Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mclA7PchKLvQd9SXuONikn59h1s.roa
File: mclA7PchKLvQd9SXuONikn59h1s.roa (raw, json)
Hash identifier: iJ9DA468ZljFDvnyIDy6uutrRclp7weHAlSBHBIHAto=
Subject key identifier: 99:C9:40:EC:F7:21:28:BB:D0:77:D4:97:B8:E3:62:92:7E:7D:87:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188932FB458FEC099C86B27DEA7F4352D3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mclA7PchKLvQd9SXuONikn59h1s.roa
Signing time: Wed 07 Jun 2023 00:09:17 +0000
ROA not before: Wed 07 Jun 2023 00:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:2f:b4:58:fe:c0:99:c8:6b:27:de:a7:f4:35:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 00:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c940ecf72128bbd077d497b8e362927e7d875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:2a:24:3c:c1:4d:a4:01:61:9b:66:c8:43:
2c:1e:49:d0:f0:f8:6e:75:96:a8:bd:ec:44:fb:35:
00:64:5b:a5:49:1f:7c:75:84:80:09:d1:4c:01:fa:
0a:cf:46:8c:20:ba:dd:02:03:5d:ea:cf:d8:39:47:
08:99:d1:16:db:10:ee:e3:ad:c8:60:43:c4:3f:34:
1b:48:91:d4:16:b0:5e:0c:90:8f:b3:08:16:d2:68:
27:30:8e:90:b5:27:ad:80:1a:19:2f:16:a8:e9:4c:
0b:c7:eb:4e:0c:14:fa:24:09:bd:d7:a4:b4:dc:94:
84:b2:e0:38:64:b2:27:f6:99:7d:6a:1c:5e:57:62:
bd:30:53:77:fa:95:ad:c7:ff:9d:d0:db:bb:9b:e7:
39:94:10:29:d0:02:81:89:4a:ba:d5:ff:5a:12:e3:
eb:a6:96:44:51:d4:b2:73:34:2b:8b:af:de:e8:29:
30:90:c2:47:5e:92:53:a3:19:11:70:29:54:bc:59:
ab:ea:78:1c:69:49:e7:11:69:f4:0b:30:2f:48:06:
59:2a:01:1b:0b:03:eb:08:41:38:4d:f5:8c:54:8c:
56:d2:16:f8:72:28:ea:3c:43:fd:53:ce:85:b0:3e:
d7:d6:48:eb:4f:b3:2f:1a:f7:67:98:53:68:a7:e2:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:40:EC:F7:21:28:BB:D0:77:D4:97:B8:E3:62:92:7E:7D:87:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mclA7PchKLvQd9SXuONikn59h1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:1d:7a:2b:0a:8e:8f:94:57:d4:ad:8b:83:c4:23:fc:9f:f5:
ef:8b:74:47:1d:01:1a:b7:09:92:ae:ad:77:bb:95:63:b8:ca:
3c:8a:64:56:5e:8a:a6:1a:c8:ec:8e:0d:55:12:83:10:02:49:
51:23:ec:26:31:a7:f3:fa:71:eb:0e:ef:33:bb:76:75:b0:51:
03:ef:65:43:9d:fc:f4:41:e5:30:88:a7:fa:5c:af:62:b3:ea:
bc:0b:97:91:e0:d2:dc:59:4e:2b:cb:92:97:74:91:7e:a4:d1:
40:3a:31:53:b4:d8:3c:e0:e8:32:e3:3e:88:50:8a:aa:3b:f6:
65:dd:e3:27:f4:ad:f9:b8:e6:94:02:88:2f:11:e3:47:b9:9f:
fc:b0:9d:a9:5c:40:55:94:4b:77:c5:54:10:39:f7:46:f6:be:
c9:76:e8:fd:d3:fe:91:fc:80:53:da:d9:46:2e:c1:1d:37:b1:
13:f1:99:5b:cc:1e:f1:d2:e8:a6:4c:63:b4:bf:23:f4:49:26:
55:c7:e1:f4:d9:df:b4:ed:d4:ac:59:e4:f7:50:2f:ec:26:4e:
a1:ab:02:2a:3a:e0:4d:d0:d9:6b:30:9b:88:52:c6:5e:a1:b1:
b2:32:69:73:e0:46:bd:9a:0c:7b:67:28:59:68:f0:2e:db:98:
d2:43:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:27 2025 by rpki-client