Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzOIWQ9JiGuM_SxoJ83iLH12Fi4.roa
File: MzOIWQ9JiGuM_SxoJ83iLH12Fi4.roa (raw, json)
Hash identifier: zYKyF6Jo/B/7YeZBriHqC1LKZU0VOpuIa3p6gV23Xmc=
Subject key identifier: 33:33:88:59:0F:49:88:6B:8C:FD:2C:68:27:CD:E2:2C:7D:76:16:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186842BE6E6DBA0A648386A6893B85AE1E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzOIWQ9JiGuM_SxoJ83iLH12Fi4.roa
Signing time: Fri 24 Feb 2023 16:05:14 +0000
ROA not before: Fri 24 Feb 2023 16:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:842a:fbc6/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:2b:e6:e6:db:a0:a6:48:38:6a:68:93:b8:5a:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 16:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333388590f49886b8cfd2c6827cde22c7d76162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:93:3f:04:49:83:60:64:9b:f7:45:38:32:
ef:8f:90:31:37:ee:4b:36:41:66:25:d7:52:dd:2c:
1d:93:72:d3:a8:cb:a8:34:d7:82:b7:e8:bf:4b:a6:
55:62:92:96:38:ad:ca:a5:ff:4f:f9:23:c6:ae:d2:
17:f3:f5:fc:e7:fa:ed:d0:a2:c0:e0:a6:61:ef:bf:
ac:ff:e8:70:f7:b5:c6:f7:6d:c6:25:a1:9f:75:66:
31:a5:5f:c4:f6:6f:37:ae:0d:c2:67:a1:e9:11:dc:
2e:2d:56:84:48:ab:83:27:20:e2:89:59:94:0a:29:
87:ea:41:b8:01:a3:e1:cf:37:e6:0b:0f:17:b1:cc:
a8:2e:1d:a3:cc:54:73:c3:4c:54:b6:17:e8:9c:a3:
1b:65:5b:66:a0:46:76:2b:78:65:e3:66:48:00:71:
09:63:16:14:c3:76:99:59:86:15:af:1b:6b:33:bb:
24:45:8e:22:34:b7:1b:cc:e2:77:95:a9:d6:14:a8:
4a:f5:30:32:1c:53:21:7d:83:46:57:f7:a7:6b:17:
5f:4e:ee:db:04:04:d1:fd:29:d7:f2:83:b6:b2:40:
34:0f:e6:01:02:af:9b:d6:b9:78:3e:69:49:ea:16:
56:18:9d:46:98:55:29:b7:56:31:5d:a1:85:62:4d:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:88:59:0F:49:88:6B:8C:FD:2C:68:27:CD:E2:2C:7D:76:16:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzOIWQ9JiGuM_SxoJ83iLH12Fi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:b2:38:e2:1c:3e:42:db:62:92:9a:51:75:1c:b8:1d:8d:ba:
33:31:06:9c:5e:60:ca:8b:00:f6:45:17:a8:a7:5a:90:c3:4f:
39:44:63:53:03:09:d3:19:1b:b8:02:ca:11:41:f0:43:f4:2f:
40:3b:89:36:a5:4b:ed:9e:f7:57:16:f8:cc:dd:eb:4f:5f:00:
45:8b:b0:9b:c7:ec:c4:9a:f7:3b:6d:95:18:8a:9b:e2:03:c5:
d5:e0:b1:e6:f6:d6:14:35:92:98:bf:d6:af:fe:90:68:1c:10:
ad:5b:86:37:48:9e:31:1c:d5:be:6c:b1:41:df:0f:b0:e6:d3:
6e:41:ff:09:36:94:75:67:9e:2c:55:0d:78:a5:5e:e7:0b:af:
b7:ad:83:99:e0:10:8d:4b:21:4b:b2:ed:02:1b:32:61:99:81:
7d:3c:fa:15:4f:87:c2:3a:bb:ae:f5:0e:6d:fc:94:72:7b:01:
68:a5:ab:82:aa:81:16:3e:53:d2:62:ee:12:d7:d6:26:bc:48:
35:cc:37:94:ec:00:c6:03:50:b1:4f:02:54:c0:c8:78:a5:e3:
8c:6e:00:b2:82:f9:de:1a:96:ef:09:1a:13:e6:28:8d:e9:71:
17:fe:f9:ac:fd:87:af:9e:5d:42:d9:4d:01:62:d3:e7:35:92:
4b:8c:9f:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaEK+bm26CmSDhqaJO4WuHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI0MTYwNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzMzODg1OTBmNDk4ODZiOGNmZDJjNjgyN2NkZTIyYzdkNzYxNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgmTPwRJg2Bkm/dFODLvj5AxN+5L
NkFmJddS3Swdk3LTqMuoNNeCt+i/S6ZVYpKWOK3Kpf9P+SPGrtIX8/X85/rt0KLA
4KZh77+s/+hw97XG923GJaGfdWYxpV/E9m83rg3CZ6HpEdwuLVaESKuDJyDiiVmU
CimH6kG4AaPhzzfmCw8XscyoLh2jzFRzw0xUthfonKMbZVtmoEZ2K3hl42ZIAHEJ
YxYUw3aZWYYVrxtrM7skRY4iNLcbzOJ3lanWFKhK9TAyHFMhfYNGV/enaxdfTu7b
BATR/SnX8oO2skA0D+YBAq+b1rl4PmlJ6hZWGJ1GmFUpt1YxXaGFYk13ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDMziFkPSYhrjP0saCfN4ix9dhYuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXpPSVdROUppR3VNX1N4b0o4M2lMSDEyRmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADiyOOIcPkLbYpKaUXUc
uB2NujMxBpxeYMqLAPZFF6inWpDDTzlEY1MDCdMZG7gCyhFB8EP0L0A7iTalS+2e
91cW+Mzd609fAEWLsJvH7MSa9zttlRiKm+IDxdXgseb21hQ1kpi/1q/+kGgcEK1b
hjdInjEc1b5ssUHfD7Dm025B/wk2lHVnnixVDXilXucLr7etg5ngEI1LIUuy7QIb
MmGZgX08+hVPh8I6u671Dm38lHJ7AWilq4KqgRY+U9Ji7hLX1ia8SDXMN5TsAMYD
ULFPAlTAyHil44xuALKC+d4alu8JGhPmKI3pcRf++az9h6+eXULZTQFi0+c1kkuM
n2g=
-----END CERTIFICATE-----
Generated at Thu May 1 13:03:39 2025 by rpki-client