Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK5ekB6ic28ns1JbWRQNM77GzYA.roa
File: MK5ekB6ic28ns1JbWRQNM77GzYA.roa (raw, json)
Hash identifier: WXbn4yWZKFPv3maWbJXNmGzpE6uwn/tSg7gGGQxQBCg=
Subject key identifier: 30:AE:5E:90:1E:A2:73:6F:27:B3:52:5B:59:14:0D:33:BE:C6:CD:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188391172A7BF20B4DF165C912A83422326
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK5ekB6ic28ns1JbWRQNM77GzYA.roa
Signing time: Sat 20 May 2023 12:10:24 +0000
ROA not before: Sat 20 May 2023 12:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:39:11:72:a7:bf:20:b4:df:16:5c:91:2a:83:42:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 12:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30ae5e901ea2736f27b3525b59140d33bec6cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:19:7f:c9:13:aa:93:16:5e:9c:d6:6f:e6:
20:7a:96:b1:66:a9:1d:bb:63:b8:4c:b9:9a:9a:eb:
e4:ae:4b:74:81:a9:fb:9f:3f:fa:32:fc:f1:7e:32:
de:c0:93:1c:e5:4d:ab:30:de:65:e9:3a:b9:f2:51:
85:4a:fb:a8:4f:38:ec:58:a6:c5:d8:20:5c:77:e1:
be:a2:02:71:47:8d:2b:df:ff:ab:6b:70:4d:cc:07:
19:29:26:a8:dd:f3:d6:b7:90:3f:74:f9:76:5c:3d:
6e:4c:fb:dc:f2:fd:14:26:00:75:ad:c0:48:9b:94:
fc:2d:2a:f2:6d:41:63:21:df:84:24:5d:3e:c8:e6:
7b:c3:4f:31:d5:0c:39:0a:38:5f:54:0e:ee:23:32:
e9:5a:05:d5:2a:84:63:dc:60:cb:0e:98:35:fb:c9:
4a:5b:2c:37:be:f8:1c:d3:11:e0:7a:f0:e7:56:f4:
55:51:a2:45:2b:b0:ec:4b:b7:f4:f8:0b:a7:7a:e0:
c9:0f:1b:c1:34:f0:e2:92:b5:1d:80:7a:d5:85:f4:
93:f5:13:82:e6:95:a0:da:e1:63:a2:68:60:64:74:
f4:db:e3:2d:f5:87:af:8b:62:f9:67:98:3c:b7:a4:
14:b8:6a:86:60:c9:ea:56:ca:ae:4a:2a:41:f9:b6:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:5E:90:1E:A2:73:6F:27:B3:52:5B:59:14:0D:33:BE:C6:CD:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK5ekB6ic28ns1JbWRQNM77GzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:8c:45:6a:1a:f6:14:d4:c8:8f:b9:96:03:5f:c1:75:2f:15:
0a:28:66:f2:2e:3c:1b:92:ec:77:05:c2:bc:60:30:88:d3:52:
05:3f:e9:fe:77:d2:b1:9d:5c:ab:c1:dd:fa:6d:c8:5a:25:3b:
6e:6e:69:a7:fe:b5:9c:72:f5:7f:b8:c3:e3:33:95:8c:be:ef:
17:ed:7d:d6:36:51:23:f1:9f:85:7a:50:29:58:b2:e0:01:68:
8d:97:be:05:17:a4:22:58:9d:83:b7:93:32:1d:5d:95:fc:59:
6a:e9:12:c7:99:bf:a0:cc:62:e3:bb:4d:96:a4:0c:2c:19:6a:
fa:e9:31:0e:c5:98:fa:1e:55:ce:5d:cf:d4:5a:3b:a5:c5:20:
b1:2d:5f:e8:dd:42:00:04:38:98:06:e0:74:ed:fa:e7:29:b6:
22:68:01:47:12:d4:ed:54:cc:eb:d9:bb:53:0f:e0:39:a4:b3:
0f:fc:bc:82:ad:b4:bd:b2:f3:2c:71:e4:8e:ec:54:50:d3:47:
c8:cb:cf:6e:b0:84:3d:c8:6d:7e:e1:f5:c3:83:07:55:ac:5e:
a9:74:17:10:15:46:62:ff:ae:fa:26:07:96:ae:bc:af:09:8b:
0e:ba:1c:9f:cd:99:ce:e5:3b:ce:5f:af:f8:65:33:a7:38:81:
83:28:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:42:33 2025 by rpki-client