Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUncy2uzUCy4SnB5srJByjNtklQ.roa
File: MUncy2uzUCy4SnB5srJByjNtklQ.roa (raw, json)
Hash identifier: up+dLxQQJbkkvTOr+VqnLw4LTQOIpUzgZWPY0Yg/ZKQ=
Subject key identifier: 31:49:DC:CB:6B:B3:50:2C:B8:4A:70:79:B2:B2:41:CA:33:6D:92:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E8288B64417E2942F258FC0E82A99C0D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUncy2uzUCy4SnB5srJByjNtklQ.roa
Signing time: Sat 12 Aug 2023 05:11:58 +0000
ROA not before: Sat 12 Aug 2023 05:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:28:8b:64:41:7e:29:42:f2:58:fc:0e:82:a9:9c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 05:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3149dccb6bb3502cb84a7079b2b241ca336d9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:29:f6:92:a9:79:9c:1c:65:02:8c:07:67:
1a:75:d5:be:00:05:b3:70:3c:f1:4e:76:e6:e0:87:
bd:81:54:1d:a2:fb:d2:4b:8a:e8:c9:49:1e:85:61:
a1:4e:fe:af:e1:9f:bf:e7:9b:33:d1:97:12:0c:5b:
25:8b:d0:60:46:55:11:19:d1:ec:99:12:77:a8:d2:
ac:86:5c:2d:e4:b2:60:b9:6e:1e:8d:5a:95:d8:78:
9e:d2:09:9a:8f:6a:05:f8:68:6d:d1:30:dd:56:9c:
bf:aa:cc:b6:34:6a:d2:a0:09:55:fb:01:a1:33:7a:
9f:f8:1a:07:a0:f1:2b:66:db:95:1e:5d:c3:c6:c4:
16:91:aa:74:bf:ef:be:d6:35:8d:a3:75:6f:42:d7:
75:ed:a5:c2:52:78:23:a3:e8:0b:1b:10:35:73:13:
eb:59:2f:85:ec:cb:91:f1:71:98:41:fe:e1:df:99:
d7:23:ac:ce:6c:3f:d4:b1:c6:f3:0d:e8:b4:c1:27:
f0:c3:5d:40:1a:5a:7c:37:e5:20:49:c4:36:67:42:
22:3b:14:73:35:2f:bb:de:21:26:5d:d9:5b:39:94:
4d:10:f7:44:2b:05:3e:32:1d:d0:31:df:07:f7:45:
e1:b9:0f:66:59:3f:b1:f2:8e:d5:24:cd:12:1b:b7:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:DC:CB:6B:B3:50:2C:B8:4A:70:79:B2:B2:41:CA:33:6D:92:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MUncy2uzUCy4SnB5srJByjNtklQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a0:a7:df:0e:c6:1f:a7:f3:07:cf:2c:39:95:7e:31:0a:3b:
9b:21:22:15:11:ff:53:e2:b4:ca:ed:b7:1a:2d:bd:cf:fc:b0:
8f:22:38:3f:1f:d5:12:4a:54:8c:9d:69:ba:e2:5b:11:01:45:
e3:bb:6f:c8:3f:7d:2c:b3:5d:1b:3b:4f:5b:8c:11:1b:af:ce:
d6:1d:e5:14:67:62:57:d9:3d:fa:5a:11:20:85:2a:b8:03:0e:
c8:61:ad:87:b3:47:ad:91:d4:47:f6:93:54:f4:0b:f6:78:a1:
32:d6:1a:94:ae:b3:14:cb:b2:14:4b:cd:f7:23:05:76:a7:28:
6b:ac:ea:0d:f6:73:d7:37:22:c1:8e:02:52:07:dd:14:e8:24:
f7:df:19:3c:7b:6f:ed:35:d0:6b:b5:17:b6:36:f0:a4:fb:0e:
dd:79:b7:3f:43:80:e8:ff:bf:f7:b0:9b:8f:84:b9:a8:bb:50:
9a:46:34:18:cd:72:55:71:1c:bf:84:67:09:87:a6:47:f1:ab:
4b:2d:cf:91:e7:13:db:b9:6c:12:7b:a7:36:21:94:4a:e8:58:
c1:9c:30:c0:a9:f2:a4:cf:a9:68:3c:79:e3:4f:7e:d1:ea:f1:
59:34:2e:58:4a:25:52:5e:ee:ea:d9:86:43:e6:f9:0b:aa:0a:
0c:a2:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:11:28 2025 by rpki-client