Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mWXEBogXDRGXToeiOLd8gHxVfUU.roa
File: mWXEBogXDRGXToeiOLd8gHxVfUU.roa (raw, json)
Hash identifier: y/Urazbwj/z8WaB9M1sMSGvXOowgtM0U8tRL9HaSsmc=
Subject key identifier: 99:65:C4:06:88:17:0D:11:97:4E:87:A2:38:B7:7C:80:7C:55:7D:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185499E2E84C9C017F8BFA44942054010D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mWXEBogXDRGXToeiOLd8gHxVfUU.roa
Signing time: Sun 25 Dec 2022 14:09:41 +0000
ROA not before: Sun 25 Dec 2022 14:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:49:9e:2e:84:c9:c0:17:f8:bf:a4:49:42:05:40:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 14:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9965c40688170d11974e87a238b77c807c557d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:25:47:71:2e:4b:8c:61:60:76:2c:2a:73:
54:bc:51:70:e8:49:59:67:09:62:a9:27:07:7d:d4:
41:d5:e4:fd:dc:97:0b:64:6f:44:73:42:dd:0b:1c:
ae:f3:5a:c6:fe:f0:79:49:02:80:5a:45:70:e8:33:
26:e6:5e:6e:6f:2d:9e:c6:83:77:88:02:77:c1:6b:
0a:11:1b:65:8d:3b:04:b2:91:a5:bc:0a:b8:e8:57:
1e:62:16:c7:5a:55:e5:92:ef:39:35:6d:f4:03:28:
24:41:73:73:80:56:17:06:4d:d8:9c:66:dd:eb:c3:
e7:2a:14:ae:b1:3a:ee:c6:c8:90:a3:15:59:38:f1:
e6:81:38:0a:12:3f:e4:5a:72:f7:ac:a7:c8:2e:63:
5b:fb:50:ec:f7:6c:84:90:21:ec:2f:b8:67:c2:c2:
79:c0:17:c9:96:a3:10:d7:ef:6f:4b:a7:fd:75:89:
cb:3b:97:46:c4:af:55:12:41:57:2a:46:4b:d7:e9:
b8:8e:52:54:86:99:46:27:07:55:44:29:b6:39:ac:
e3:71:e8:65:bd:ae:74:05:b9:b6:81:b0:bb:ce:95:
a7:77:00:38:3a:cf:07:d2:82:69:8c:12:46:dc:3d:
d8:00:29:ed:1b:b4:61:50:67:e2:d1:bc:2c:af:e9:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:C4:06:88:17:0D:11:97:4E:87:A2:38:B7:7C:80:7C:55:7D:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mWXEBogXDRGXToeiOLd8gHxVfUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:80:b9:ec:09:af:10:36:ac:3b:4d:da:7e:3d:c3:e1:b3:e6:
37:05:06:0f:79:1b:58:f5:a2:bd:b7:ab:7e:e3:23:48:d8:6e:
b0:a4:81:2b:a7:70:2a:41:ec:54:92:11:67:7f:3a:19:c2:7a:
05:79:46:31:00:c5:ea:38:49:2f:e7:60:73:f8:3d:3c:f5:55:
9f:9d:7a:3c:a0:8f:1a:1d:1b:51:90:21:95:e9:ca:0b:5c:3a:
aa:78:5e:5e:b9:7a:12:ee:2b:d5:f4:00:e6:73:2a:8b:ae:bd:
91:5e:e7:ae:f3:7a:5b:dc:46:d8:6a:d3:ee:05:b0:b7:33:58:
89:4a:3a:fe:e1:71:87:ee:8a:4d:a3:c4:2d:29:49:b3:4e:1b:
96:7d:85:9f:ad:21:af:17:8a:cd:cd:4c:87:db:22:12:6e:9a:
46:9e:d1:6a:bc:45:2d:a7:bc:10:39:2d:5d:96:a9:28:8b:57:
97:54:c4:d1:bf:f3:85:1a:db:93:99:54:85:e7:ea:4d:e4:a0:
c1:87:fd:6d:19:19:1e:39:12:84:6c:a5:b2:a4:37:2a:46:33:
ea:5c:6b:ed:e5:de:31:6a:fe:03:53:c7:1d:3a:35:33:64:53:
c2:e9:2c:5f:67:8e:5c:12:e0:ac:a9:7a:38:84:10:4f:9c:1a:
c6:0d:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:01 2025 by rpki-client