Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcgokerx5j5RrjWhhjmzwpcTYU4.roa
File: mcgokerx5j5RrjWhhjmzwpcTYU4.roa (raw, json)
Hash identifier: zrqhxrLOGKzQoBqKJ54BmGeYrwojB4dc1YfsbVXfJYg=
Subject key identifier: 99:C8:28:91:EA:F1:E6:3E:51:AE:35:A1:86:39:B3:C2:97:13:61:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A22ED6FEC6566E0A1E992136A9846DDE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcgokerx5j5RrjWhhjmzwpcTYU4.roa
Signing time: Wed 23 Aug 2023 15:05:00 +0000
ROA not before: Wed 23 Aug 2023 15:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:22ed:2b5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:ed:6f:ec:65:66:e0:a1:e9:92:13:6a:98:46:dd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 15:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c82891eaf1e63e51ae35a18639b3c29713614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:ec:fc:9b:ce:2f:a3:95:c0:e5:37:28:5b:
9f:0e:40:3b:3b:15:73:fd:4c:0d:84:d7:03:99:21:
48:bb:3d:fb:05:cb:fe:04:74:11:c1:3b:cb:79:6c:
ae:f7:cc:f5:05:60:91:1f:50:d7:35:8c:dc:71:88:
5f:9a:03:73:a2:69:5b:f5:47:1a:0f:27:aa:39:1f:
bf:16:35:a0:b8:6c:60:70:d6:6a:2f:8d:e8:f0:72:
c0:0a:48:28:a9:d5:7e:a6:60:0b:6c:ed:8d:c3:e6:
f9:90:9d:64:b6:ba:1d:82:e9:84:d9:9d:45:ca:8a:
5b:b9:3d:b4:f9:4e:01:1e:b5:e4:37:96:83:5a:f4:
f4:01:7e:e9:72:41:37:15:0e:99:1b:90:a0:8a:e2:
b8:cc:f5:44:35:60:8b:fb:b8:65:a5:fa:52:8e:a7:
6d:b8:86:9e:0c:71:61:5f:74:5d:95:de:c0:31:23:
c5:b2:f6:c4:8a:f6:13:8b:d6:35:b0:9b:06:f5:0c:
29:b0:c1:17:6f:e4:af:35:7d:74:87:38:2d:3e:79:
28:25:1f:cc:f6:49:1f:a3:7f:88:d9:25:30:0c:3a:
11:b1:c4:b4:40:da:4b:ac:b2:9c:bb:2e:fd:d2:5e:
0f:f9:42:9e:8d:f0:cf:b5:f3:60:f8:0f:77:08:e0:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:28:91:EA:F1:E6:3E:51:AE:35:A1:86:39:B3:C2:97:13:61:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcgokerx5j5RrjWhhjmzwpcTYU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:b8:98:fe:47:d8:43:83:aa:95:e0:1c:20:12:91:73:82:bf:
64:58:73:be:8a:e5:10:80:86:88:07:c7:3e:ee:43:4c:55:37:
b1:c2:ae:ea:8d:91:6f:9b:7d:48:bd:1a:2f:d7:31:ba:3a:33:
69:32:65:a2:17:f6:78:a6:ad:a3:a2:d6:1c:b4:26:a7:91:fb:
ed:9a:a6:87:02:29:81:e7:ac:a2:4e:11:db:cf:f1:49:64:2b:
b6:aa:c7:fd:1f:1d:69:e8:04:a5:b2:38:06:72:bf:34:d8:d5:
4f:f9:74:1f:f5:45:0b:9d:51:d3:0b:ec:15:13:62:d1:ee:ea:
54:e9:69:e1:01:6c:45:bb:e7:09:40:b8:2e:a0:46:67:98:89:
35:af:70:77:01:60:7e:66:d8:91:16:35:2f:de:f4:62:5d:b8:
99:4a:62:09:e6:37:1f:ab:cc:a4:ad:f4:bc:44:ee:59:4a:3c:
c1:34:4c:07:59:38:97:de:bf:2a:2c:74:f2:74:ee:90:49:c4:
aa:6f:e2:2f:90:5e:3f:66:89:45:9e:20:b4:05:08:8b:53:46:
15:41:cd:36:d8:dd:51:f6:02:cb:44:7a:82:01:d5:27:44:d5:
81:94:1f:79:32:e7:34:14:4f:3f:4e:55:c1:0b:db:e6:93:83:
63:1a:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:59 2025 by rpki-client