Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAiQNokY9e9On7IiEi-fhnlAL6c.roa
File: MAiQNokY9e9On7IiEi-fhnlAL6c.roa (raw, json)
Hash identifier: DD574GyP7c5DEdoF8NEXfAFGB+sXf+V9P46cSonBzpQ=
Subject key identifier: 30:08:90:36:89:18:F5:EF:4E:9F:B2:22:12:2F:9F:86:79:40:2F:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868DDC3EF2DA59DC2CCE32A0933D37F6B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAiQNokY9e9On7IiEi-fhnlAL6c.roa
Signing time: Sun 26 Feb 2023 13:14:26 +0000
ROA not before: Sun 26 Feb 2023 13:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:dc:3e:f2:da:59:dc:2c:ce:32:a0:93:3d:37:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 13:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300890368918f5ef4e9fb222122f9f8679402fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:94:9b:c6:06:6b:f3:5d:d6:10:52:22:b6:
6c:69:18:67:d1:f4:3a:d9:b2:e1:ad:0a:68:90:4e:
0c:47:d0:99:b8:1e:54:ce:2b:95:81:09:c5:d2:34:
04:b9:e1:f3:51:90:7f:6a:ca:f8:4f:e3:64:d8:0e:
5b:70:43:13:70:e2:20:39:e5:dc:84:f6:6a:be:d8:
b5:6e:fd:6f:a3:fe:d3:f5:48:d9:de:73:22:b6:58:
24:db:0f:a4:64:20:a6:07:f5:10:65:f3:21:50:c1:
c6:0f:60:18:d6:f9:4f:af:77:bf:b7:6d:f2:d8:8b:
84:94:73:a3:b8:8b:6b:47:39:6e:1b:72:59:ee:d0:
6e:92:3d:75:b4:72:07:fb:52:a1:74:98:89:cc:6b:
9f:27:3b:bd:6d:39:46:2f:58:a2:28:d3:e7:b2:93:
dd:5f:47:39:47:0e:38:38:7b:e7:5b:27:16:34:17:
51:4e:a3:a8:a3:8b:a0:c7:bd:68:fc:2b:8c:39:54:
08:bd:d7:1f:00:5a:18:7e:be:a4:00:cf:45:60:9d:
3c:4a:87:5a:07:c2:33:d3:98:32:52:8d:17:e0:5e:
c0:82:e9:37:de:2b:f7:4b:65:a6:c8:db:4b:09:91:
f0:76:2e:39:ba:e6:c6:bf:6a:61:c8:d6:77:2a:ff:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:90:36:89:18:F5:EF:4E:9F:B2:22:12:2F:9F:86:79:40:2F:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MAiQNokY9e9On7IiEi-fhnlAL6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:9a:d6:c1:19:d6:f1:4a:99:84:76:df:e8:0c:a9:b6:27:15:
8d:fa:47:89:92:e5:12:1d:fc:f7:ae:32:7e:6c:d4:61:9f:be:
10:78:d5:f1:be:fa:7b:5d:4f:f9:fd:d6:92:9f:2d:33:87:9e:
03:8d:c0:32:0d:8d:54:8b:f3:8c:8a:78:3a:cf:7b:66:25:8a:
57:57:44:b4:02:ff:f8:1f:1a:f7:14:d7:f7:e6:bb:47:bb:14:
0e:a1:9c:21:cb:30:37:93:5e:67:15:f8:82:be:ac:74:38:76:
e7:b2:9c:a2:6d:e2:38:ab:89:af:37:21:76:f8:92:61:ab:06:
fb:23:e6:a1:6d:b3:d1:c7:7a:bb:d8:56:91:12:f6:b0:9f:ec:
fa:a9:5e:4e:bc:7c:41:ce:24:97:b6:ed:a3:a0:df:e6:55:4c:
e3:94:3a:62:7c:9a:b8:13:60:89:c8:6b:8e:39:d9:64:2d:fa:
2a:e9:e9:6d:60:e1:95:78:38:45:a8:ac:48:e8:8a:5f:4a:c3:
8e:4f:3b:84:4a:fa:c8:e2:0e:fa:ef:b9:fe:9f:47:b1:89:eb:
34:b6:ec:c4:80:45:20:ac:09:03:ba:b1:68:6e:0c:f5:f5:db:
96:6f:e6:8d:4c:69:0d:ab:ce:0b:9e:ee:58:d0:8b:7c:25:e0:
f5:2e:67:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaN3D7y2lncLM4yoJM9N/ayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MTMxNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDA4OTAzNjg5MThmNWVmNGU5ZmIyMjIxMjJmOWY4Njc5NDAyZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnCUm8YGa/Nd1hBSIrZsaRhn0fQ6
2bLhrQpokE4MR9CZuB5UziuVgQnF0jQEueHzUZB/asr4T+Nk2A5bcEMTcOIgOeXc
hPZqvti1bv1vo/7T9UjZ3nMitlgk2w+kZCCmB/UQZfMhUMHGD2AY1vlPr3e/t23y
2IuElHOjuItrRzluG3JZ7tBukj11tHIH+1KhdJiJzGufJzu9bTlGL1iiKNPnspPd
X0c5Rw44OHvnWycWNBdRTqOoo4ugx71o/CuMOVQIvdcfAFoYfr6kAM9FYJ08Soda
B8Iz05gyUo0X4F7Aguk33iv3S2WmyNtLCZHwdi45uubGv2phyNZ3Kv8v+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDAIkDaJGPXvTp+yIhIvn4Z5QC+nMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTUFpUU5va1k5ZTlPbjdJaUVpLWZobmxBTDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIGa1sEZ1vFKmYR23+gM
qbYnFY36R4mS5RId/PeuMn5s1GGfvhB41fG++ntdT/n91pKfLTOHngONwDINjVSL
84yKeDrPe2YlildXRLQC//gfGvcU1/fmu0e7FA6hnCHLMDeTXmcV+IK+rHQ4duey
nKJt4jiria83IXb4kmGrBvsj5qFts9HHervYVpES9rCf7PqpXk68fEHOJJe27aOg
3+ZVTOOUOmJ8mrgTYInIa4452WQt+irp6W1g4ZV4OEWorEjoil9Kw45PO4RK+sji
Dvrvuf6fR7GJ6zS27MSARSCsCQO6sWhuDPX125Zv5o1MaQ2rzgue7ljQi3wl4PUu
ZyE=
-----END CERTIFICATE-----
Generated at Thu May 1 18:23:14 2025 by rpki-client