Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzUkg3E6XNBoy-T0EHC7UnLbZNI.roa
File: MzUkg3E6XNBoy-T0EHC7UnLbZNI.roa (raw, json)
Hash identifier: 0uJ3XmxuR3zWWzh0FFEUan9E3P5uOfk/bkYtQbKBoM0=
Subject key identifier: 33:35:24:83:71:3A:5C:D0:68:CB:E4:F4:10:70:BB:52:72:DB:64:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894BB4DC4A1BA92C934EE6C0276AA4EC7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzUkg3E6XNBoy-T0EHC7UnLbZNI.roa
Signing time: Wed 12 Jul 2023 20:04:51 +0000
ROA not before: Wed 12 Jul 2023 20:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:189:4bb4:4967/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:b4:dc:4a:1b:a9:2c:93:4e:e6:c0:27:6a:a4:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 20:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33352483713a5cd068cbe4f41070bb5272db64d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:a3:83:d4:4b:92:8a:f6:ae:79:ad:87:a4:
7a:00:68:f7:32:60:55:7f:4a:06:0f:8b:33:2a:ae:
10:5a:ba:03:56:73:2f:cd:9e:f1:65:0e:f3:da:57:
a0:e5:29:a4:de:f6:f6:69:a7:81:3c:2b:da:a7:5b:
ed:3d:61:ce:71:84:49:e3:6c:8b:a1:bf:e5:a7:f7:
5c:b2:d0:b9:13:b4:55:3b:1f:cc:ae:3a:a4:2a:ed:
9a:cd:1b:eb:a1:50:4a:14:3f:20:fd:c5:12:c5:59:
68:83:b4:8b:4a:c6:bc:d9:8d:3e:89:58:31:75:c9:
7c:4d:d9:a2:76:34:87:6c:ce:05:98:4d:6b:9b:1f:
2b:9e:83:08:16:a9:d5:81:50:d7:81:8e:f3:bb:03:
c0:9e:68:9a:e9:3e:c8:a6:54:00:16:35:3d:59:99:
69:81:09:12:19:0c:d8:e3:fe:08:0d:cc:9d:97:9c:
63:0b:fb:8c:94:52:25:e1:fa:8d:5e:9f:46:a6:f6:
95:10:88:33:4a:a7:c8:d1:dc:59:99:db:0b:4f:26:
ea:ab:c5:08:17:13:36:d3:27:0a:e9:fb:c7:46:e8:
b7:f3:98:ed:63:6d:85:b6:03:cd:58:8e:56:26:9e:
af:f4:ca:8c:7c:62:d7:36:74:56:b8:c5:bf:68:a3:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:24:83:71:3A:5C:D0:68:CB:E4:F4:10:70:BB:52:72:DB:64:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MzUkg3E6XNBoy-T0EHC7UnLbZNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:85:4a:da:e4:06:da:65:ee:73:b0:34:60:4b:e8:6d:c2:e4:
27:e9:cf:57:d9:d3:65:6c:05:18:6e:60:ac:52:d1:66:17:a7:
99:38:2e:a8:80:08:42:79:5a:74:25:70:6e:91:50:a8:98:73:
45:36:0a:d0:cb:63:9c:45:1d:fb:86:da:e3:46:84:a7:b7:c3:
d4:3c:18:c3:d0:18:fe:ae:35:b8:c3:0f:47:3a:90:0d:b9:90:
ba:94:58:e7:ee:51:49:23:b0:9c:c4:b5:4d:b2:fe:37:2d:a9:
c2:8b:81:20:b1:f7:28:57:dc:bd:be:d5:49:aa:22:7f:5f:88:
d5:6f:a6:e7:7b:1c:8f:4a:e4:a6:13:05:7d:3d:90:ff:6a:e1:
e0:c9:89:4e:4c:a9:6c:c1:80:96:0e:fc:6b:39:16:51:4c:07:
14:7b:cf:0d:00:81:9c:41:9f:59:e1:69:6c:54:44:17:d3:90:
22:88:50:22:91:ec:34:2a:c2:00:ad:a7:55:90:16:e1:be:30:
5e:a0:37:cb:7b:d7:7e:db:6e:e3:ad:69:15:70:fb:cc:2f:eb:
82:d6:42:66:e2:95:59:b6:9d:0a:fe:12:09:84:7e:c1:e5:47:
a4:a5:b3:54:91:1a:bd:46:90:a1:15:76:fa:bf:72:a9:8d:07:
ce:97:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:43 2025 by rpki-client