Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/muvLHx2eHNxLx5hvZ4yJ94lmQAU.roa
File: muvLHx2eHNxLx5hvZ4yJ94lmQAU.roa (raw, json)
Hash identifier: 53OISxbGMS9ebkhbJtSAXebIeHETZLz0rMTTe5Ytvk0=
Subject key identifier: 9A:EB:CB:1F:1D:9E:1C:DC:4B:C7:98:6F:67:8C:89:F7:89:66:40:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885CB0196771A8BD4A510B74B4C1588306
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/muvLHx2eHNxLx5hvZ4yJ94lmQAU.roa
Signing time: Sat 27 May 2023 10:10:24 +0000
ROA not before: Sat 27 May 2023 10:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:b0:19:67:71:a8:bd:4a:51:0b:74:b4:c1:58:83:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 10:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aebcb1f1d9e1cdc4bc7986f678c89f789664005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:e9:ad:e7:80:7e:6c:2d:81:68:04:29:fb:
95:12:56:39:da:c2:c4:35:45:c8:ae:92:07:25:d7:
31:96:0e:fc:fb:1d:46:e0:15:56:a0:67:28:0a:12:
ad:be:e4:1a:bb:69:68:c1:13:ba:24:78:93:3e:42:
cb:ec:67:f9:a5:ac:ea:97:57:81:f6:14:74:a9:b8:
f0:ba:04:4b:f9:a4:d8:3d:06:d1:f4:85:03:54:c3:
20:aa:c4:01:17:ab:44:65:07:52:54:4c:87:a7:bb:
13:a6:42:5f:3d:e0:c7:c6:4b:36:e4:e7:df:41:dc:
11:6e:a3:7c:2c:61:18:cf:48:b5:a3:ed:9c:14:d4:
79:cc:ab:c8:0c:79:20:d4:c2:8d:9e:0e:85:0f:45:
80:b1:fb:d2:9b:cb:27:be:93:9a:ec:84:da:4b:d7:
62:7c:6d:fc:b9:13:34:5d:b8:b3:e4:fd:87:b9:29:
56:a9:01:cc:52:c2:28:bc:43:e7:53:92:79:d1:51:
5e:14:15:9c:43:b6:ac:f2:2b:c8:16:a0:02:9d:51:
50:31:fe:a0:3f:ab:78:d5:e6:cd:88:85:97:8c:e1:
de:41:25:4b:fa:d7:85:23:8c:1b:d7:45:40:9c:2f:
6e:7c:de:de:9e:46:28:09:d6:a3:e6:65:38:d5:4d:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:CB:1F:1D:9E:1C:DC:4B:C7:98:6F:67:8C:89:F7:89:66:40:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/muvLHx2eHNxLx5hvZ4yJ94lmQAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:c2:6a:58:74:4e:49:c8:0e:27:9e:d3:a9:10:1d:ab:19:3b:
c4:3b:76:8b:40:0c:4c:6f:5a:38:a2:f7:67:93:28:c1:42:d6:
46:b5:c6:20:72:32:52:6e:b7:93:db:d1:c8:78:c1:69:53:e8:
dd:77:d5:62:e2:09:d7:32:c7:af:1d:56:28:8f:bd:fd:e7:6a:
8a:e0:bf:ba:21:2f:b4:83:eb:f7:17:3f:4a:47:2a:79:c3:35:
ed:3e:0f:ca:db:13:1b:b6:88:d4:96:c6:83:fc:e5:15:f7:c4:
ed:51:2b:73:9f:8b:0c:7c:51:63:cc:12:e6:6b:45:5c:64:b2:
0d:39:32:f7:95:f7:d5:ea:a7:ec:7e:72:7b:bf:9d:ec:06:21:
fd:b5:14:40:1d:3f:d7:6f:a7:ac:3d:45:57:78:49:77:cb:0f:
19:21:46:45:11:f0:4b:d1:69:55:06:58:b0:3c:9a:05:0e:85:
81:cc:4c:c8:74:01:af:e4:4f:5d:06:94:c5:ee:63:54:16:79:
b2:78:3f:9a:c4:aa:43:3f:55:c0:88:1b:d8:86:d2:31:28:da:
d4:d2:ee:c2:68:f1:92:88:d7:e5:4f:77:5f:4d:81:ef:aa:28:
c1:53:ae:40:7a:7f:2b:8f:37:28:d4:04:9f:e0:ee:4d:24:aa:
6c:5d:49:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhcsBlncai9SlELdLTBWIMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI3MTAxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWViY2IxZjFkOWUxY2RjNGJjNzk4NmY2NzhjODlmNzg5NjY0MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV/preeAfmwtgWgEKfuVElY52sLE
NUXIrpIHJdcxlg78+x1G4BVWoGcoChKtvuQau2lowRO6JHiTPkLL7Gf5pazql1eB
9hR0qbjwugRL+aTYPQbR9IUDVMMgqsQBF6tEZQdSVEyHp7sTpkJfPeDHxks25Off
QdwRbqN8LGEYz0i1o+2cFNR5zKvIDHkg1MKNng6FD0WAsfvSm8snvpOa7ITaS9di
fG38uRM0Xbiz5P2HuSlWqQHMUsIovEPnU5J50VFeFBWcQ7as8ivIFqACnVFQMf6g
P6t41ebNiIWXjOHeQSVL+teFI4wb10VAnC9ufN7enkYoCdaj5mU41U0Q4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJrryx8dnhzcS8eYb2eMifeJZkAFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbXV2TEh4MmVITnhMeDVodlo0eUo5NGxtUUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGLCalh0TknIDiee06kQ
HasZO8Q7dotADExvWjii92eTKMFC1ka1xiByMlJut5Pb0ch4wWlT6N131WLiCdcy
x68dViiPvf3naorgv7ohL7SD6/cXP0pHKnnDNe0+D8rbExu2iNSWxoP85RX3xO1R
K3Ofiwx8UWPMEuZrRVxksg05MveV99Xqp+x+cnu/newGIf21FEAdP9dvp6w9RVd4
SXfLDxkhRkUR8EvRaVUGWLA8mgUOhYHMTMh0Aa/kT10GlMXuY1QWebJ4P5rEqkM/
VcCIG9iG0jEo2tTS7sJo8ZKI1+VPd19Nge+qKMFTrkB6fyuPNyjUBJ/g7k0kqmxd
Sb8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:28 2025 by rpki-client