Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mpw4o79d0WMAQQxP2QJSjpDGd1E.roa
File: Mpw4o79d0WMAQQxP2QJSjpDGd1E.roa (raw, json)
Hash identifier: 6tC/MSXjQz1HrgqZ6D1vFKcV2+dpI6NIftEq20Qw+28=
Subject key identifier: 32:9C:38:A3:BF:5D:D1:63:00:41:0C:4F:D9:02:52:8E:90:C6:77:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872FDCC150134D0A63924AA78D8F3BCCB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mpw4o79d0WMAQQxP2QJSjpDGd1E.roa
Signing time: Thu 30 Mar 2023 00:13:29 +0000
ROA not before: Thu 30 Mar 2023 00:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2f:dc:c1:50:13:4d:0a:63:92:4a:a7:8d:8f:3b:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 00:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=329c38a3bf5dd16300410c4fd902528e90c67751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:e4:22:1a:f2:c0:b1:b9:58:bf:93:18:42:
08:a1:36:f5:d3:36:dd:d6:1a:9d:9e:93:50:7d:c3:
82:98:77:5b:1f:ab:5d:84:97:9f:eb:cb:d0:6c:54:
2a:f4:e4:e8:56:f8:31:71:e6:20:89:f2:1c:5a:6b:
44:b6:80:07:d0:42:66:22:57:36:62:80:a2:b4:bb:
c5:e0:9c:a5:d0:cc:19:3d:1e:1b:e1:bf:09:6f:6a:
1e:a0:ce:28:3c:ef:ab:6d:32:30:31:e9:fd:40:66:
24:cb:54:f9:49:99:c8:cd:df:ac:6d:d5:39:77:8e:
6a:65:7e:19:03:fc:4c:3f:6e:56:19:65:9c:b2:84:
01:7e:ea:ab:11:fa:70:28:77:89:e9:40:7d:61:6f:
24:47:dc:a7:64:a0:99:eb:46:fc:28:4c:c9:1f:bb:
d7:93:f9:cf:72:b8:a3:ca:5c:b8:61:a7:24:1c:ba:
e8:22:0f:d1:15:4b:b3:a6:04:51:b9:1f:59:92:24:
5d:46:74:1a:5d:90:aa:a1:60:4c:3e:5b:89:25:03:
0a:2e:75:ee:91:40:66:7d:ba:44:a7:85:61:bc:9f:
4b:18:0f:f9:fe:1c:37:bd:09:a0:67:f9:6f:7a:81:
5b:a5:b6:6d:12:e7:86:14:52:6c:4a:cf:c1:73:7a:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:38:A3:BF:5D:D1:63:00:41:0C:4F:D9:02:52:8E:90:C6:77:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mpw4o79d0WMAQQxP2QJSjpDGd1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3d:f2:10:1f:7e:0b:c2:99:50:34:7b:e7:0e:68:bb:4f:f7:
8f:d9:9b:78:2c:bc:34:83:69:1f:4e:fb:3b:f1:ba:59:1e:95:
31:bc:7b:15:ef:1e:34:d7:d7:03:23:f1:c5:70:dc:b2:e2:de:
60:18:2f:0c:0c:82:e1:5e:93:82:a5:b9:6d:b2:98:b4:77:69:
2f:16:f2:14:3d:20:b9:b7:59:d0:46:cf:9f:fd:a2:2f:fd:f6:
e6:38:e9:8c:5e:25:37:7a:48:7f:c8:b0:81:43:f3:60:5b:a4:
07:88:c0:df:f2:05:b1:a3:46:f2:db:d0:10:95:f8:6e:35:aa:
20:69:ff:94:87:ab:bc:c9:23:dd:fa:27:77:83:d9:78:ca:c6:
37:ab:61:93:5b:ee:f4:61:82:69:34:9a:68:2a:bd:d3:30:eb:
9e:7e:22:0b:01:46:f8:18:0b:bb:7f:88:26:91:00:aa:74:e1:
81:6b:1d:c8:8d:72:be:57:95:9e:27:24:06:b3:a0:f4:5b:ee:
54:ca:90:bf:ef:46:b9:7a:29:7e:05:8c:0a:25:7a:7a:59:d9:
38:1e:78:4a:d4:41:ea:b2:66:8c:7e:b2:6e:62:9d:69:ae:55:
87:1f:ce:39:ab:97:92:43:d2:bb:f3:0d:6e:4d:c2:73:b9:f8:
7f:6a:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:26 2025 by rpki-client