Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK8EizmIRsHrqOSSKb1_aUrJj9A.roa
File: MK8EizmIRsHrqOSSKb1_aUrJj9A.roa (raw, json)
Hash identifier: jX6MKUUiR0IZrunMqGFsL9Wc67runph86azPsuZThf4=
Subject key identifier: 30:AF:04:8B:39:88:46:C1:EB:A8:E4:92:29:BD:7F:69:4A:C9:8F:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018578654A1095BAE495E5FA941AF544369B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK8EizmIRsHrqOSSKb1_aUrJj9A.roa
Signing time: Tue 03 Jan 2023 16:09:42 +0000
ROA not before: Tue 03 Jan 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:65:4a:10:95:ba:e4:95:e5:fa:94:1a:f5:44:36:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30af048b398846c1eba8e49229bd7f694ac98fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:5f:1b:1f:70:4a:f7:b1:9b:c6:a8:fe:9e:
40:19:fd:ac:f1:bb:5c:2b:6e:52:5e:86:53:82:18:
e8:8b:55:f8:97:51:a7:eb:0d:ad:c8:58:39:e5:3e:
27:60:9a:30:dd:9f:4b:3e:f7:a6:42:11:5e:88:d0:
45:ad:2c:f0:43:7e:81:71:12:47:10:4b:f0:ed:8e:
40:e0:d6:54:f8:6a:b0:da:80:73:da:00:43:0b:0c:
e6:43:d0:b7:6e:d8:ed:97:54:99:cc:f3:1c:d0:3f:
95:75:ec:9e:80:4b:40:57:8a:dd:1f:a3:16:e9:ba:
d8:80:44:e8:22:ca:39:21:04:b8:d3:95:c4:9e:62:
88:ad:8e:d2:33:5d:c6:8d:ea:09:9a:cb:4f:38:e8:
7b:3b:7a:d9:53:8a:39:d9:93:28:63:b9:fe:f5:8f:
88:07:53:75:1f:26:73:eb:e3:91:4b:42:2e:7b:84:
7e:da:f2:31:6f:56:1a:94:a6:bb:09:b8:3c:95:50:
96:6c:36:c8:22:3e:a6:c6:b7:87:54:bd:0f:54:a0:
41:21:aa:da:c1:6c:c5:6a:37:d3:ef:5c:5f:9b:de:
4d:e9:d6:81:66:3a:f1:0a:3a:90:00:c8:d7:90:c9:
81:10:4a:13:59:96:ae:88:4e:b6:28:e6:4b:5c:08:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:04:8B:39:88:46:C1:EB:A8:E4:92:29:BD:7F:69:4A:C9:8F:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MK8EizmIRsHrqOSSKb1_aUrJj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:ee:de:f1:dd:a4:3c:fb:fe:d6:c4:31:a6:8e:b4:b0:fc:83:
8e:5d:a8:0a:5f:f9:bc:b2:01:53:53:84:4d:ab:ee:4a:39:fd:
69:fa:04:32:20:91:07:10:8d:51:14:e4:7a:89:b1:da:ae:8f:
8e:16:72:8e:83:5e:51:bf:8d:35:1b:ca:b4:e2:6d:c0:a3:09:
19:2c:73:60:d0:c6:a9:8c:93:1a:5a:2d:c9:8e:c3:22:5c:66:
74:80:93:51:af:80:12:90:48:97:48:f5:94:0a:b5:19:e1:a7:
3f:08:75:80:b1:b3:f1:2e:21:66:06:d7:aa:ec:b8:71:eb:46:
c3:e4:1d:22:e5:a9:a3:cf:df:f7:4d:e8:be:0d:c8:f8:67:d7:
1b:71:3c:4b:1a:cb:05:8c:e3:1e:dd:c8:9e:98:03:98:ee:40:
ad:4a:7d:e0:76:e9:40:d1:d2:ac:51:01:40:27:89:42:ad:5b:
04:0c:80:95:a5:34:62:c3:c6:5d:56:ec:db:7a:ac:69:67:75:
59:80:e7:76:7c:53:12:41:21:d5:e4:86:11:86:25:83:e4:26:
3f:fa:01:2f:a1:52:99:00:a6:26:ac:b6:f1:00:92:af:00:94:
7a:e5:f8:3a:45:44:4d:90:18:db:85:7d:26:c0:78:65:7c:74:
64:9c:ba:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV4ZUoQlbrkleX6lBr1RDabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAzMTYwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGFmMDQ4YjM5ODg0NmMxZWJhOGU0OTIyOWJkN2Y2OTRhYzk4ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn39fGx9wSvexm8ao/p5AGf2s8btc
K25SXoZTghjoi1X4l1Gn6w2tyFg55T4nYJow3Z9LPvemQhFeiNBFrSzwQ36BcRJH
EEvw7Y5A4NZU+Gqw2oBz2gBDCwzmQ9C3btjtl1SZzPMc0D+VdeyegEtAV4rdH6MW
6brYgEToIso5IQS405XEnmKIrY7SM13GjeoJmstPOOh7O3rZU4o52ZMoY7n+9Y+I
B1N1HyZz6+ORS0Iue4R+2vIxb1YalKa7Cbg8lVCWbDbIIj6mxreHVL0PVKBBIara
wWzFajfT71xfm95N6daBZjrxCjqQAMjXkMmBEEoTWZauiE62KOZLXAhoSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDCvBIs5iEbB66jkkim9f2lKyY/QMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTUs4RWl6bUlSc0hycU9TU0tiMV9hVXJKajlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF3u3vHdpDz7/tbEMaaO
tLD8g45dqApf+byyAVNThE2r7ko5/Wn6BDIgkQcQjVEU5HqJsdquj44Wco6DXlG/
jTUbyrTibcCjCRksc2DQxqmMkxpaLcmOwyJcZnSAk1GvgBKQSJdI9ZQKtRnhpz8I
dYCxs/EuIWYG16rsuHHrRsPkHSLlqaPP3/dN6L4NyPhn1xtxPEsaywWM4x7dyJ6Y
A5juQK1KfeB26UDR0qxRAUAniUKtWwQMgJWlNGLDxl1W7Nt6rGlndVmA53Z8UxJB
IdXkhhGGJYPkJj/6AS+hUpkApiastvEAkq8AlHrl+DpFRE2QGNuFfSbAeGV8dGSc
ugk=
-----END CERTIFICATE-----
Generated at Fri May 2 17:33:10 2025 by rpki-client