Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MSacBxf8VByJbAkvCAMYbc9NJiQ.roa
File: MSacBxf8VByJbAkvCAMYbc9NJiQ.roa (raw, json)
Hash identifier: ojSKed0+DoJrrqSa5LMHtU2ZTSK8ksHJAe2JieR+T4U=
Subject key identifier: 31:26:9C:07:17:FC:54:1C:89:6C:09:2F:08:03:18:6D:CF:4D:26:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018730844C272E6CAE21DD852DD68357AA3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MSacBxf8VByJbAkvCAMYbc9NJiQ.roa
Signing time: Thu 30 Mar 2023 03:16:29 +0000
ROA not before: Thu 30 Mar 2023 03:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:84:4c:27:2e:6c:ae:21:dd:85:2d:d6:83:57:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 03:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31269c0717fc541c896c092f0803186dcf4d2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:f2:dd:7a:63:5e:2c:09:d7:39:9f:17:48:
50:59:1c:2a:39:ed:d4:61:c6:f7:88:7d:e2:ad:c5:
47:f7:f2:51:34:b6:7e:36:d4:be:12:a6:b9:b4:c5:
0b:01:e5:2b:d5:a2:c3:96:95:55:c1:be:05:3f:f5:
94:c0:1f:e8:e4:11:17:8b:8f:03:5b:5f:38:fb:da:
d7:f5:21:db:09:d4:5c:ce:6b:e9:62:71:0c:d5:2f:
51:5a:92:dd:1b:06:ba:d2:84:cb:7c:a9:0b:44:2e:
f4:b2:95:9f:c6:ad:b1:5d:27:b9:82:2b:97:33:c8:
52:40:97:ea:87:af:a7:cc:8e:bc:3f:0f:c1:a4:74:
7e:14:70:72:cb:6e:3d:f3:08:16:91:7e:29:75:5a:
c3:f0:18:99:40:45:7b:0e:8d:ad:4f:6e:b7:c1:be:
58:cf:f5:32:57:1e:c4:35:3f:9c:69:9d:f3:28:78:
9d:18:d0:ef:c4:17:27:e0:eb:91:d5:33:01:31:ca:
12:9d:6f:2e:40:4a:19:7a:b2:14:65:28:c6:3c:c8:
8d:ac:60:48:16:90:2a:05:a3:6e:8b:83:81:a6:f5:
2e:ff:1c:fd:86:ec:57:60:7f:93:37:d0:96:d3:81:
0f:66:45:c0:ed:73:5b:aa:31:1d:51:5d:ce:bb:d1:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:9C:07:17:FC:54:1C:89:6C:09:2F:08:03:18:6D:CF:4D:26:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MSacBxf8VByJbAkvCAMYbc9NJiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ed:74:4f:16:0f:30:d2:04:69:9c:5b:0c:3f:c9:06:2d:64:
12:6e:7a:a8:d1:e0:96:e2:7f:e5:b1:51:7d:36:f6:8d:33:c3:
3d:d4:2b:95:08:2e:93:03:b2:90:ea:30:dc:de:0a:46:b0:9a:
93:48:cf:9e:41:e2:d4:f5:98:51:24:e6:db:2d:60:e4:c0:93:
14:7e:fe:46:a0:85:83:6c:58:51:22:92:12:e1:db:40:38:92:
8b:fc:e2:72:2b:7c:e7:4c:48:78:02:dc:d0:00:dc:68:f6:56:
1c:2a:ac:df:61:48:02:82:9c:2a:be:d2:76:1d:a7:8c:07:71:
a2:f9:93:a7:43:06:a3:de:30:f9:cf:f2:e8:15:bd:7d:d8:4e:
4c:b3:50:4d:35:a8:cf:a4:29:8a:51:cb:5b:f8:70:43:75:88:
dd:14:15:93:46:ce:d5:9d:ab:cb:c8:1a:e9:36:ce:d9:2f:05:
f2:fe:31:a0:bc:8d:a1:e7:17:2e:1e:d7:ce:3a:71:24:da:be:
4b:5d:6e:8e:f8:2e:4c:d3:82:fd:f6:86:09:2d:6d:bd:f5:8d:
22:d8:d5:fb:63:7e:d9:d3:72:e7:e8:36:90:e2:74:ee:0e:1b:
19:68:4a:71:f2:59:97:df:d8:f3:35:9d:91:02:a4:68:dd:30:
b4:eb:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:55:33 2025 by rpki-client