Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAEZPYz0fVuS5G0gRl_4AkFa-0I.roa
File: MAEZPYz0fVuS5G0gRl_4AkFa-0I.roa (raw, json)
Hash identifier: CmpGiAW3UiX0v9SnK2hczaNC+tVmg7PfYFQKiT/D7rI=
Subject key identifier: 30:01:19:3D:8C:F4:7D:5B:92:E4:6D:20:46:5F:F8:02:41:5A:FB:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F9C1B781F9E8646566FFC9D24A28A07A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAEZPYz0fVuS5G0gRl_4AkFa-0I.roa
Signing time: Sun 19 Mar 2023 12:04:27 +0000
ROA not before: Sun 19 Mar 2023 12:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:f9c1:9e4e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f9:c1:b7:81:f9:e8:64:65:66:ff:c9:d2:4a:28:a0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 12:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3001193d8cf47d5b92e46d20465ff802415afb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:bb:bb:36:d8:d6:48:5f:1d:47:5a:ff:b9:
14:49:06:e5:ee:b6:48:7d:5d:84:ff:27:51:38:fa:
3b:60:17:08:8e:84:a6:d0:cb:17:47:79:8c:6d:9f:
fe:f3:68:e7:77:77:19:3e:b8:90:10:df:55:f6:60:
4f:f7:de:31:bf:4f:d7:e1:d6:d0:a7:04:86:52:b0:
ab:e7:3e:d0:23:62:d2:7f:8d:1a:0f:0e:59:9a:86:
b3:d0:04:32:45:30:fd:5a:b1:dd:aa:af:db:41:69:
dd:e1:eb:c4:8b:03:2d:4e:b3:f1:1a:46:83:66:2d:
c5:fe:9d:b0:c8:89:b7:7f:94:41:88:be:7d:5d:f7:
cc:61:a9:4f:75:5b:43:b1:ca:17:9c:7d:25:60:42:
8b:73:1d:40:82:2a:69:83:d9:c5:5a:33:01:04:ca:
f5:f0:f0:56:2d:26:b0:9b:4c:7d:13:23:1d:34:fb:
83:eb:e5:47:49:17:e8:e9:10:e7:6f:35:6f:e8:26:
a3:fd:b7:6f:d6:7f:fd:ba:c1:8c:7c:e2:c2:24:43:
bc:fc:0d:8d:d7:5d:c7:81:d2:59:a7:ea:e8:90:e3:
0a:2c:60:33:1a:62:0f:90:9a:52:2d:27:4a:30:69:
7a:a2:f2:fe:86:88:5d:94:fa:aa:79:d4:e0:cd:47:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:19:3D:8C:F4:7D:5B:92:E4:6D:20:46:5F:F8:02:41:5A:FB:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAEZPYz0fVuS5G0gRl_4AkFa-0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:2e:38:85:57:77:36:3d:66:d9:7e:bb:33:91:17:b0:98:f5:
1f:ed:13:70:7d:68:97:1e:23:2b:e7:4b:00:7a:e3:c7:dc:cb:
8e:ee:09:a9:e2:59:97:1c:7c:ca:4a:c1:53:90:26:13:f0:3f:
43:9d:a5:de:69:91:cb:e1:5f:4e:b7:8a:33:a0:7b:a1:1c:44:
ce:8d:48:2a:74:b0:0b:77:74:ea:bc:7a:5d:db:1b:78:40:73:
c7:f2:8c:bf:57:d2:db:a8:a0:6f:f7:c0:25:cc:13:ad:2c:3d:
91:46:b8:ac:e4:11:7c:1c:74:49:08:d7:4c:51:d5:2a:d4:45:
7d:ab:57:99:69:2d:e3:9d:b0:39:cb:87:1f:c7:f4:7e:6a:eb:
37:7b:b3:08:84:c7:5f:cc:77:94:16:d1:2c:6e:01:03:f3:e9:
95:5b:e1:5c:74:c0:15:e8:3d:17:57:9c:6d:6a:15:aa:fb:e2:
ab:3a:34:14:2f:68:71:37:43:cc:0c:f5:00:b7:3a:cc:6f:ee:
7e:c7:06:93:d6:37:b4:d0:32:dc:f3:d9:8e:11:98:8d:dd:06:
3b:0a:27:96:39:15:7d:e6:9a:ed:2c:49:55:8e:9a:c7:33:2f:
91:fd:e1:0d:d5:88:c2:8e:65:5a:7e:97:af:2d:5f:63:b3:e3:
51:d1:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:47 2025 by rpki-client