Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MsCFshltK6browpBMiT39jXqIYM.roa
File: MsCFshltK6browpBMiT39jXqIYM.roa (raw, json)
Hash identifier: pynADaKvWbOozYHC2Q/a3iTvtvRxWOE/JiGb9kZwqtA=
Subject key identifier: 32:C0:85:B2:19:6D:2B:A6:EB:A3:0A:41:32:24:F7:F6:35:EA:21:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018522FF4E52C8DD6393F2ECA3CEE7253B33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MsCFshltK6browpBMiT39jXqIYM.roa
Signing time: Sun 18 Dec 2022 02:10:35 +0000
ROA not before: Sun 18 Dec 2022 02:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:ff:4e:52:c8:dd:63:93:f2:ec:a3:ce:e7:25:3b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 02:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32c085b2196d2ba6eba30a413224f7f635ea2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:7f:ce:ed:a6:0c:ef:0a:4d:a5:69:1e:ae:
a0:cf:c1:73:1c:61:cf:6d:88:5f:96:40:3d:e3:2e:
5c:e0:69:07:26:d8:52:ea:68:56:ba:73:8d:22:f9:
0e:ec:e6:00:89:c1:c4:3e:6a:5d:37:6b:7d:9d:5b:
09:2b:2f:34:38:76:96:a6:7a:9f:8a:d4:2e:bf:44:
75:d6:f9:58:81:e5:21:1f:97:2a:ff:50:7e:a6:02:
f2:69:a6:46:04:18:ce:08:3f:5c:a2:5b:af:5b:a6:
28:a2:2e:5d:0b:4e:f6:47:e7:1e:50:6d:92:b6:9a:
af:46:29:35:bb:de:14:a7:22:ef:21:92:a2:6c:a8:
e7:80:9b:54:cf:e8:96:b8:d3:d5:ce:fb:da:c6:be:
f7:5c:c0:dc:91:74:d0:0c:10:9d:8f:82:fb:a4:f4:
5b:ea:21:f4:cb:21:f6:b4:09:87:49:f3:0c:d2:b8:
49:e9:d7:a3:65:94:86:a9:36:d1:7e:c0:ae:c8:ee:
a6:f7:38:c7:62:ee:db:c6:00:5d:3e:c5:50:5f:a7:
af:74:0e:06:ee:8c:fa:79:47:4b:0b:01:5d:ff:09:
f9:76:69:5e:9d:ba:1d:fa:27:bc:8f:23:93:4d:46:
1e:36:78:da:b0:97:05:8f:98:63:37:76:64:5f:5e:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:85:B2:19:6D:2B:A6:EB:A3:0A:41:32:24:F7:F6:35:EA:21:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MsCFshltK6browpBMiT39jXqIYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:9b:96:a3:44:d3:8d:05:3b:d0:f8:e0:a1:97:c7:fe:31:9f:
63:20:b6:75:ed:45:d6:da:6a:42:62:b9:27:d9:af:d3:73:85:
90:a1:38:29:a5:25:38:e2:64:c8:28:0c:0a:a9:ee:fb:24:c8:
e4:0a:49:f1:18:43:f5:ec:61:a3:c4:58:8a:17:ee:93:ed:8f:
0a:fe:3e:fc:31:4d:74:62:36:58:95:1a:e3:0c:9f:23:a4:d9:
30:b8:e9:9b:95:6f:25:63:bb:87:1a:2a:72:1e:95:2e:b1:98:
20:71:31:4b:6b:a2:97:22:a8:b4:3f:f2:e5:96:34:2b:f8:39:
9f:c0:5e:9f:1f:d4:6c:5b:48:70:f6:da:61:61:49:29:0f:b2:
ee:f2:ef:38:db:66:d6:f7:f4:cf:c2:fe:d8:2c:ff:48:85:1d:
b0:fd:05:c8:58:69:f0:9c:e7:b1:00:99:be:35:97:91:67:5e:
28:63:b6:66:12:b6:08:20:1a:5c:38:e4:2a:b2:19:07:de:b8:
d9:ff:98:27:f4:ef:8a:06:46:60:c6:ee:49:e4:89:13:86:3b:
46:b9:80:82:cd:19:ac:e2:52:7c:8a:d7:4d:cd:36:d1:2e:c2:
d3:1a:89:15:34:a4:49:d5:77:dc:92:da:32:a6:86:48:58:1b:
c9:81:f2:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUi/05SyN1jk/Lso87nJTszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE4MDIxMDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmMwODViMjE5NmQyYmE2ZWJhMzBhNDEzMjI0ZjdmNjM1ZWEyMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHN/zu2mDO8KTaVpHq6gz8FzHGHP
bYhflkA94y5c4GkHJthS6mhWunONIvkO7OYAicHEPmpdN2t9nVsJKy80OHaWpnqf
itQuv0R11vlYgeUhH5cq/1B+pgLyaaZGBBjOCD9coluvW6Yooi5dC072R+ceUG2S
tpqvRik1u94UpyLvIZKibKjngJtUz+iWuNPVzvvaxr73XMDckXTQDBCdj4L7pPRb
6iH0yyH2tAmHSfMM0rhJ6dejZZSGqTbRfsCuyO6m9zjHYu7bxgBdPsVQX6evdA4G
7oz6eUdLCwFd/wn5dmlenbod+ie8jyOTTUYeNnjasJcFj5hjN3ZkX15CNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDLAhbIZbSum66MKQTIk9/Y16iGDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXNDRnNobHRLNmJyb3dwQk1pVDM5alhxSVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJOblqNE040FO9D44KGX
x/4xn2MgtnXtRdbaakJiuSfZr9NzhZChOCmlJTjiZMgoDAqp7vskyOQKSfEYQ/Xs
YaPEWIoX7pPtjwr+PvwxTXRiNliVGuMMnyOk2TC46ZuVbyVju4caKnIelS6xmCBx
MUtropciqLQ/8uWWNCv4OZ/AXp8f1GxbSHD22mFhSSkPsu7y7zjbZtb39M/C/tgs
/0iFHbD9BchYafCc57EAmb41l5FnXihjtmYStgggGlw45CqyGQfeuNn/mCf074oG
RmDG7knkiROGO0a5gILNGaziUnyK103NNtEuwtMaiRU0pEnVd9yS2jKmhkhYG8mB
8pk=
-----END CERTIFICATE-----
Generated at Thu May 1 08:25:10 2025 by rpki-client