Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGDVYwxpqeB8bQHlTGyrLqkJwcg.roa
File: MGDVYwxpqeB8bQHlTGyrLqkJwcg.roa (raw, json)
Hash identifier: dj00Hk6qQ8cWF3L7+i2Xt84bMzBKJUL7upUCJFNmCwM=
Subject key identifier: 30:60:D5:63:0C:69:A9:E0:7C:6D:01:E5:4C:6C:AB:2E:A9:09:C1:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018534D422C474D4DBC9D825EA95866B9CB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGDVYwxpqeB8bQHlTGyrLqkJwcg.roa
Signing time: Wed 21 Dec 2022 13:16:35 +0000
ROA not before: Wed 21 Dec 2022 13:16:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:d4:22:c4:74:d4:db:c9:d8:25:ea:95:86:6b:9c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 13:16:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3060d5630c69a9e07c6d01e54c6cab2ea909c1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:a8:b4:f6:30:10:a5:6e:6a:66:42:36:d3:
9b:5c:65:1b:fc:7c:4c:c3:b6:f0:d6:75:cc:ae:ef:
f5:b0:9c:55:fe:e0:ce:cb:99:19:7a:fb:0e:99:c4:
d4:fb:37:3d:c2:4e:71:23:66:7c:e9:b4:06:d0:92:
75:84:b8:04:52:01:16:81:f8:51:44:55:2a:de:8c:
43:78:7a:e0:23:71:07:ba:a6:d8:6c:7b:5e:f8:7f:
47:30:5d:b8:7b:04:00:64:a7:c9:80:b8:3f:8f:0a:
84:c4:2e:a1:d4:22:31:83:6d:0b:11:d5:fb:63:cf:
c5:79:09:4c:4c:b2:fe:c4:fc:6d:2e:7d:72:cf:75:
07:f1:10:ee:94:67:47:c8:15:3f:64:ac:cf:a4:f7:
21:31:c3:11:99:44:4b:a7:3a:fa:c4:93:3d:e2:53:
ae:10:f8:ef:c6:d0:b1:44:c6:06:7d:9a:55:b2:77:
8e:2b:0e:fe:f2:0a:cf:8b:79:a5:7e:80:91:fb:03:
58:e3:ff:df:ea:ca:c3:38:37:82:5f:55:22:23:97:
85:8f:0c:ab:cf:48:a4:7e:14:d8:dc:ba:da:31:0e:
65:a9:fe:14:80:43:03:e5:c6:4f:c3:1b:e2:aa:f0:
b8:4b:c9:c9:ec:cd:78:f2:d4:ff:6e:2c:3d:06:e6:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:D5:63:0C:69:A9:E0:7C:6D:01:E5:4C:6C:AB:2E:A9:09:C1:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGDVYwxpqeB8bQHlTGyrLqkJwcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:f1:3c:94:a1:ae:68:0d:80:ac:27:65:50:a5:1e:fb:2a:f6:
c4:13:8e:b9:bf:0b:5d:44:79:dd:1e:94:f8:dd:c7:56:d0:dd:
36:c1:0f:81:31:28:89:6f:5d:5d:b2:d7:58:b7:f4:10:83:ec:
ae:84:1f:41:e0:5b:a2:da:69:c3:ee:68:90:56:3c:56:21:88:
e2:8b:62:4d:a9:aa:5b:2b:c6:a5:38:d7:20:3d:97:f3:47:f8:
58:2b:09:59:b5:4a:fb:c2:1b:06:9a:87:ad:3c:f1:f0:8f:57:
bb:bd:e1:7d:df:41:6c:21:f3:22:91:5d:29:95:2d:31:b4:99:
16:17:c6:15:5b:91:22:b6:6e:47:70:ed:46:ba:8e:fa:76:12:
cb:11:6f:f3:97:3c:e3:c2:14:a2:71:37:cf:61:36:5b:4d:a7:
f4:b2:78:67:f7:70:19:09:ce:f4:e3:00:8c:a1:eb:ce:8f:f0:
47:20:eb:d7:21:d7:7a:6a:c3:20:c1:a6:71:de:1c:c8:66:3b:
f5:a3:00:82:6c:c8:6a:98:3c:f9:43:80:f6:0b:5b:99:a1:f8:
86:1e:80:ee:09:34:d4:f1:72:ca:fd:57:f0:05:49:a5:ad:e9:
83:8b:0e:af:b8:89:f3:b6:f9:d7:9a:01:bf:93:f4:ff:00:05:
7a:4a:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:18 2025 by rpki-client