Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mgi5DiDAzeqW9W7U46U380K1UVE.roa
File: Mgi5DiDAzeqW9W7U46U380K1UVE.roa (raw, json)
Hash identifier: UCg1NjIl3/58VxZohWCkcepcswqRaxl7Mg0EkPZ8K0o=
Subject key identifier: 32:08:B9:0E:20:C0:CD:EA:96:F5:6E:D4:E3:A5:37:F3:42:B5:51:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018282F70312721BD9419685B96F1EBF88F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mgi5DiDAzeqW9W7U46U380K1UVE.roa
Signing time: Tue 09 Aug 2022 14:16:42 +0000
ROA not before: Tue 09 Aug 2022 14:16:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:f7:03:12:72:1b:d9:41:96:85:b9:6f:1e:bf:88:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 14:16:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3208b90e20c0cdea96f56ed4e3a537f342b55151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:e1:90:1f:59:a6:b3:25:72:f2:ea:c5:52:
51:91:b6:d6:32:1f:28:bf:b7:da:53:f9:98:d3:2b:
b9:7f:9f:da:4b:a6:06:9c:c5:db:66:23:5d:74:b4:
7d:5a:8f:5c:8f:cf:61:ff:67:73:35:e4:bc:4a:49:
27:c6:dd:79:91:bb:34:75:03:1c:24:a2:92:0e:cf:
8d:08:3d:7a:0e:d8:f9:75:cb:e3:be:2d:81:61:c6:
a5:9a:68:09:c5:c0:0b:e8:1a:b9:8f:5e:58:3a:6f:
f4:45:ea:5d:cf:ba:fc:3c:87:66:fe:4c:3c:d7:d5:
ce:f4:1f:5f:e9:85:64:f0:5c:a4:e6:01:c1:b1:bb:
07:54:0a:31:26:dd:a6:c1:fa:ee:5f:aa:9b:20:c4:
22:6e:da:96:e8:05:a8:88:e5:a3:43:dc:5f:b7:5f:
7a:04:44:05:8d:82:6a:9a:b2:08:03:5a:27:93:7f:
68:ba:ec:17:bf:4e:06:d8:fe:fa:d9:20:37:04:54:
22:ef:c9:10:d7:96:34:97:a6:bf:9c:4e:85:41:ff:
79:4e:bc:ab:7e:6c:a4:02:6f:2a:f3:ed:58:e3:6b:
f3:6b:fb:79:bd:f3:a7:25:cc:52:bf:d0:31:fd:d7:
20:af:95:15:a8:c6:1a:9b:ee:6a:b5:ce:3c:04:9f:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:B9:0E:20:C0:CD:EA:96:F5:6E:D4:E3:A5:37:F3:42:B5:51:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mgi5DiDAzeqW9W7U46U380K1UVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:9e:b2:e4:8e:0c:02:05:dc:b4:fb:56:cb:6e:15:9b:9a:b2:
18:e4:22:90:8e:72:fc:6b:7e:f3:89:28:f1:7e:4c:d5:a1:34:
1d:ad:27:0f:61:f9:49:be:bd:35:de:cc:79:33:ac:f1:0e:61:
04:80:71:b3:b2:f9:b7:ba:9a:73:48:a6:25:7d:57:e6:4d:f1:
96:7d:f3:9e:34:70:8b:05:50:1d:cc:5b:08:9e:3d:c6:31:e7:
6b:8b:39:46:cf:48:37:03:94:b9:c3:c8:20:13:78:e4:41:35:
ba:9f:ec:de:1d:62:4d:b1:69:31:66:3f:71:6a:9a:72:28:dd:
39:58:46:c7:c7:70:fa:f2:cd:5e:82:db:c1:cd:69:8d:e4:65:
6b:5c:1a:07:b8:07:ac:59:db:23:d2:45:f8:00:98:3e:0c:ef:
95:74:17:15:38:6c:71:48:95:a9:7d:d0:04:88:e6:13:22:0b:
46:9f:a9:4c:fa:69:44:1b:ba:44:af:b9:27:4e:b5:9d:d7:a6:
7f:7b:ba:55:f6:4b:fd:03:9d:f1:48:d9:f8:87:98:03:24:60:
10:1c:5b:fd:fb:4d:8b:23:7b:14:29:ca:04:d5:80:ff:df:88:
fc:d4:c5:99:cd:65:41:82:b0:43:04:be:d8:77:6f:f5:38:37:
b6:b5:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:01 2025 by rpki-client