Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPPOu6iUaitg7NvvuzrOtXBF5H0.roa
File: mPPOu6iUaitg7NvvuzrOtXBF5H0.roa (raw, json)
Hash identifier: a3eblQTaLIegQinmfa1hM0dw4h9Yqp16RlIdy4cJVQc=
Subject key identifier: 98:F3:CE:BB:A8:94:6A:2B:60:EC:DB:EF:BB:3A:CE:B5:70:45:E4:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F70A82674BD4B626924FC2FBC6A6ADC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPPOu6iUaitg7NvvuzrOtXBF5H0.roa
Signing time: Wed 13 Jul 2022 10:11:09 +0000
ROA not before: Wed 13 Jul 2022 10:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:0a:82:67:4b:d4:b6:26:92:4f:c2:fb:c6:a6:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 10:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f3cebba8946a2b60ecdbefbb3aceb57045e47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:3b:81:6b:ff:5b:a2:3c:f3:2e:28:82:20:
f2:9d:b9:cf:88:f2:33:0a:f8:fa:8a:85:56:1b:d2:
21:5c:eb:8e:91:6a:e0:80:b9:54:32:34:85:5b:88:
f3:e7:e2:81:32:d5:0e:fd:7a:06:4d:6f:a7:ea:fa:
14:c2:cc:1d:cf:7a:c0:4c:4b:38:ce:5f:7e:db:4b:
08:02:cf:42:9b:8f:4c:2b:69:b8:c1:0e:84:42:7a:
1e:c9:fb:59:0c:98:1e:78:7d:de:58:74:1b:10:4a:
f1:98:6a:a3:96:23:77:79:b0:ca:43:a6:b7:41:6b:
6f:44:80:8d:4b:b9:ec:67:08:2a:7f:1e:a7:b3:61:
b7:72:8a:fe:68:63:50:ae:10:ca:ea:60:3c:9e:2a:
c0:4b:62:7e:76:98:ff:b4:f0:54:9a:3d:0b:db:29:
32:ca:d6:53:e6:2b:72:b7:83:da:b5:e1:d5:64:57:
bc:12:3d:34:0f:7b:2b:e8:fc:48:22:7b:0c:56:5c:
a5:8d:43:4a:5c:b1:66:11:db:26:28:20:d7:5e:ab:
cc:ae:01:65:ff:c7:c9:75:16:75:98:5e:4a:8d:01:
7e:3c:06:29:d7:8c:68:7d:01:ba:92:e4:7e:d5:ca:
c4:a9:39:26:a5:b8:2f:10:35:85:c3:b7:4d:13:a3:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:CE:BB:A8:94:6A:2B:60:EC:DB:EF:BB:3A:CE:B5:70:45:E4:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPPOu6iUaitg7NvvuzrOtXBF5H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:0f:bc:9d:c5:0a:2d:bd:ef:75:d6:eb:9a:ec:52:3e:51:84:
68:83:a4:c6:b2:b6:5d:68:df:92:c2:9e:0c:3a:91:21:eb:95:
b8:e4:1e:c9:99:79:92:49:89:55:4c:3e:a4:f7:7e:cd:52:9a:
ff:64:21:13:cc:be:11:07:75:15:01:5c:c6:33:0d:84:5f:76:
cb:49:8e:e9:36:9c:67:c1:97:05:d9:0d:f9:46:98:ea:ef:13:
05:5b:e5:22:52:11:9f:fc:89:93:b9:2a:26:05:13:04:5d:1f:
66:67:3e:f4:69:13:23:ad:9e:e8:0a:06:5c:ef:78:12:11:cb:
c4:2c:89:68:83:1b:4f:8b:e5:56:07:6a:78:e8:a2:7b:ab:f4:
13:86:59:56:3f:d0:f0:0d:b9:de:8c:fd:3f:f5:22:95:c2:26:
19:04:9e:76:f8:aa:34:a6:d0:6d:d2:a3:70:ed:49:55:36:9b:
e5:41:ff:78:fd:33:90:29:80:01:a9:04:f8:5f:2f:e5:cc:f2:
db:a0:4d:7e:94:8e:7e:71:89:0a:81:01:92:cb:d6:8a:a7:cb:
c6:3b:58:ad:83:9e:a1:6e:d0:a2:70:fe:5f:c1:05:99:a4:68:
87:7c:25:9e:cc:70:ef:d6:84:e9:d1:b9:d6:7e:3e:4b:4b:4d:
f3:67:d6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:58:11 2025 by rpki-client