Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDMwHjVVcMwP5PBPH37ZPUJ9wOY.roa
File: mDMwHjVVcMwP5PBPH37ZPUJ9wOY.roa (raw, json)
Hash identifier: A4Rf5wKq7QZDx90kIVAK+66UrU+GFkTudAvXZoSbuTs=
Subject key identifier: 98:33:30:1E:35:55:70:CC:0F:E4:F0:4F:1F:7E:D9:3D:42:7D:C0:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E4C0B800E8FDF576C970AAC33C01636A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDMwHjVVcMwP5PBPH37ZPUJ9wOY.roa
Signing time: Tue 24 Jan 2023 17:08:33 +0000
ROA not before: Tue 24 Jan 2023 17:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:c0:b8:00:e8:fd:f5:76:c9:70:aa:c3:3c:01:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 17:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9833301e355570cc0fe4f04f1f7ed93d427dc0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:01:d2:6b:ce:21:2b:a1:d7:e6:af:79:8b:
59:6f:5e:92:f9:bd:3a:99:65:28:3a:62:df:0e:ad:
d3:fa:15:84:8f:74:ae:8c:1d:ab:81:86:4c:d1:ce:
6f:09:26:ba:52:a9:ef:db:f8:af:5c:ba:7c:ba:af:
77:28:dd:75:95:05:7f:32:56:50:b5:00:5c:8d:d2:
e1:33:85:b0:48:62:42:95:03:16:42:17:f1:f8:a1:
91:2a:4c:65:d9:1d:59:54:1f:4c:d7:14:76:2f:be:
f8:8d:d8:cc:08:d7:38:ed:52:62:de:65:88:f2:10:
b1:70:1d:28:a9:77:c3:84:f8:0d:a8:ac:b0:9a:80:
18:b1:73:7a:ae:63:42:ba:ed:42:70:da:16:fa:31:
96:54:d6:b1:ff:39:d7:f2:9e:83:38:4b:c2:26:01:
5a:43:97:9a:c7:10:b7:cc:79:d4:6e:97:4b:17:78:
04:88:73:20:a2:e2:73:b0:05:79:3f:ad:5d:de:a6:
a8:9a:44:8c:30:6d:0e:7e:d5:04:ed:ac:f9:8f:87:
28:12:44:c3:5b:a3:5b:5c:ee:4a:d2:26:43:a6:67:
5a:5b:f6:ae:74:12:99:8b:32:b7:b1:6f:f7:b4:94:
89:d4:78:4e:ca:35:ac:62:7e:dc:64:8e:b4:5c:c4:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:30:1E:35:55:70:CC:0F:E4:F0:4F:1F:7E:D9:3D:42:7D:C0:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mDMwHjVVcMwP5PBPH37ZPUJ9wOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:a6:2a:1a:1d:af:f3:cb:8e:f6:3e:b6:a4:13:aa:32:1f:e8:
37:f4:46:4f:34:29:2c:43:d1:3e:d9:aa:ab:30:53:4c:56:51:
47:78:ff:7b:2e:2a:cf:f2:62:ee:a5:f8:e1:3e:68:14:54:52:
7e:85:db:07:b2:d0:5b:79:88:ee:97:e9:19:90:27:69:26:d8:
64:ea:47:f5:88:a5:98:25:e4:5f:64:ca:55:6f:54:e6:32:81:
ab:aa:1c:bb:a7:06:e9:65:ec:91:fe:c1:b1:8a:0b:4f:d8:27:
25:b6:fa:f4:c3:f8:83:07:fe:db:68:d0:4f:09:ca:f5:fc:f0:
ba:c2:c2:ef:24:04:79:7f:83:3d:8c:8d:f5:da:94:22:9e:36:
6e:94:26:23:22:e1:76:90:31:40:01:23:87:bd:1e:c7:cc:f1:
62:ee:ab:08:4b:52:d2:c5:80:a4:b0:30:6a:47:7d:4a:eb:60:
68:69:e8:09:31:c1:b6:b4:5b:57:aa:4a:3b:5d:f2:98:94:df:
f6:7a:f5:ac:1c:c3:92:27:2a:af:cd:97:05:54:72:95:f9:bf:
65:34:8f:49:ec:ef:3b:aa:ea:c7:7a:22:1c:db:07:60:ca:3f:
2e:6c:31:ec:45:f4:48:d2:1c:dd:9a:5c:85:0a:ff:78:5f:b8:
23:b4:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:35 2025 by rpki-client