Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MNCUsKQV4OogudjJXm-dnYQ9tPY.roa
File: MNCUsKQV4OogudjJXm-dnYQ9tPY.roa (raw, json)
Hash identifier: 9m9x/t/t9fEXewdQGikHa8exULOVwpkV5VFsIs43LTA=
Subject key identifier: 30:D0:94:B0:A4:15:E0:EA:20:B9:D8:C9:5E:6F:9D:9D:84:3D:B4:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863F4F512DA311AF846FC7502AC7F20A70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MNCUsKQV4OogudjJXm-dnYQ9tPY.roa
Signing time: Sat 11 Feb 2023 07:10:08 +0000
ROA not before: Sat 11 Feb 2023 07:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:4f:51:2d:a3:11:af:84:6f:c7:50:2a:c7:f2:0a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 07:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d094b0a415e0ea20b9d8c95e6f9d9d843db4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:b5:9c:06:50:ca:53:ee:50:5c:87:d6:ff:
f4:2f:90:2d:ff:f8:99:a8:80:2d:08:73:31:64:cc:
3f:31:ff:3e:3c:78:d8:6c:cd:82:51:a0:c8:ee:ea:
27:08:db:db:4a:44:50:93:67:d5:a2:df:05:af:1c:
08:85:54:4e:ed:aa:a5:63:61:a2:03:60:96:c7:66:
13:e6:5b:17:a6:2d:d9:15:60:fa:8d:71:90:a8:85:
33:45:0a:69:6d:4d:1f:ac:b1:0e:a0:6d:47:12:9d:
2f:78:80:b0:74:c5:94:c9:90:d0:68:aa:7a:f5:18:
07:61:18:64:e0:97:bd:08:9a:eb:6c:70:12:45:cf:
5a:36:8f:4e:51:38:df:5a:d2:9d:8a:d3:c0:b6:db:
ee:4d:0a:2a:da:bc:92:01:b8:7e:7b:66:cb:89:ad:
07:4f:3c:b1:fa:c7:7c:37:80:97:48:2d:c4:ad:e8:
30:d5:26:61:d1:6b:78:0f:58:1f:50:98:7c:08:70:
3e:17:13:69:1c:2b:67:95:b4:29:73:9d:7e:c6:f6:
05:35:e9:c4:ac:52:ff:72:be:58:29:d8:9a:0c:e8:
03:2d:7e:d4:8b:d1:71:64:f7:e5:1e:e4:55:1a:d9:
38:d3:29:cc:e2:c7:bb:5a:71:4f:40:af:2d:19:e4:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:94:B0:A4:15:E0:EA:20:B9:D8:C9:5E:6F:9D:9D:84:3D:B4:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MNCUsKQV4OogudjJXm-dnYQ9tPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:a5:64:d2:eb:d3:90:79:1d:b3:f9:8d:9a:68:3d:fb:df:64:
e2:f4:34:1e:5b:12:2a:a2:0d:58:86:49:1b:7f:ee:30:4a:7f:
e7:8b:ff:da:24:42:82:57:a8:48:7a:e4:f7:ba:b2:a6:6a:ff:
67:f2:7e:b6:e2:26:8e:13:6e:e0:8e:93:af:1e:7b:44:38:17:
99:ea:26:ee:01:84:18:c9:f6:9c:4a:ed:2c:64:37:e7:17:50:
0f:df:27:87:3c:7f:ff:a8:4d:79:55:0c:09:a4:e7:ba:74:10:
d0:39:e2:90:b6:35:ba:9e:83:2b:51:2c:f1:81:03:1f:36:60:
d1:8f:fa:38:40:7b:58:1d:4a:24:ca:4b:fe:f4:b0:1c:0b:f8:
1d:d3:3f:35:8d:2e:d0:cc:40:a2:c5:02:82:d6:a7:26:32:c5:
de:81:98:2c:87:89:be:db:2f:6c:1d:19:eb:b2:ed:78:0a:80:
27:33:b9:14:66:fd:01:f9:eb:a3:fc:f4:df:3a:e7:a6:3f:b2:
5c:66:02:65:80:e9:7a:df:47:61:d9:45:62:72:cd:ae:39:e9:
9f:65:f9:f5:b5:cd:40:e7:44:12:e1:94:2b:46:55:26:9b:d9:
e6:b2:66:b7:15:51:1d:b0:5d:5c:a8:39:2b:cb:78:ca:fa:77:
8e:b4:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:19:35 2025 by rpki-client