Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mppTWmBEAly4FCrEq77KlBDyxY0.roa
File: mppTWmBEAly4FCrEq77KlBDyxY0.roa (raw, json)
Hash identifier: WmmWHfd+i9IwYq20CIYxdmZVH9I4edGUczsYhhuFBgI=
Subject key identifier: 9A:9A:53:5A:60:44:02:5C:B8:14:2A:C4:AB:BE:CA:94:10:F2:C5:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185428886D193760F47C0DC1167FD1828CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mppTWmBEAly4FCrEq77KlBDyxY0.roa
Signing time: Sat 24 Dec 2022 05:08:41 +0000
ROA not before: Sat 24 Dec 2022 05:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:42:88:86:d1:93:76:0f:47:c0:dc:11:67:fd:18:28:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 05:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a9a535a6044025cb8142ac4abbeca9410f2c58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:93:b7:3f:cd:b3:ff:0b:18:f4:d2:8c:0d:
b1:2e:f7:e0:16:ee:b2:15:9c:25:9d:5f:55:ae:f3:
a1:90:db:ee:ab:c2:a4:20:7c:cd:fd:73:7a:5e:e5:
d9:eb:3d:08:cd:6d:fa:10:fe:76:cb:c7:f3:e3:1b:
ff:7b:4a:13:8c:6c:cc:79:0c:6b:9d:42:d5:e2:86:
b6:13:62:9e:d1:52:a3:db:89:80:69:e4:0b:3c:85:
de:9f:28:49:4c:e2:06:e0:2c:d9:3a:f6:c4:0a:14:
41:d7:c8:6e:f7:c2:56:ac:34:b3:b6:da:4f:5e:69:
14:34:cd:3c:59:d9:e2:51:af:3f:b9:93:6c:a2:8e:
27:9b:1d:91:30:3c:36:8b:2a:8f:26:d3:51:bd:e5:
f5:60:e9:cd:2c:d9:97:6c:09:5c:7a:58:a0:2b:f6:
15:82:0d:e0:e9:13:38:9a:ca:a6:96:75:1a:3d:95:
77:d1:4d:46:62:32:a5:12:a3:b5:62:0d:e9:48:d0:
2d:4c:af:57:88:e5:a1:8b:8e:0d:1c:ce:53:b3:b6:
50:73:52:e9:86:5a:a1:eb:fa:8e:58:45:23:1b:ed:
31:e7:51:70:75:0a:a5:ad:d3:ad:c8:fe:c5:5b:f0:
cd:43:a8:73:34:dd:91:fd:38:53:3d:9b:07:f4:ac:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:53:5A:60:44:02:5C:B8:14:2A:C4:AB:BE:CA:94:10:F2:C5:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mppTWmBEAly4FCrEq77KlBDyxY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:f1:96:9a:79:da:69:75:2e:34:2f:72:6f:ca:7b:25:11:8d:
3e:db:db:3a:ad:9c:67:23:f9:69:6e:45:17:68:2e:2c:62:0d:
dd:44:81:d9:f2:af:dc:9a:70:bd:01:83:5f:56:2b:51:34:a9:
d6:c5:64:9c:2d:61:8f:f7:51:91:51:60:d4:c7:74:54:a2:6b:
02:07:48:81:a6:8e:6e:d4:4a:07:d9:20:72:ef:b1:71:00:a1:
1b:5c:bb:39:c8:74:92:4f:18:e0:57:a6:24:39:17:5c:ea:72:
12:90:8a:3a:e9:f9:45:73:15:c3:8b:f3:ed:aa:93:c9:f6:e9:
e1:61:ea:f0:e5:f1:f0:ee:df:2a:7a:f7:f9:cd:70:b4:19:b2:
99:5a:8e:f0:b7:99:d1:84:9d:cf:fa:56:56:35:a6:35:d9:14:
e0:dd:68:a0:cc:d7:78:3e:84:53:96:aa:64:55:74:3e:3f:f7:
1f:75:c9:ac:39:f3:1c:4b:cf:16:26:c7:4a:94:2f:9d:46:9b:
cb:15:e6:8a:c5:fb:c1:63:44:1d:c8:d6:2d:a0:6f:5a:4d:44:
11:c2:cc:75:ad:97:7a:c0:ac:32:ea:a0:30:16:a6:d6:cd:b0:
3e:c7:2d:8e:65:7a:a7:80:8a:28:66:db:0d:c1:b8:2c:15:02:
27:c5:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:45 2025 by rpki-client