Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFpLm094MB-1EiSadeMVUd2xuWs.roa
File: MFpLm094MB-1EiSadeMVUd2xuWs.roa (raw, json)
Hash identifier: Bbi0HyweqTT5bWHmgerOIvsW5fDPmUs5wsiUBVC7TFY=
Subject key identifier: 30:5A:4B:9B:4F:78:30:1F:B5:12:24:9A:75:E3:15:51:DD:B1:B9:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EB985F4FF66AFB27A0BF7AEBEAD66668
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFpLm094MB-1EiSadeMVUd2xuWs.roa
Signing time: Sat 12 Aug 2023 21:12:58 +0000
ROA not before: Sat 12 Aug 2023 21:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:eb:98:5f:4f:f6:6a:fb:27:a0:bf:7a:eb:ea:d6:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 21:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=305a4b9b4f78301fb512249a75e31551ddb1b96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:ad:86:9e:72:de:d1:e3:8c:a8:b0:42:5b:
d0:99:9b:ec:31:96:7e:7d:24:8f:80:8e:ba:5e:1a:
0d:8c:bf:e6:ad:5f:2b:e5:e6:6c:62:a1:49:c4:e6:
3a:31:07:51:f6:22:22:5b:5a:82:99:ce:2e:b5:7c:
a4:a6:95:8a:24:3c:43:2a:69:e3:f1:59:98:59:90:
6f:85:84:75:0e:f0:09:36:6e:7d:05:08:95:6d:46:
6b:00:a0:3a:52:91:30:68:e3:16:8c:0d:73:c5:70:
17:81:b7:53:75:5a:df:83:69:00:70:a0:7e:81:08:
aa:97:23:b9:5f:26:a7:84:68:b1:bb:29:7d:39:a2:
d3:70:d5:10:ce:73:a0:0a:d9:5a:ea:fc:8e:60:a0:
d8:0f:8f:49:2c:cf:c6:92:69:e2:80:56:00:a4:51:
c9:1d:06:40:89:e0:61:7c:6e:1c:7d:78:a4:1e:75:
91:87:6f:15:08:06:7d:e6:43:14:b0:fd:20:dc:93:
3e:52:a9:ba:1d:ba:2b:3d:de:02:19:48:2a:4a:b0:
ba:ff:ef:03:5c:df:d9:a1:40:fe:1d:8c:3d:11:3f:
b9:1c:24:41:2e:3b:2c:1f:fe:ed:d8:f3:89:c5:dc:
e9:4a:a7:c6:d5:5c:c4:c2:d7:c2:13:f8:1f:91:af:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:4B:9B:4F:78:30:1F:B5:12:24:9A:75:E3:15:51:DD:B1:B9:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MFpLm094MB-1EiSadeMVUd2xuWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:ca:e9:88:55:1a:63:68:7c:0a:47:f4:d8:e0:2c:84:a8:0f:
df:1d:7e:7d:4e:bc:94:2a:cf:00:08:37:2a:7c:1a:2b:bb:4a:
e4:19:3f:1f:2d:6b:51:3a:c2:c9:54:3c:e6:4e:36:08:59:a6:
7b:21:41:1f:a6:ff:9f:fa:73:1a:49:69:68:bb:53:85:76:39:
7a:4a:0e:8f:3b:06:04:1c:c5:6f:c0:0c:15:53:08:87:63:8b:
ae:ea:e1:55:e8:bf:30:a9:e5:34:da:0c:9a:4f:89:8a:39:48:
b0:20:c6:52:74:da:63:51:fc:f4:0a:4a:28:f0:34:c5:b7:99:
2f:50:e3:8d:59:36:7e:85:fa:d0:99:27:a7:08:f6:a0:0d:67:
df:e0:f9:ca:c7:6e:df:98:37:06:f6:ad:72:d4:f1:74:de:08:
0e:01:2b:67:0e:99:67:82:37:c5:b4:20:35:6b:ab:bf:0d:ad:
8f:a5:c1:f7:1a:4f:1a:f7:44:46:b8:45:bc:a4:80:a7:2d:81:
6b:56:9b:73:b1:dd:a6:4d:23:03:6c:6b:82:68:2b:40:e6:dd:
24:5c:18:4f:54:3e:16:a8:a6:ad:f7:2c:88:a7:34:cd:31:9c:
e5:a5:71:e1:51:0f:ad:a6:b6:50:c8:db:53:4c:0f:7a:63:ad:
6f:14:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:17 2025 by rpki-client