Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZp-wm4dZFcVyl5YAI8NtuTzUtQ.roa
File: MZp-wm4dZFcVyl5YAI8NtuTzUtQ.roa (raw, json)
Hash identifier: m7lTwfhCFzdgxD0GuSf6CoEbQEUDsnl4ljhuyCR2Soo=
Subject key identifier: 31:9A:7E:C2:6E:1D:64:57:15:CA:5E:58:00:8F:0D:B6:E4:F3:52:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018843C6C0519C83F4CE06B76A9749830791
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZp-wm4dZFcVyl5YAI8NtuTzUtQ.roa
Signing time: Mon 22 May 2023 14:04:38 +0000
ROA not before: Mon 22 May 2023 14:04:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:188:43c6:bb3d/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:c6:c0:51:9c:83:f4:ce:06:b7:6a:97:49:83:07:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 14:04:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=319a7ec26e1d645715ca5e58008f0db6e4f352d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:fe:f8:b1:1a:b3:62:44:c7:d3:9c:59:28:
4c:bc:cc:3e:b7:73:4e:9a:b3:89:88:34:c7:26:ca:
21:8e:88:b2:8c:7f:27:db:ff:51:6c:61:95:88:0d:
51:2c:b7:27:cb:c5:75:2f:b8:a1:de:e8:66:06:c0:
e7:d2:e5:16:e8:16:60:71:65:ee:aa:9f:ed:a1:fd:
63:dc:18:1b:f8:78:c3:5f:0c:ed:aa:47:0f:b7:8c:
01:81:ce:ef:e4:f3:bb:cd:3f:41:1f:98:6c:6c:ff:
36:3e:6c:43:b7:17:8f:33:9b:e8:aa:00:57:72:de:
35:68:1d:71:56:80:26:dc:e0:3d:54:8f:93:d3:ac:
ac:9b:52:e9:1d:d5:2f:74:a6:3c:12:6c:52:1e:da:
5a:c8:a9:43:22:b0:6a:04:68:fd:5f:cd:57:30:d8:
7d:fc:6e:75:4c:dd:c2:23:18:0c:40:3b:99:4f:a3:
65:23:3f:38:ca:35:b8:bc:f4:24:3a:bb:3b:f3:f0:
61:8c:1c:9b:c0:1a:6a:82:7c:5d:d1:9d:52:c9:26:
dd:dd:cd:cd:6a:ee:27:ea:ce:73:2e:47:7a:b3:ed:
a7:a6:3a:3c:a6:6c:b7:7f:6d:2e:de:8f:b8:3d:2b:
c6:e5:e2:4b:50:48:f8:5c:40:f9:3b:cf:af:a6:d7:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:7E:C2:6E:1D:64:57:15:CA:5E:58:00:8F:0D:B6:E4:F3:52:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MZp-wm4dZFcVyl5YAI8NtuTzUtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:f8:f6:2c:ef:be:1c:88:af:62:d7:37:41:1d:6c:39:a0:6c:
a0:6e:1b:19:48:d0:8e:7a:ac:76:94:d8:71:bb:b1:85:c1:d5:
64:ba:3e:58:aa:4a:01:20:79:12:2d:09:f3:0e:6c:97:ca:a9:
50:1a:c6:4a:dc:93:e2:bd:81:87:86:e1:52:dd:1d:d9:7f:bc:
fd:bb:06:83:92:f6:c3:03:08:81:91:53:dc:d6:75:95:07:fd:
75:9b:b4:cb:dc:8f:5b:f9:c3:f8:21:31:96:8c:c3:74:61:55:
07:20:3c:18:83:42:ce:cd:bd:db:b0:55:bd:6c:40:12:83:5b:
d2:d2:4f:ce:b9:6d:57:b9:32:34:0c:9c:11:e1:98:47:79:9d:
39:6e:3f:e0:3c:bf:96:d4:22:51:80:a0:aa:41:32:63:3c:72:
b1:0b:fe:6c:db:ba:93:5e:e3:33:bf:d5:e5:c3:dc:33:29:83:
5c:22:c7:a0:dc:94:40:48:a3:31:39:71:7d:d6:71:f0:c1:15:
15:92:d9:92:d7:7e:58:b7:df:33:4f:19:03:88:2f:c1:b9:25:
7a:0d:0a:9c:8d:77:cf:aa:00:f4:ef:e9:c6:ac:1b:11:46:9e:
62:6e:b6:c1:bf:d8:d0:e5:9b:7c:5e:30:4b:42:ae:15:df:0f:
be:ab:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:07 2025 by rpki-client