Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJJzWjweyUN1NoTz8HNcT4PWGUo.roa
File: MJJzWjweyUN1NoTz8HNcT4PWGUo.roa (raw, json)
Hash identifier: kW3dkgu1/RbPxXlebvOV1lsTPXgedOonu+s5oCb38gI=
Subject key identifier: 30:92:73:5A:3C:1E:C9:43:75:36:84:F3:F0:73:5C:4F:83:D6:19:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B550C3CE6645CB0C5073F6FEDAB32612
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJJzWjweyUN1NoTz8HNcT4PWGUo.roa
Signing time: Mon 24 Apr 2023 22:09:41 +0000
ROA not before: Mon 24 Apr 2023 22:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b5:50:c3:ce:66:45:cb:0c:50:73:f6:fe:da:b3:26:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 22:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3092735a3c1ec943753684f3f0735c4f83d6194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:7c:36:32:9c:08:75:a4:3e:63:df:ff:d2:
7e:42:98:01:76:2e:32:2d:9f:fa:c5:ff:18:92:55:
e7:2a:44:85:3d:a7:28:8d:50:8c:1b:93:5c:fe:ea:
22:c4:fd:6d:0c:ac:1f:d5:f4:ee:39:74:c3:52:a0:
e7:06:38:d9:41:37:3b:97:e5:93:ae:6d:8c:85:42:
a9:72:49:2a:c6:4f:a7:31:bb:63:ac:5e:98:08:cf:
c8:e5:a9:eb:b9:34:7c:2d:65:c0:c9:24:01:68:8e:
60:71:d8:09:99:23:c4:d2:a3:b3:d1:c6:30:d3:f8:
03:1b:a5:dc:e2:d2:5d:9d:15:20:30:3c:94:0a:99:
8b:3e:f2:59:7b:c5:e2:71:88:0f:71:75:3e:17:ce:
14:e2:7f:92:23:9a:2b:ba:95:21:d3:82:58:b0:a1:
4f:62:8a:41:b3:97:e3:b1:2c:9c:96:c5:ce:03:fa:
62:12:ad:ef:58:9b:a4:1c:b2:3f:87:4b:36:3c:0d:
ac:b8:a0:00:50:0d:dc:ff:d7:c0:17:92:ec:02:e4:
73:d8:32:a6:85:d6:bb:f8:f8:71:da:af:4e:70:7c:
d2:32:5f:2c:13:c4:98:78:19:0a:ea:05:5c:9a:51:
b9:d6:a5:82:56:4a:81:76:ee:df:a3:96:91:8d:52:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:73:5A:3C:1E:C9:43:75:36:84:F3:F0:73:5C:4F:83:D6:19:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJJzWjweyUN1NoTz8HNcT4PWGUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:73:06:9a:be:81:fd:04:d2:af:ee:d1:59:e5:06:c4:bd:43:
d1:61:3a:9a:d8:bc:11:80:ab:05:e0:c4:c8:58:65:ce:4b:c8:
10:eb:a2:7f:2f:bb:46:fa:c2:e4:69:b6:c0:9e:11:b7:c3:c9:
c2:6e:ca:c5:c4:a2:c8:2a:fa:49:02:44:f2:8c:56:cf:e7:9c:
2d:1c:fb:ba:62:84:6a:70:f1:27:58:47:9d:92:b8:81:6e:93:
b9:f8:8f:dd:14:a2:1c:45:09:c6:89:31:b7:0d:2a:e5:55:b2:
29:f9:d1:f2:44:66:5b:a9:a2:ab:bf:28:90:5e:6e:9d:32:65:
fa:b2:0e:07:95:08:2e:6e:73:56:42:b4:84:f4:f0:18:54:b2:
41:d4:a6:71:22:b3:72:55:4b:af:c9:bc:9f:4c:2a:ac:c8:9b:
ef:3e:7a:11:14:a1:79:98:ef:44:87:2c:88:96:2b:46:be:e8:
25:03:0d:4f:e7:49:fb:52:3b:cd:23:6d:6a:2e:1e:8d:d6:ab:
a4:24:60:f1:98:69:3b:1e:65:9a:8c:ce:f2:4b:34:a3:52:fb:
cd:96:7a:d5:c4:bb:69:6c:c1:c5:d1:2e:a2:9b:18:bb:89:41:
da:8a:14:d2:4e:61:9c:9e:b3:27:58:c0:72:c5:69:af:c0:31:
97:5a:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:41 2025 by rpki-client