Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcpNPKMoEEyY1vqYD2Sw428YoOM.roa
File: mcpNPKMoEEyY1vqYD2Sw428YoOM.roa (raw, json)
Hash identifier: yBnao97laxxhGOY4kFFrA1IKkMlgwxkHFMZQa7tVAKM=
Subject key identifier: 99:CA:4D:3C:A3:28:10:4C:98:D6:FA:98:0F:64:B0:E3:6F:18:A0:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E14BA6826D0619BAFFD439DDB926B988
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcpNPKMoEEyY1vqYD2Sw428YoOM.roa
Signing time: Thu 10 Aug 2023 21:12:58 +0000
ROA not before: Thu 10 Aug 2023 21:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:4b:a6:82:6d:06:19:ba:ff:d4:39:dd:b9:26:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 21:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99ca4d3ca328104c98d6fa980f64b0e36f18a0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:3e:3b:97:3e:9c:ed:ac:9b:f7:4b:3c:b4:
a7:19:12:22:c2:60:08:81:41:e1:9d:28:40:ee:53:
41:f5:68:fc:9c:d4:aa:30:2f:2a:c4:f1:b5:71:f5:
7e:d2:7d:28:56:03:d2:4a:d7:8e:75:6b:e5:d4:df:
cb:7f:84:10:3e:79:ec:a0:6f:f2:a7:18:1d:f5:87:
85:83:8e:d1:54:f2:f2:d6:65:55:2b:ad:a4:e5:84:
85:2a:85:52:9b:3d:30:1a:d2:db:36:73:50:9b:bb:
ba:66:27:12:73:a3:e3:c0:4c:c7:24:52:1b:24:16:
5b:fc:4b:7d:88:2b:e2:8c:da:69:45:83:11:05:9a:
a4:ab:97:54:fe:1e:63:a2:a3:5a:1e:35:ac:85:96:
e3:4e:0f:ff:32:8d:bd:de:96:86:d3:5d:4e:f3:29:
92:6d:12:a2:21:dd:69:80:e3:a5:bf:6d:94:d4:a9:
c0:2c:7d:e6:c7:25:0c:ea:0f:e9:28:fe:83:69:a9:
f5:18:09:11:4a:76:cf:a7:e7:97:0e:d2:3f:8f:33:
da:ce:20:34:b9:dd:33:13:17:65:48:e6:1b:eb:c3:
a7:84:3a:fd:a2:ef:aa:b5:f2:7e:19:41:f5:f1:54:
27:4f:4f:78:2b:5f:c1:96:4f:de:79:7a:2f:c2:9e:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:4D:3C:A3:28:10:4C:98:D6:FA:98:0F:64:B0:E3:6F:18:A0:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mcpNPKMoEEyY1vqYD2Sw428YoOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:42:c6:bc:bb:a5:82:ed:94:66:a2:64:cf:89:02:f5:3a:20:
ec:a5:d1:ba:b5:01:33:d9:f7:3d:2f:ed:43:9f:0d:f8:a6:65:
67:83:16:52:56:b0:ac:e3:2b:28:32:e7:99:64:9c:f1:8d:04:
16:12:5d:f3:fd:f5:bf:cd:32:72:4c:2d:69:6f:d1:5d:0a:84:
a7:29:59:84:3a:23:18:82:06:4a:83:ef:48:61:d1:25:96:1c:
84:82:c7:47:d8:70:49:3a:8c:6e:65:e4:0e:73:31:6d:2c:08:
d3:fc:3f:ed:8e:a2:7a:73:70:8d:40:46:c4:31:c7:a6:7a:1d:
ae:c6:c4:54:63:aa:6e:54:30:ce:e9:bb:f2:c1:45:31:18:ce:
92:3a:42:2c:f7:c4:78:bd:d7:ee:19:6b:2c:a9:7a:ca:46:ee:
e8:f4:30:b1:d7:e0:f1:8a:a5:22:98:d7:8a:84:b2:cf:3c:cb:
49:7b:0e:4c:2d:eb:ca:bd:b7:9a:eb:73:6e:62:f4:8b:fb:8a:
34:fc:c8:df:7f:79:7d:39:2b:e8:3e:68:fe:9f:55:1b:fd:bf:
f3:64:8a:12:c3:fa:7f:f4:53:f1:7d:9a:a6:0c:d1:3d:cf:2a:
a5:76:d6:23:06:54:ec:4d:c4:d6:ae:3a:7d:fb:7f:81:c6:d7:
59:73:13:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnhS6aCbQYZuv/UOd25JrmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEwMjExMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWNhNGQzY2EzMjgxMDRjOThkNmZhOTgwZjY0YjBlMzZmMThhMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujo+O5c+nO2sm/dLPLSnGRIiwmAI
gUHhnShA7lNB9Wj8nNSqMC8qxPG1cfV+0n0oVgPSSteOdWvl1N/Lf4QQPnnsoG/y
pxgd9YeFg47RVPLy1mVVK62k5YSFKoVSmz0wGtLbNnNQm7u6ZicSc6PjwEzHJFIb
JBZb/Et9iCvijNppRYMRBZqkq5dU/h5joqNaHjWshZbjTg//Mo293paG011O8ymS
bRKiId1pgOOlv22U1KnALH3mxyUM6g/pKP6Daan1GAkRSnbPp+eXDtI/jzPaziA0
ud0zExdlSOYb68OnhDr9ou+qtfJ+GUH18VQnT094K1/Blk/eeXovwp6a8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJnKTTyjKBBMmNb6mA9ksONvGKDjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbWNwTlBLTW9FRXlZMXZxWUQyU3c0MjhZb09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADNCxry7pYLtlGaiZM+J
AvU6IOyl0bq1ATPZ9z0v7UOfDfimZWeDFlJWsKzjKygy55lknPGNBBYSXfP99b/N
MnJMLWlv0V0KhKcpWYQ6IxiCBkqD70hh0SWWHISCx0fYcEk6jG5l5A5zMW0sCNP8
P+2OonpzcI1ARsQxx6Z6Ha7GxFRjqm5UMM7pu/LBRTEYzpI6Qiz3xHi91+4Zayyp
espG7uj0MLHX4PGKpSKY14qEss88y0l7Dkwt68q9t5rrc25i9Iv7ijT8yN9/eX05
K+g+aP6fVRv9v/NkihLD+n/0U/F9mqYM0T3PKqV21iMGVOxNxNauOn37f4HG11lz
E48=
-----END CERTIFICATE-----
Generated at Fri May 2 12:00:59 2025 by rpki-client