Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mFdUfGFiXr8ubXDl8nQcQGfNk6E.roa
File: mFdUfGFiXr8ubXDl8nQcQGfNk6E.roa (raw, json)
Hash identifier: LbOImTP/3Eov7VwkNvgopYtLKF9tRPZj55fRZmM9m6c=
Subject key identifier: 98:57:54:7C:61:62:5E:BF:2E:6D:70:E5:F2:74:1C:40:67:CD:93:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83D235EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mFdUfGFiXr8ubXDl8nQcQGfNk6E.roa
Signing time: Sat 14 May 2022 01:08:41 +0000
ROA not before: Sat 14 May 2022 01:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211591658 (0x83d235ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 01:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9857547c61625ebf2e6d70e5f2741c4067cd93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:09:2d:68:6c:89:3b:da:3a:9e:e2:cc:53:
fb:fd:4a:56:35:f5:b0:fb:dc:fe:cd:e9:7c:4a:f3:
0a:c5:b2:b9:4d:66:e4:eb:0b:1c:4e:c5:9a:b4:5c:
ee:e4:01:b6:20:62:88:09:b7:89:fb:02:93:fc:f9:
e9:8f:87:a8:19:78:74:8f:5e:5b:d6:d1:ca:a9:7e:
5b:69:1b:97:f4:3b:e9:77:50:35:e9:fc:92:c8:1e:
fc:b3:85:2f:fe:98:14:ca:ce:99:64:1d:67:e3:13:
cd:72:d2:5c:a0:5e:65:81:df:44:b0:96:54:66:7d:
7e:7c:ba:b0:bd:2f:79:49:59:65:7a:41:7b:6f:1c:
e8:6e:e6:45:c6:82:a8:c3:a0:a5:16:f2:fe:cd:f1:
b0:e7:2e:f1:3c:0b:1f:b2:ec:4f:71:1c:c3:17:b4:
e9:ff:e2:12:8c:7f:20:ce:66:78:95:f5:18:ac:f2:
fa:0c:c4:33:1b:19:a6:13:ef:5c:66:2e:d4:81:d3:
4d:7b:8f:9e:71:96:0e:7c:8b:c7:1a:8f:ff:91:f4:
f9:29:be:1b:ce:d4:e0:84:17:9d:36:02:29:b7:c2:
7a:7c:5d:68:38:63:4b:0b:95:a6:b9:28:61:20:31:
d4:db:5c:c4:c0:57:56:ef:39:66:bd:4e:86:a2:d3:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:54:7C:61:62:5E:BF:2E:6D:70:E5:F2:74:1C:40:67:CD:93:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mFdUfGFiXr8ubXDl8nQcQGfNk6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:2c:22:68:5f:21:04:e3:25:f0:27:5d:4a:fd:95:73:f4:93:
6b:ac:75:f2:8a:f4:a8:36:b8:fb:15:b4:8e:83:eb:98:72:68:
13:0f:18:cb:d0:f7:80:18:b6:7d:ea:07:7e:a3:33:4e:0b:88:
2a:c4:cb:01:5c:63:40:f9:8d:67:6d:b6:e9:59:cf:fd:87:92:
88:13:16:35:cf:42:7f:9d:c3:cc:1b:72:77:6f:a6:17:4e:fc:
74:df:87:7b:08:62:72:f7:81:d0:94:8c:ec:d7:b0:9a:24:a0:
ba:58:68:88:3d:56:53:f0:6b:e1:9e:f8:05:e7:d7:7f:01:39:
58:d9:de:7f:84:20:a9:33:17:c5:ff:11:64:dd:19:44:63:17:
fb:b0:99:63:f8:15:4d:75:14:74:40:73:25:76:a2:e9:dd:b9:
88:0e:72:8c:5b:06:38:13:8d:5e:05:13:f2:a5:2d:7f:3d:17:
79:40:fe:cb:fd:47:ef:94:1b:83:83:b4:86:5b:bf:cc:06:19:
2d:79:00:af:a8:df:23:05:3a:ae:d3:84:8f:3b:49:39:1c:52:
9e:55:98:3f:14:8c:79:b6:52:f4:ff:6e:19:12:09:18:7d:7a:
20:ac:ee:cb:d9:f9:57:24:65:7a:c6:d2:47:76:9b:65:94:04:
2e:e2:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:25:40 2025 by rpki-client