Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MLJzvHFAjduqOOg0DmPZhTbWrzQ.roa
File: MLJzvHFAjduqOOg0DmPZhTbWrzQ.roa (raw, json)
Hash identifier: ZoQBtWse3Ja/6K9epqYb1e1RLvvmE2jzLbS5cUqwoCA=
Subject key identifier: 30:B2:73:BC:71:40:8D:DB:AA:38:E8:34:0E:63:D9:85:36:D6:AF:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867A51A807717D171D08F9180F86944502
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MLJzvHFAjduqOOg0DmPZhTbWrzQ.roa
Signing time: Wed 22 Feb 2023 18:10:17 +0000
ROA not before: Wed 22 Feb 2023 18:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:51:a8:07:71:7d:17:1d:08:f9:18:0f:86:94:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 18:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b273bc71408ddbaa38e8340e63d98536d6af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:5e:91:14:ec:e1:01:19:29:bd:81:07:bf:
2a:77:a6:ca:ff:c0:8b:f5:43:c9:a1:62:5e:95:14:
29:95:e2:68:e2:40:48:1f:b5:bc:3a:f8:d1:d5:c8:
24:2d:20:32:da:32:e4:28:e5:eb:7e:d9:0a:8f:53:
bc:dd:c0:ad:35:33:f3:54:db:a9:87:9e:9d:94:83:
39:57:2f:d5:3c:58:a7:e6:8e:a5:f0:72:a3:fb:02:
ce:0d:ae:b6:e9:f2:43:b9:67:6d:bb:c5:e2:bb:b0:
18:ee:8f:50:6c:56:0b:c5:85:71:85:09:56:d0:cb:
86:59:ed:3a:81:d6:ab:80:cc:d7:4e:e3:bd:a9:30:
3f:7d:4c:a5:d7:53:28:26:d1:b1:f0:3c:78:54:41:
53:ed:6f:b3:d0:b6:b7:f7:a3:1c:d5:09:ef:7d:59:
e3:37:a9:03:f4:75:c5:9f:09:a6:b5:b7:d5:ca:d9:
fd:c2:42:d7:47:1e:31:11:be:8b:7a:2e:59:93:dc:
d5:4a:c5:96:40:d2:86:17:ff:11:44:0b:5e:b1:6e:
20:4e:dc:9c:1c:0d:4f:09:33:66:94:d4:2b:fb:62:
f2:57:a8:65:60:5d:b5:2e:e6:5c:b0:e4:e8:03:e2:
d4:44:cb:95:9d:8e:6f:a7:d1:80:75:78:43:f1:e2:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:73:BC:71:40:8D:DB:AA:38:E8:34:0E:63:D9:85:36:D6:AF:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MLJzvHFAjduqOOg0DmPZhTbWrzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:69:1f:2d:07:8a:e7:5a:4c:d5:f8:78:9a:18:0b:43:ff:72:
e9:dd:76:74:a5:4e:9a:64:0e:84:bc:c7:59:06:bd:3e:3d:cc:
a6:5c:a2:c5:00:dd:84:3a:af:2f:b0:7d:3c:60:7b:5b:0c:3a:
16:6a:17:a2:5e:8b:5c:b4:cc:a6:8d:66:ba:9e:36:6d:65:90:
5a:01:03:64:c4:87:43:62:8c:5b:10:0f:e3:45:81:48:f4:dc:
e4:84:40:4a:45:76:52:22:6c:13:70:13:af:02:e6:58:da:aa:
dc:94:32:33:17:61:c5:dd:d1:1e:df:ee:15:23:4b:01:17:98:
7c:c6:44:d7:1a:f0:7c:9e:8e:5f:55:00:26:ba:65:05:79:ed:
a1:18:b2:6a:b6:18:5d:f7:26:26:48:9a:f1:59:fe:90:9f:a5:
0c:81:2b:d3:fc:f2:3f:26:0d:97:f4:cc:05:53:0e:57:e3:b9:
f2:b5:b5:28:02:64:ea:da:4e:86:7f:74:9d:91:2c:15:f8:5c:
42:76:cb:54:65:c2:43:b0:25:e4:49:a5:97:87:b6:db:aa:4c:
dc:5f:a3:0c:4a:63:21:06:04:7d:ec:4d:85:42:ea:cb:69:c1:
d5:84:21:52:83:42:e1:de:57:a3:48:e8:f5:d7:96:84:1e:2a:
c8:49:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:26:18 2025 by rpki-client