Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MfctgK4J8F4Wo5Q5YaOt9yoje6Y.roa
File: MfctgK4J8F4Wo5Q5YaOt9yoje6Y.roa (raw, json)
Hash identifier: UIUu9WOeCPl7iDboxVhd7gTtuFhcyEKzn5fg3ih7RyA=
Subject key identifier: 31:F7:2D:80:AE:09:F0:5E:16:A3:94:39:61:A3:AD:F7:2A:23:7B:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187914440046C11B41C9B66FC25CD0FA0E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MfctgK4J8F4Wo5Q5YaOt9yoje6Y.roa
Signing time: Mon 17 Apr 2023 22:09:41 +0000
ROA not before: Mon 17 Apr 2023 22:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:91:44:40:04:6c:11:b4:1c:9b:66:fc:25:cd:0f:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 22:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f72d80ae09f05e16a3943961a3adf72a237ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:18:6d:b0:4e:58:e3:c0:c9:c8:73:ed:53:
2c:5d:68:77:14:06:f3:2c:96:45:aa:d0:ee:2b:6c:
86:4a:d6:bc:ef:bd:5f:38:04:b8:4d:3d:91:09:ff:
b3:37:29:90:d3:86:56:f4:74:5e:a7:24:a9:40:3a:
60:5e:a3:e9:d9:d0:ba:61:58:70:8f:15:55:2d:ac:
6d:28:95:26:66:ac:7c:52:1a:81:5b:d6:76:f7:75:
53:81:16:99:43:0e:e7:85:b6:cb:05:dd:7c:18:3c:
8d:c5:cd:3c:f6:9b:99:e8:41:29:8f:9b:22:cb:3e:
67:a6:ff:d7:b7:ef:ee:51:ae:e7:4f:25:ec:7d:e6:
50:0e:9d:e6:af:2f:d7:8d:69:68:b2:bf:73:bf:8c:
36:0e:44:6c:e7:61:f9:6b:54:71:3f:1c:a4:43:dd:
71:67:3f:7f:21:27:f9:c6:fd:e7:70:28:aa:35:36:
d7:9c:05:f8:06:dc:c7:05:a6:f2:ff:56:a0:f7:f2:
de:96:aa:b6:3c:07:70:0f:f4:87:d6:ec:8c:73:d1:
ee:ff:cc:bd:9e:57:fb:6d:24:8c:78:1d:60:73:1f:
d1:2e:79:02:f3:1e:d7:d5:e1:16:9c:72:a2:00:37:
96:0e:d1:86:9d:1e:9c:10:ba:6f:a4:64:f3:01:88:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:2D:80:AE:09:F0:5E:16:A3:94:39:61:A3:AD:F7:2A:23:7B:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MfctgK4J8F4Wo5Q5YaOt9yoje6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:4b:b4:e3:4c:5b:8b:f0:4c:f1:0b:62:20:de:f6:8e:33:96:
12:d4:b5:b0:bf:5f:77:2b:b6:40:2c:2d:a3:01:c1:32:71:c3:
91:50:bb:c7:ac:61:b7:50:13:88:1e:07:71:9e:3d:31:ca:6c:
c3:25:bf:c1:58:e7:ba:1f:c1:d4:ad:26:bc:ec:f7:9c:a7:f6:
a3:91:e3:f8:d4:1f:88:69:e6:c7:dd:60:d0:07:5f:5d:17:c8:
1b:c4:5b:82:ef:58:9c:29:73:4e:be:17:b8:7a:7f:64:1f:1e:
20:e8:ea:f6:9e:22:0e:19:bf:a0:e0:8c:1b:33:93:31:33:b9:
6b:9a:b1:2a:8c:51:13:86:77:03:ce:db:58:7d:fe:e2:aa:ba:
75:20:06:15:bb:c9:40:ee:13:b4:01:42:20:02:17:95:a4:40:
58:16:64:03:80:57:8c:7d:f6:07:cd:74:1f:b2:c2:b5:bc:a0:
da:ef:73:54:7e:c4:6a:9c:d5:75:4c:60:02:11:7e:f6:6e:74:
15:cd:21:5e:99:30:a1:9f:a0:1a:c4:96:3f:bb:ad:db:8e:43:
b3:4a:d2:1f:5d:d0:81:59:bf:8b:81:6d:75:95:dd:20:ab:54:
f6:09:70:a6:60:a7:21:03:00:5d:dd:bb:ce:af:a9:61:64:4e:
87:1b:fa:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeRREAEbBG0HJtm/CXND6DkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE3MjIwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWY3MmQ4MGFlMDlmMDVlMTZhMzk0Mzk2MWEzYWRmNzJhMjM3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm04YbbBOWOPAychz7VMsXWh3FAbz
LJZFqtDuK2yGSta8771fOAS4TT2RCf+zNymQ04ZW9HRepySpQDpgXqPp2dC6YVhw
jxVVLaxtKJUmZqx8UhqBW9Z293VTgRaZQw7nhbbLBd18GDyNxc089puZ6EEpj5si
yz5npv/Xt+/uUa7nTyXsfeZQDp3mry/XjWlosr9zv4w2DkRs52H5a1RxPxykQ91x
Zz9/ISf5xv3ncCiqNTbXnAX4BtzHBaby/1ag9/Lelqq2PAdwD/SH1uyMc9Hu/8y9
nlf7bSSMeB1gcx/RLnkC8x7X1eEWnHKiADeWDtGGnR6cELpvpGTzAYgs6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDH3LYCuCfBeFqOUOWGjrfcqI3umMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTWZjdGdLNEo4RjRXbzVRNVlhT3Q5eW9qZTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG1LtONMW4vwTPELYiDe
9o4zlhLUtbC/X3crtkAsLaMBwTJxw5FQu8esYbdQE4geB3GePTHKbMMlv8FY57of
wdStJrzs95yn9qOR4/jUH4hp5sfdYNAHX10XyBvEW4LvWJwpc06+F7h6f2QfHiDo
6vaeIg4Zv6DgjBszkzEzuWuasSqMUROGdwPO21h9/uKqunUgBhW7yUDuE7QBQiAC
F5WkQFgWZAOAV4x99gfNdB+ywrW8oNrvc1R+xGqc1XVMYAIRfvZudBXNIV6ZMKGf
oBrElj+7rduOQ7NK0h9d0IFZv4uBbXWV3SCrVPYJcKZgpyEDAF3du86vqWFkTocb
+is=
-----END CERTIFICATE-----
Generated at Sat May 3 16:31:27 2025 by rpki-client