Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMFa4sSJYfAl477Evgb6wAVPsfE.roa
File: MMFa4sSJYfAl477Evgb6wAVPsfE.roa (raw, json)
Hash identifier: yWzqsqFIbcLFRu05QPz/DnQ71VGSvoi4J48pZRi1kOk=
Subject key identifier: 30:C1:5A:E2:C4:89:61:F0:25:E3:BE:C4:BE:06:FA:C0:05:4F:B1:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018723D0BD7647AE3CD1A3E8841CE5BBF2E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMFa4sSJYfAl477Evgb6wAVPsfE.roa
Signing time: Mon 27 Mar 2023 16:04:55 +0000
ROA not before: Mon 27 Mar 2023 16:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:23d0:71d6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:d0:bd:76:47:ae:3c:d1:a3:e8:84:1c:e5:bb:f2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 16:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30c15ae2c48961f025e3bec4be06fac0054fb1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:4f:6c:c1:5f:ac:77:ee:22:15:46:ab:a2:
22:c1:ff:7f:e0:0a:72:c1:df:4b:3c:2f:77:b5:b2:
a6:70:fb:81:69:44:d7:5e:ed:f7:f6:c3:8d:41:cb:
56:ee:4d:64:29:f4:b1:17:43:96:6f:56:6f:91:ef:
3b:72:6a:e5:1d:af:56:cc:91:a6:bf:eb:bc:eb:88:
90:6f:bf:95:1d:e5:6f:e3:53:a2:1c:22:10:c8:e5:
07:aa:ac:3b:15:a8:7e:02:a2:a5:57:48:0a:c9:cd:
7e:cb:b0:6b:b3:96:95:44:20:34:76:af:ee:b5:b4:
3e:dd:ed:db:bd:e0:b5:ac:a6:1b:9d:e4:25:36:30:
66:45:7a:83:4f:81:b6:4d:7e:1f:46:1c:34:d6:82:
98:23:60:3f:c8:13:2d:f9:3e:5b:05:6c:fd:59:c5:
be:7e:90:ce:08:bc:c0:36:4b:b5:f6:b2:84:0a:88:
a0:fe:53:6b:26:87:05:ad:80:27:8c:61:d5:a1:a2:
57:a9:f0:dc:bf:85:11:7f:2f:93:11:3f:7c:c8:4c:
a4:24:65:27:e1:25:35:55:84:0b:56:9f:9f:bd:e4:
0e:8d:8c:9d:73:b1:b9:39:aa:76:45:d7:80:32:87:
00:0b:75:ef:e8:83:67:5c:83:df:38:ea:92:ba:c1:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:5A:E2:C4:89:61:F0:25:E3:BE:C4:BE:06:FA:C0:05:4F:B1:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MMFa4sSJYfAl477Evgb6wAVPsfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c1:e4:ad:f8:8a:fc:e6:3e:e9:bb:fa:7e:d9:38:9e:62:a9:
83:5e:87:eb:45:36:99:b3:30:67:f6:0b:0d:f6:ee:57:0b:05:
97:c1:8b:dc:ce:d3:3c:c0:9f:5f:4e:59:3f:24:16:dc:34:0d:
66:b0:e0:36:9c:12:f8:b4:0b:ff:20:f3:d2:f9:40:f2:37:7d:
d9:9a:d8:a9:b7:7d:b7:a9:55:c4:89:b7:90:37:23:e6:42:c1:
31:74:87:cc:b0:f7:85:4c:77:c6:17:74:d3:a9:fb:bd:f2:77:
6a:bc:91:8d:36:2c:60:ba:24:19:ff:0c:bf:aa:da:bd:30:46:
ce:a6:a0:34:8b:d4:ff:9b:be:37:47:74:d4:4d:f9:33:76:6c:
a9:74:59:8f:ff:a0:9a:79:ce:3c:f2:e7:ef:fc:ea:9a:c6:6e:
f8:df:8d:ad:3a:81:45:c0:e2:58:b2:95:5c:4d:5c:81:42:cb:
11:07:b2:29:52:8d:61:a6:cd:73:b3:76:63:cf:17:25:d8:25:
72:21:50:6e:b2:94:a1:41:a0:0a:50:06:40:fc:fc:0f:b5:16:
68:5f:61:32:16:de:06:57:69:41:67:78:c9:81:0d:0c:fc:a1:
d4:fa:0b:78:b0:f3:94:29:e3:7f:48:05:39:19:ef:27:35:da:
66:f7:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:34:22 2025 by rpki-client