Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbGKY0byPR0IK3a7Bvwu2zkVQl0.roa
File: MbGKY0byPR0IK3a7Bvwu2zkVQl0.roa (raw, json)
Hash identifier: bid6bcxh1hNvlq8Xsl9cQjEmjXBp5ady3hTzd4BQ7XM=
Subject key identifier: 31:B1:8A:63:46:F2:3D:1D:08:2B:76:BB:06:FC:2E:DB:39:15:42:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018701177504B232ABCE9152D0CCC2F8EAFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbGKY0byPR0IK3a7Bvwu2zkVQl0.roa
Signing time: Mon 20 Mar 2023 22:15:27 +0000
ROA not before: Mon 20 Mar 2023 22:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:17:75:04:b2:32:ab:ce:91:52:d0:cc:c2:f8:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 22:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b18a6346f23d1d082b76bb06fc2edb3915425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:5e:e9:70:07:e3:a1:b8:29:f1:d7:a5:40:
d3:0e:28:cf:f8:57:37:80:7a:29:0c:ee:5c:9e:9f:
7d:67:2d:4c:f8:cc:0e:13:a8:d9:ec:92:6d:c2:55:
0f:86:48:6e:a4:96:b3:ee:c1:40:d0:ce:08:62:f7:
65:03:e5:a1:a4:ac:6a:ef:91:48:6b:30:11:f0:3e:
a0:a0:6a:1a:c1:81:9b:80:cf:3e:69:e3:6d:65:8e:
8d:93:e1:eb:f3:17:fd:b2:ef:82:c0:2a:51:49:f3:
3c:d7:6e:13:50:47:23:b7:99:ae:1a:b4:ab:ff:73:
e3:ff:71:68:1d:df:67:c8:eb:98:f1:3c:9e:26:f1:
17:17:f6:b9:41:3c:31:17:b6:99:12:1a:22:22:e0:
2a:8b:35:09:d9:23:84:03:69:b8:8d:61:51:fc:6d:
10:55:5b:1b:0f:e0:f3:13:6d:8f:62:15:2c:81:94:
6d:13:c0:9e:8c:35:b9:f9:19:9f:dd:d6:4a:9c:5b:
23:82:cc:09:98:7b:34:b8:5d:47:82:04:7e:25:a7:
a2:e6:59:a6:a7:86:5e:b5:08:d2:95:a3:db:6c:60:
20:71:90:a6:b1:f2:c3:8d:bb:03:1a:b4:7d:14:9c:
79:f8:f4:15:0d:ba:aa:a6:c6:38:a3:d4:02:4c:ad:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:8A:63:46:F2:3D:1D:08:2B:76:BB:06:FC:2E:DB:39:15:42:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MbGKY0byPR0IK3a7Bvwu2zkVQl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:12:ff:92:44:48:bf:33:bd:e5:02:d3:96:75:71:5e:ad:bc:
c5:70:e7:fe:00:b7:30:d7:4d:9f:06:da:d7:ab:90:aa:bd:5a:
01:e9:4e:aa:4d:c6:44:9a:56:95:81:68:92:02:52:05:23:4e:
53:83:c9:53:41:ac:63:08:3d:62:e6:82:2f:df:db:58:95:6a:
f5:e1:30:6a:02:91:9f:28:a2:13:30:9d:f5:09:5a:07:23:b3:
a3:e9:09:73:14:76:ec:10:a1:b9:ba:73:b7:fa:4e:6c:1e:4b:
a2:de:59:1c:34:46:94:dd:25:21:f9:b5:e2:c5:40:da:33:a2:
9f:c0:e1:93:2f:97:95:77:20:36:58:0b:22:f2:c8:c6:35:bc:
c5:5f:88:9d:74:c2:f1:71:33:56:6a:84:66:a7:3b:42:63:85:
59:11:06:b3:83:d0:7c:5d:cf:0c:e1:be:2a:33:90:0c:89:06:
e3:2d:fd:fa:f8:d6:b9:52:1a:e9:4a:b6:19:49:01:50:31:2a:
4b:06:b0:18:44:42:38:2b:17:94:ec:cb:37:70:3b:01:93:8a:
b4:f3:ec:97:2a:32:de:3c:05:03:58:d2:46:36:ab:a6:07:ac:
f0:18:06:f0:2b:e8:ad:41:bd:5f:23:ef:f1:a2:86:e5:6a:46:
d2:a5:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:17 2025 by rpki-client