Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mknONe_91x6OJn6kuYz7YHJJBoM.roa
File: mknONe_91x6OJn6kuYz7YHJJBoM.roa (raw, json)
Hash identifier: dcDgw47+XK+mi7lZj75XX77dH8EfsIwMtkzsZc8VfkA=
Subject key identifier: 9A:49:CE:35:EF:FD:D7:1E:8E:26:7E:A4:B9:8C:FB:60:72:49:06:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C83364AAAEF87AAB574B1EABDE31F751
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mknONe_91x6OJn6kuYz7YHJJBoM.roa
Signing time: Sun 06 Aug 2023 00:15:58 +0000
ROA not before: Sun 06 Aug 2023 00:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c8:33:64:aa:ae:f8:7a:ab:57:4b:1e:ab:de:31:f7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 00:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a49ce35effdd71e8e267ea4b98cfb6072490683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:28:a8:ad:f8:a3:d6:16:21:a1:dc:95:6c:
60:4a:52:51:4f:1d:b8:3f:9e:65:64:69:bc:5a:27:
d5:bb:d4:7e:44:1e:3f:8a:7d:1f:eb:77:63:3d:86:
3f:03:ec:e9:52:35:9c:51:97:50:53:d9:76:f5:7d:
45:42:20:f2:53:8b:77:eb:5f:f0:e0:f9:10:07:9a:
d9:84:76:f7:05:35:b4:cf:f5:04:b7:15:b4:a9:22:
7a:82:56:6d:91:73:69:89:4c:ad:6e:ec:83:ae:c4:
eb:2a:25:cc:be:f9:f3:15:bb:dd:e7:8b:83:ba:fe:
56:35:3e:c0:47:ae:7d:1c:9f:00:1f:51:ff:ff:33:
2c:0f:c8:34:9f:9f:dd:20:a2:5a:9b:dd:50:f6:68:
e0:b5:a3:a2:f4:d9:82:5b:8e:29:01:ed:c5:ef:14:
e4:56:a7:ef:09:39:a1:97:40:07:8c:a9:e5:0b:0b:
35:ba:48:d3:6f:ac:df:49:a6:6e:4b:e5:78:ea:c9:
29:73:07:fc:9d:b0:2a:9f:7a:d7:56:d2:7c:4e:66:
66:6c:e8:91:d4:16:07:47:9b:c2:79:fe:c6:5c:a7:
93:2f:b0:a0:39:f2:a6:29:7f:cc:9f:3f:1f:08:60:
5c:9c:b5:39:c2:ae:f1:43:29:52:55:ae:74:68:95:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:CE:35:EF:FD:D7:1E:8E:26:7E:A4:B9:8C:FB:60:72:49:06:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mknONe_91x6OJn6kuYz7YHJJBoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:78:26:7d:de:de:d3:e8:7e:1a:3e:cc:51:cf:37:ba:40:75:
0c:24:27:42:d1:ac:e0:82:fa:f8:40:f9:e8:83:15:4d:c2:43:
9c:47:50:0e:7a:d7:42:3c:b2:8e:bf:54:1e:52:08:39:4a:b5:
19:ff:a9:cc:10:ef:9c:d3:c4:b6:c3:0a:37:a6:54:d9:4e:18:
bf:b3:17:8f:c2:8c:c8:51:58:bb:0e:11:f6:e0:97:6f:33:98:
24:53:1b:34:6e:20:3b:c0:fa:d0:b9:16:bc:65:fb:5f:0b:14:
67:f2:28:fe:21:a7:df:ba:57:5d:bd:c9:a9:02:63:3c:5d:0f:
c5:a5:21:6a:f0:b5:04:21:c7:ff:a2:e5:cf:b1:9c:1d:7d:fb:
49:d1:26:8b:66:82:2b:bc:fd:f5:3d:dc:bf:6c:e0:2e:34:b8:
3b:4c:e0:98:c9:4f:30:a9:38:b1:e8:3f:54:d2:58:3a:1c:62:
90:57:1f:1a:84:8e:2a:47:89:71:a2:7f:33:78:67:46:b1:86:
4d:16:f6:6b:82:89:84:25:f5:59:44:fe:67:c0:f1:ae:a3:13:
cf:74:e9:48:f1:2d:06:94:b0:60:7f:15:bf:5a:77:24:9a:1c:
a7:5c:33:6a:5f:2f:8a:ff:d8:84:3a:e7:16:0d:d1:94:a0:2c:
98:38:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:15:59 2025 by rpki-client