Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnxpjOQ6Sdg5ToJu3lsu5k1cCUQ.roa
File: mnxpjOQ6Sdg5ToJu3lsu5k1cCUQ.roa (raw, json)
Hash identifier: Co0yU8/lE+gXGb97c+ylRlTAQwXKmqlzSeepH2dlFtg=
Subject key identifier: 9A:7C:69:8C:E4:3A:49:D8:39:4E:82:6E:DE:5B:2E:E6:4D:5C:09:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893C7F1CE9DCC6BE6EA0661EF1DD46316F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnxpjOQ6Sdg5ToJu3lsu5k1cCUQ.roa
Signing time: Sun 09 Jul 2023 21:11:50 +0000
ROA not before: Sun 09 Jul 2023 21:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3c:7f:1c:e9:dc:c6:be:6e:a0:66:1e:f1:dd:46:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 21:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a7c698ce43a49d8394e826ede5b2ee64d5c0944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:ea:b5:ce:14:9d:98:6d:8c:a2:a1:60:5e:
b3:30:f4:d9:7a:64:81:7c:ca:19:ff:da:c3:7a:55:
a0:3f:43:1b:69:a7:45:fa:6e:4e:02:a4:fe:0b:8b:
9f:b5:51:52:00:99:a5:3a:f2:45:39:82:13:70:d5:
39:01:02:05:72:6b:bb:9a:b8:d1:1b:93:85:ac:f7:
c7:c9:f5:39:b4:b2:78:c1:b1:30:59:a0:75:5f:1d:
6a:ed:b5:47:ad:5f:1f:74:f3:dc:74:58:8d:43:97:
b4:9b:1f:61:04:10:07:a0:b4:9c:d3:25:c7:01:8c:
e1:3a:34:1d:e4:8b:2c:5b:35:41:68:a7:52:68:ef:
d1:b6:8f:4c:ac:1e:03:fd:e5:46:6e:6c:76:7e:cc:
48:d3:40:d2:24:73:cd:dc:6b:e0:04:45:5e:ca:02:
96:0e:8c:7c:d8:4c:40:21:e1:d1:94:8d:88:5d:7e:
60:0c:e0:5f:80:a4:93:5c:32:e1:d2:08:63:1a:08:
09:0d:f1:1a:04:f6:4d:14:ae:04:df:f7:76:47:ed:
71:bf:3d:f0:f4:f9:57:02:6d:c9:c2:8b:0b:6d:ab:
f9:51:1c:ea:b6:99:a2:6f:c3:8d:3f:1f:fe:83:91:
b1:7b:f2:d6:71:16:ac:a2:6d:53:76:52:73:2d:98:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:69:8C:E4:3A:49:D8:39:4E:82:6E:DE:5B:2E:E6:4D:5C:09:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mnxpjOQ6Sdg5ToJu3lsu5k1cCUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:42:7b:d7:b2:f0:2c:9e:28:7f:cd:c5:5f:ac:ae:a1:8c:db:
37:72:06:99:52:e8:6f:cc:f7:9c:2d:5f:49:a3:a1:cc:82:08:
8f:b3:88:5c:45:3d:ec:d9:df:5a:f4:80:7e:0c:fa:ec:52:d0:
1b:5d:28:c7:eb:1d:b7:19:83:98:1a:bb:3e:52:f1:6a:ed:a0:
a2:ae:78:03:d7:4c:e1:c7:32:3d:ec:b8:73:ae:03:71:4b:c2:
96:33:d4:9a:92:80:fa:e2:36:72:55:4c:19:03:71:9c:93:2d:
aa:38:81:63:5d:4d:89:32:bc:aa:72:a1:c0:3a:95:43:87:9f:
53:ea:18:02:66:54:62:ce:7f:1d:ae:84:c7:1d:21:64:db:09:
89:65:a2:bd:a5:d1:1f:23:8f:97:f7:99:9d:cd:d0:c8:1c:35:
17:89:0a:f8:b0:1a:3c:29:2a:0f:a3:92:12:65:6b:2a:8e:65:
09:59:ac:4f:75:47:07:85:14:49:8c:16:dd:83:33:66:b6:08:
c9:a6:7a:04:7a:58:b1:f2:de:60:c2:d8:c5:3f:b4:9c:94:09:
26:ff:94:b2:e1:84:d8:6f:5e:e7:96:66:10:23:a2:2f:51:08:
eb:2f:38:97:cb:f5:71:4d:6a:22:2d:a8:48:95:1d:37:86:2a:
80:b9:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:05 2025 by rpki-client