Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTp7jIvSCHRMWHa5CFYLhk4zWI.roa
File: MKTp7jIvSCHRMWHa5CFYLhk4zWI.roa (raw, json)
Hash identifier: e/LE1po0UbkJGp+L2gSPXgxBQ1AJsmEW5wbCa78ULw4=
Subject key identifier: 30:A4:E9:EE:32:2F:48:21:D1:31:61:DA:E4:21:58:2E:19:38:CD:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829EDA48E15F7D4C068DDDCC5C12F4E8D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTp7jIvSCHRMWHa5CFYLhk4zWI.roa
Signing time: Mon 15 Aug 2022 00:14:41 +0000
ROA not before: Mon 15 Aug 2022 00:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9e:da:48:e1:5f:7d:4c:06:8d:dd:cc:5c:12:f4:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 00:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30a4e9ee322f4821d13161dae421582e1938cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:c5:f5:78:c8:e9:b6:4f:a1:65:2d:bb:57:
03:16:b3:6c:77:30:ea:f8:55:9e:22:ff:45:7e:f3:
3c:1d:d9:3d:5b:d7:6a:be:d2:a9:35:aa:d5:1d:0b:
08:2c:ed:65:45:9e:92:ac:2b:0a:bb:3b:30:8a:e0:
65:25:7e:65:73:f3:14:ae:2e:e9:22:f8:cb:b3:eb:
cd:0a:8c:0f:39:3e:67:5c:18:4d:bf:c8:3d:03:20:
fa:3e:49:64:3f:d4:d8:45:60:42:99:37:e4:8e:e8:
a0:08:64:ac:6f:4b:4b:8f:ce:06:27:3f:73:9b:76:
f5:33:d4:21:83:4c:11:77:20:ee:4b:a9:4e:8b:67:
24:bd:61:cb:ce:d9:fa:c5:35:ea:1d:fa:04:77:10:
29:ff:90:6c:5f:75:5e:c0:87:3b:62:9c:d0:73:13:
ee:f9:58:f0:55:06:9e:58:07:6e:d7:7a:e2:31:1a:
2a:26:9f:2c:f8:bb:dd:1f:9d:94:e6:75:a4:fa:2d:
42:51:90:0e:66:92:59:54:1e:81:d9:84:5a:48:74:
05:2e:7e:d2:d4:d0:02:1b:b0:7e:d0:f7:2a:aa:bd:
1c:0b:b2:83:b9:73:4d:ea:4a:0b:ea:7e:92:a3:42:
e4:08:af:97:c0:18:c8:a0:62:64:e7:bc:48:0e:6b:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:E9:EE:32:2F:48:21:D1:31:61:DA:E4:21:58:2E:19:38:CD:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MKTp7jIvSCHRMWHa5CFYLhk4zWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:5f:7a:5b:f4:63:f6:0b:28:1f:d3:18:26:2f:db:52:0f:5e:
a0:15:67:78:52:6d:8e:0c:a7:c0:41:f8:1e:57:45:35:00:cd:
cb:c1:5a:58:9e:54:7a:30:5a:fc:70:c3:d6:ce:bf:f3:91:92:
a4:d8:05:fb:3b:40:c2:db:95:5d:eb:58:a9:c4:cb:76:50:4d:
f3:62:bc:f5:37:59:10:5c:c1:ea:38:a0:fc:4b:cb:b8:d8:aa:
5c:a7:78:e8:f7:fd:99:5a:35:b1:e0:7d:ea:a3:97:3a:7a:56:
05:ab:16:66:be:b4:6c:ad:91:d1:31:9b:52:97:d7:73:73:d0:
f0:5b:e6:b1:ec:76:58:ba:90:9b:53:7a:64:4d:58:5e:37:1e:
cd:9d:a0:e6:62:e4:22:d8:90:25:f6:ec:d7:1a:3f:e6:7f:20:
f3:57:1c:cf:b5:a0:7b:3e:56:f6:9e:60:59:f6:d8:e1:0d:f1:
ab:b8:be:aa:72:a4:bd:47:c6:8a:75:08:12:09:c0:5e:31:d3:
7c:27:7d:5d:88:dc:de:d5:bc:65:9d:12:fd:99:b3:c5:db:de:
e2:3a:82:43:85:50:4b:70:e9:be:09:a6:1c:bc:27:3a:ca:1b:
89:2d:96:01:13:25:3e:3d:e2:34:fc:62:5d:ae:d0:b2:02:fe:
7f:54:6b:8b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKe2kjhX31MBo3dzFwS9OjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE1MDAxNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGE0ZTllZTMyMmY0ODIxZDEzMTYxZGFlNDIxNTgyZTE5MzhjZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAvF9XjI6bZPoWUtu1cDFrNsdzDq
+FWeIv9FfvM8Hdk9W9dqvtKpNarVHQsILO1lRZ6SrCsKuzswiuBlJX5lc/MUri7p
IvjLs+vNCowPOT5nXBhNv8g9AyD6PklkP9TYRWBCmTfkjuigCGSsb0tLj84GJz9z
m3b1M9Qhg0wRdyDuS6lOi2ckvWHLztn6xTXqHfoEdxAp/5BsX3VewIc7YpzQcxPu
+VjwVQaeWAdu13riMRoqJp8s+LvdH52U5nWk+i1CUZAOZpJZVB6B2YRaSHQFLn7S
1NACG7B+0Pcqqr0cC7KDuXNN6koL6n6So0LkCK+XwBjIoGJk57xIDmt1YwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDCk6e4yL0gh0TFh2uQhWC4ZOM1iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTUtUcDdqSXZTQ0hSTVdIYTVDRllMaGs0eldJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKNfelv0Y/YLKB/TGCYv
21IPXqAVZ3hSbY4Mp8BB+B5XRTUAzcvBWlieVHowWvxww9bOv/ORkqTYBfs7QMLb
lV3rWKnEy3ZQTfNivPU3WRBcweo4oPxLy7jYqlyneOj3/ZlaNbHgfeqjlzp6VgWr
Fma+tGytkdExm1KX13Nz0PBb5rHsdli6kJtTemRNWF43Hs2doOZi5CLYkCX27Nca
P+Z/IPNXHM+1oHs+VvaeYFn22OEN8au4vqpypL1Hxop1CBIJwF4x03wnfV2I3N7V
vGWdEv2Zs8Xb3uI6gkOFUEtw6b4Jphy8JzrKG4ktlgETJT494jT8Yl2u0LIC/n9U
a4s=
-----END CERTIFICATE-----
Generated at Thu May 1 09:30:10 2025 by rpki-client