyYYAVytXYa7fAWDpYJ0.roa (raw, json)
Hash identifier: +Zsu1b3F9e0sbBcjlSSaKv6Snznrn6YcxRB+ZvLzDXk=
Subject key identifier: 74:C2:11:79:C4:AA:C9:86:00:57:2B:57:61:AE:DF:01:60:E9:60:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895608E7609A4926683056168803FAD5C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dMIRecSqyYYAVytXYa7fAWDpYJ0.roa
Signing time: Fri 14 Jul 2023 20:12:51 +0000
ROA not before: Fri 14 Jul 2023 20:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:08:e7:60:9a:49:26:68:30:56:16:88:03:fa:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 20:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74c21179c4aac98600572b5761aedf0160e9609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:12:c4:9e:47:24:13:94:72:7e:bf:e0:77:
87:37:2f:3a:a6:f9:5c:0a:e8:bd:8b:33:0e:6e:7b:
c7:55:d7:4a:7b:37:47:77:35:58:28:6f:6c:ce:6a:
29:f2:9d:06:9d:99:4c:f0:6b:7d:85:25:39:d8:4c:
ff:97:b8:2a:de:24:95:21:b3:f0:ba:51:2e:7d:88:
05:fc:29:68:18:2f:e1:fe:2a:85:c2:f1:5f:d7:22:
68:f0:20:c2:3a:f4:1d:2c:3b:0c:96:57:d1:b4:89:
49:69:3f:5b:d4:1c:6c:f1:8a:5d:c3:eb:06:96:ba:
56:4c:6e:50:f6:94:fd:38:b7:d2:46:9d:9b:c2:24:
41:5a:06:22:9a:1e:3f:91:3f:d0:43:e0:f2:04:ce:
e7:99:6b:4b:c9:46:0d:4f:44:5e:db:db:ab:f9:7c:
f7:e6:9c:10:5e:19:82:b9:05:72:7b:44:60:a6:71:
96:ef:0f:82:48:44:a9:1e:9b:50:b0:91:eb:6a:b6:
53:01:df:36:85:bf:6f:cf:59:6a:f0:81:2a:87:72:
9e:e1:16:cb:21:17:d1:d8:f8:e5:92:5d:77:33:41:
5e:55:cb:37:b2:29:81:9a:9c:7e:ee:50:75:ff:e1:
fb:59:61:40:ce:92:6c:da:7d:36:71:9c:a5:06:b5:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:11:79:C4:AA:C9:86:00:57:2B:57:61:AE:DF:01:60:E9:60:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dMIRecSqyYYAVytXYa7fAWDpYJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:50:9f:80:91:42:af:05:19:cd:f3:1c:92:a0:60:1d:cd:ab:
a3:26:85:b2:23:23:bd:28:25:67:4a:3a:7f:df:78:3e:78:b6:
eb:9c:ca:1f:88:2d:d6:05:db:cb:fc:ce:cc:e5:0d:1d:1a:24:
1e:e0:f5:2f:86:e7:03:e5:ac:1a:c7:e3:21:0b:af:a5:9f:dd:
59:8e:01:72:d4:88:b6:a7:6c:18:cd:92:86:8a:ea:14:0b:d2:
83:85:70:32:b9:78:95:c7:3f:bb:83:75:64:a7:80:58:b3:31:
07:6d:6a:bb:66:b5:af:b8:2a:25:44:bc:e7:73:d1:c9:f6:cf:
3f:da:71:7c:53:82:3e:32:be:53:76:80:0b:a0:8e:06:05:8f:
b9:1b:b3:e7:33:b2:4c:68:0f:cc:2f:5f:98:1e:13:f2:48:b6:
b5:7c:9c:32:5b:ab:75:70:19:cb:14:37:e5:6d:9b:e5:eb:bf:
fb:8d:73:07:ce:bd:8f:59:f3:aa:b6:b2:8e:9b:37:17:81:32:
60:b8:90:05:0c:d2:14:f9:0e:cc:7d:f5:5c:d6:61:12:8a:2e:
f8:e0:d6:96:02:3e:d5:39:0f:cf:7a:c7:47:43:45:82:de:6a:
f8:13:73:b2:21:f2:84:41:e8:d1:38:71:e6:a6:63:07:83:79:
d1:da:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:28 2025 by rpki-client