Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mbgd70QsU7olc3oDtwTYfxueV-M.roa
File: Mbgd70QsU7olc3oDtwTYfxueV-M.roa (raw, json)
Hash identifier: v2oezndDb8qUD5OkLm3xrqoRuaNVpoXoU5quUIs2uhY=
Subject key identifier: 31:B8:1D:EF:44:2C:53:BA:25:73:7A:03:B7:04:D8:7F:1B:9E:57:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E9B03FE81A07407738DDA1F55BFD253D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mbgd70QsU7olc3oDtwTYfxueV-M.roa
Signing time: Thu 16 Mar 2023 09:11:27 +0000
ROA not before: Thu 16 Mar 2023 09:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e9:b0:3f:e8:1a:07:40:77:38:dd:a1:f5:5b:fd:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 09:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b81def442c53ba25737a03b704d87f1b9e57e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:9f:15:37:35:38:f5:c1:8d:57:f8:dd:a2:
69:29:84:03:81:e9:61:56:be:8a:e6:66:b8:87:c0:
a1:66:9b:82:37:42:ad:54:de:42:78:0e:36:3d:42:
df:f9:72:79:e5:cc:e1:ef:da:f1:08:a9:c1:7c:36:
96:c8:5e:c3:8f:15:5b:94:50:87:59:50:92:24:7a:
1f:18:ea:54:12:17:71:87:d9:8f:4e:5f:18:f9:f0:
cd:3e:59:7b:9d:84:d9:8d:c8:52:1d:ae:dc:9c:78:
ca:cd:9e:ee:c0:11:82:38:c1:f0:90:8b:d5:16:a5:
f3:cc:14:c7:92:71:eb:20:ee:82:34:5d:80:05:67:
02:cb:a1:6f:51:a3:6a:67:24:32:b6:73:cf:27:52:
06:da:cb:d0:f1:cc:dc:7d:46:5f:d2:72:fc:2d:47:
c3:6e:9a:96:0d:56:43:ac:93:f8:9d:13:bf:52:01:
f5:ed:81:5e:45:b6:f8:9f:ba:67:91:87:1d:58:b4:
4c:af:bc:c3:a5:e5:53:5f:75:9b:2b:20:fa:9a:f9:
52:7b:b5:e5:10:80:db:c9:c5:6f:c4:eb:eb:38:22:
09:ac:e5:c6:68:d7:d4:73:63:ca:70:ac:fa:e4:25:
f2:a3:78:0e:82:a9:68:a4:47:9d:b4:8e:6d:d9:81:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B8:1D:EF:44:2C:53:BA:25:73:7A:03:B7:04:D8:7F:1B:9E:57:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mbgd70QsU7olc3oDtwTYfxueV-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:09:75:79:78:3d:a5:f8:81:94:ef:1c:6e:b9:d6:b2:81:20:
98:c8:92:91:24:55:49:7c:07:a0:95:d5:3b:f1:e8:e6:24:26:
6d:14:bb:77:49:65:57:56:4a:7f:ff:4c:bc:8d:f1:49:23:ef:
03:2b:7a:22:d8:8c:2f:f8:01:58:5f:d6:fd:0b:8c:e6:46:07:
87:c9:c7:ac:53:c4:df:f3:29:76:a6:0f:3d:71:14:ec:cc:ca:
6f:10:40:d3:82:44:51:7e:bb:3c:85:af:59:6a:83:00:ed:bc:
93:d3:55:dd:47:67:98:61:e9:9f:f8:ed:c2:5c:66:d1:69:20:
3f:9f:2b:cd:5c:eb:b1:84:92:ef:a2:99:02:05:3c:64:37:b0:
c9:e3:ca:e1:47:b7:1b:bc:25:79:81:2d:6a:8c:d8:15:d4:dc:
dc:7b:d9:94:b0:6d:8d:1f:e6:5e:34:60:3f:08:1c:d1:fe:23:
04:8c:44:8e:8b:da:28:a1:6e:f5:81:ac:e2:76:03:18:40:99:
42:fb:3a:25:c3:b7:0a:b6:36:0d:14:f8:4d:c5:40:36:d0:e4:
57:c8:e3:f6:c8:e1:d3:1a:2f:37:b8:a2:c9:c7:07:33:89:54:
35:58:31:93:82:0f:c3:c1:b8:f0:40:2f:65:3e:85:6a:b9:e9:
95:04:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:51:09 2025 by rpki-client