Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mec9UzF0Yi7pyY7RogD1VpTJCkY.roa
File: mec9UzF0Yi7pyY7RogD1VpTJCkY.roa (raw, json)
Hash identifier: v8S0IcVJXbnBSRTgBtj8SodhzqcxH92ktwF7Ivqyukk=
Subject key identifier: 99:E7:3D:53:31:74:62:2E:E9:C9:8E:D1:A2:00:F5:56:94:C9:0A:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865263BB25DEDBEB50E2DC5C97454C92D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mec9UzF0Yi7pyY7RogD1VpTJCkY.roa
Signing time: Wed 15 Feb 2023 00:05:12 +0000
ROA not before: Wed 15 Feb 2023 00:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:5262:d598/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:52:63:bb:25:de:db:eb:50:e2:dc:5c:97:45:4c:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 00:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e73d533174622ee9c98ed1a200f55694c90a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:39:d5:7d:ac:fd:67:5f:6c:62:70:fe:c5:
b3:a3:4a:08:1c:90:77:4f:43:1f:c1:ec:af:e7:c9:
43:27:01:60:b7:bc:70:2a:bf:e2:ed:5e:fd:db:8e:
11:6f:ee:a8:ae:12:cd:9b:f0:9d:c9:0c:9d:6d:f6:
58:23:5a:65:fa:71:f5:e2:87:14:13:79:02:bc:99:
08:be:ba:93:50:f2:ad:12:86:93:f7:6d:aa:6e:6a:
4e:98:c0:14:c1:2b:1b:b7:62:70:ac:1c:0b:6f:86:
45:5d:80:a8:d5:81:14:54:df:4c:47:f6:21:67:8c:
32:3b:a5:d9:fa:11:71:59:b2:82:f0:ad:a7:fe:4d:
6d:fe:c8:04:20:4e:d4:97:e8:c0:7a:62:27:6d:58:
1d:72:f5:6d:cf:8b:ba:ea:b1:e4:e2:75:5b:30:dd:
5c:53:d7:a6:3a:31:85:a2:c2:79:47:cc:4f:48:e3:
8d:54:00:ce:e9:d7:4a:e3:dd:4a:05:3e:49:71:6e:
94:47:67:b2:7d:6b:3f:a6:7f:67:52:93:e3:09:6d:
de:ae:1f:65:6c:42:54:a0:07:38:74:a2:29:dd:ba:
5d:c1:74:98:6b:4d:fb:a2:ba:da:9e:8b:fb:0f:d1:
a2:7a:f2:04:fc:bd:d0:6d:ea:4b:f7:5b:1e:54:52:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:3D:53:31:74:62:2E:E9:C9:8E:D1:A2:00:F5:56:94:C9:0A:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mec9UzF0Yi7pyY7RogD1VpTJCkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:fd:7b:e8:62:7e:12:ff:5c:55:e6:47:e4:37:04:63:17:6f:
28:ab:c5:0c:75:e4:97:28:52:60:ae:3d:eb:58:73:f5:a7:73:
34:2e:87:de:46:46:20:18:fc:1e:c3:34:9e:cb:ab:cf:85:8b:
c0:ba:18:d0:ac:bf:eb:92:4e:4e:31:2e:a9:ef:3f:6e:da:9a:
33:bc:93:85:26:5c:14:e7:7f:f5:2c:27:58:55:99:5a:45:f8:
ea:23:05:eb:36:aa:9e:0b:ed:9f:ed:64:cb:e8:5e:4b:67:2e:
ce:32:fc:1d:25:76:0c:da:d1:90:96:bb:a7:f5:9c:64:6e:f4:
d3:02:81:7e:2e:f8:38:46:b3:1a:77:d8:1f:e5:33:84:71:b1:
32:e1:8e:e7:50:b9:6e:99:7e:80:04:be:b8:3d:41:5d:47:16:
48:cc:f2:ec:25:a5:78:ab:8d:60:59:cf:1e:16:e8:56:b2:de:
29:b0:88:f7:ab:42:f4:a2:93:e0:e8:5d:27:46:8a:44:fa:9a:
da:28:8e:5b:9d:20:7a:aa:ad:d2:0a:ba:20:11:ac:9c:a0:ff:
40:5b:7e:56:c0:2f:c9:80:26:eb:4d:96:f6:73:2c:9d:b7:f3:
ac:ef:5d:8a:b5:63:aa:c3:d1:44:aa:2e:49:fe:fc:e4:ee:67:
db:4d:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:51:33 2025 by rpki-client