Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGWnu-iNh8bDN87wN_5SFUUcrYY.roa
File: MGWnu-iNh8bDN87wN_5SFUUcrYY.roa (raw, json)
Hash identifier: IjTmjqwPKA6h2UApfj0QR2hHDLvGmF2zSuxHzUZgero=
Subject key identifier: 30:65:A7:BB:E8:8D:87:C6:C3:37:CE:F0:37:FE:52:15:45:1C:AD:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01833170F6580F7FF637ECB88299AE99E5E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGWnu-iNh8bDN87wN_5SFUUcrYY.roa
Signing time: Mon 12 Sep 2022 11:23:50 +0000
ROA not before: Mon 12 Sep 2022 11:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:70:f6:58:0f:7f:f6:37:ec:b8:82:99:ae:99:e5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 12 11:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3065a7bbe88d87c6c337cef037fe5215451cad86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:23:d4:b3:ae:7b:92:4e:1a:ab:33:54:c7:
d8:88:b3:09:a4:af:26:f5:88:69:7f:f5:69:f6:ce:
56:45:4e:89:e1:6a:27:2a:50:2b:01:02:e1:98:d7:
df:e9:37:de:3e:cf:6f:e0:4c:a4:db:92:0d:9a:2a:
07:ee:31:ed:2d:f1:e2:9a:cd:20:04:33:e9:8e:5d:
97:7f:28:4e:a4:94:53:91:e9:ef:3e:ac:a1:76:33:
6e:ed:76:a7:79:13:ec:6b:8b:7c:45:92:9f:41:07:
d1:56:74:53:82:0f:4c:73:15:b3:ef:1f:ca:61:68:
00:b8:f6:71:81:3d:2d:e9:4c:0f:7a:09:98:23:54:
60:f0:42:bf:ea:88:c6:f3:c1:e6:65:81:c4:30:49:
f1:f7:15:28:5d:90:da:f4:fb:dd:fa:40:3e:6d:0a:
44:ab:66:76:89:64:5e:16:6b:57:3b:c9:fc:19:19:
08:5e:5b:4c:ec:63:af:f6:29:bb:36:d6:96:bd:83:
66:46:d2:07:92:4b:71:f9:e3:a7:7c:83:56:2d:44:
c2:c3:de:9f:cc:15:ad:24:56:82:1f:d6:a8:90:01:
60:59:a6:67:fe:f0:1c:33:b1:f5:63:9b:35:8a:0f:
43:4d:d6:e0:f9:45:d7:b4:54:53:fa:54:a8:4a:17:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:A7:BB:E8:8D:87:C6:C3:37:CE:F0:37:FE:52:15:45:1C:AD:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGWnu-iNh8bDN87wN_5SFUUcrYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:22:69:f5:9c:5b:7a:cc:cd:26:22:36:68:39:a3:7b:0e:91:
4e:96:5a:8b:4b:db:14:87:b9:15:4a:40:24:31:2e:f5:15:56:
57:38:3c:94:bf:7a:97:b4:40:0f:75:fa:10:dc:a5:e3:bd:4c:
5b:cf:14:01:10:5a:6c:a2:17:c6:ae:23:a5:07:e5:3d:04:0a:
5e:26:c8:e3:6c:5c:de:ad:37:cd:ca:72:79:9f:f7:9f:f1:13:
0b:3b:fa:78:3d:43:ee:43:e0:41:7f:91:63:22:e4:fa:a4:93:
d6:23:4e:a8:1d:49:9f:2f:80:d9:8c:a3:14:0d:e4:aa:c9:02:
96:42:3a:7e:bb:79:ed:2a:c0:49:b2:50:9f:9c:29:a1:14:e1:
06:79:f2:0d:80:c7:02:00:4f:f7:4d:b3:87:81:97:53:b8:ad:
82:4b:8d:7c:81:37:1e:ae:85:5a:4b:96:f3:5d:0d:a7:d2:39:
73:2e:c6:57:c7:e5:5b:c8:a7:f8:eb:6a:b3:e2:00:b4:57:d7:
ca:bb:f1:68:80:fa:e2:1d:16:87:1e:64:f1:10:0d:af:99:8e:
78:50:25:0c:4d:db:be:a1:8a:5f:00:81:cc:c8:3c:7b:5c:f8:
54:80:78:48:d7:71:06:38:05:e1:40:94:e5:b4:d5:e0:17:b6:
37:44:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:57 2025 by rpki-client