Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mz-5IqXD4GI24k1RHy3P0aAMy5s.roa
File: mz-5IqXD4GI24k1RHy3P0aAMy5s.roa (raw, json)
Hash identifier: kGRHhkQVEoK9v3RV9d7Wzu6xPKgaEWsKQpAgRtnwtUQ=
Subject key identifier: 9B:3F:B9:22:A5:C3:E0:62:36:E2:4D:51:1F:2D:CF:D1:A0:0C:CB:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187421B401E0F5B39379625BD4B5BEACB32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mz-5IqXD4GI24k1RHy3P0aAMy5s.roa
Signing time: Sun 02 Apr 2023 13:14:54 +0000
ROA not before: Sun 02 Apr 2023 13:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:42:1b:40:1e:0f:5b:39:37:96:25:bd:4b:5b:ea:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 13:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b3fb922a5c3e06236e24d511f2dcfd1a00ccb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:7b:3b:8c:7d:ad:bb:90:a3:d4:97:15:86:
7e:13:dd:92:20:5a:46:4f:b7:48:ff:4a:a7:dc:5a:
b2:c1:3c:a7:f0:cc:3c:68:2e:5a:7c:1f:c9:84:11:
01:9b:d0:97:69:5d:bf:84:43:6e:53:a7:7e:9d:27:
63:f0:f9:43:89:e2:ca:bd:ed:f3:89:14:6d:ff:c8:
a4:2b:29:9b:83:2b:cd:49:f6:6d:32:47:03:ed:e7:
77:81:2c:3d:6d:be:cc:d2:9d:e3:b1:ba:1e:ba:56:
32:df:51:d7:ee:6d:0a:97:d9:70:24:b5:98:20:20:
b2:9d:93:91:a7:37:02:0e:5c:43:7c:7f:26:58:c6:
1a:51:10:8e:7f:3c:d4:c4:5b:9e:97:0c:4e:1e:c6:
68:63:24:5a:da:07:2f:02:b6:5c:e5:e4:97:98:e5:
76:b7:3c:c2:ba:c0:40:44:ee:8d:16:b9:cc:d9:5b:
1d:ae:47:6f:04:1c:cc:96:36:16:30:dc:72:83:a2:
2f:e8:9f:6c:7c:30:85:ec:ca:9d:ae:41:a8:e8:de:
6c:cd:c5:91:d6:38:74:b2:e2:ba:41:83:19:f6:23:
a1:06:80:71:a6:37:b5:0e:30:4c:17:73:66:6d:18:
27:a4:cb:1d:b2:6c:0a:40:85:59:c4:89:4e:4a:c4:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:B9:22:A5:C3:E0:62:36:E2:4D:51:1F:2D:CF:D1:A0:0C:CB:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mz-5IqXD4GI24k1RHy3P0aAMy5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:8d:f0:bc:23:a7:58:97:fb:c7:0a:72:42:3f:d4:92:ac:f4:
3c:cd:f9:6c:a0:b4:fd:59:1d:5e:5d:3e:fd:0a:3a:7e:9a:e3:
84:77:c4:d3:88:1f:3d:4d:fd:14:f2:95:37:a9:a6:df:56:4a:
dd:6c:3f:e1:3d:3f:1a:53:f6:c3:79:58:f9:ef:2d:92:bf:fb:
13:2d:92:10:47:36:af:2e:30:d4:aa:1f:94:ab:9d:bf:85:de:
75:c3:dd:b7:b8:8b:87:3b:f2:02:e4:11:de:20:1b:fb:18:0b:
d1:71:80:0a:a5:13:15:4a:fd:ac:68:61:c7:3d:7e:b4:86:7d:
6f:84:88:b9:bf:8c:5c:3f:5c:88:bf:10:b4:30:39:cc:25:bf:
90:b0:44:93:a3:7d:b7:84:aa:e8:9f:af:59:08:87:b1:93:62:
41:c8:72:35:ae:fb:e9:de:bf:b1:cf:3b:7e:8c:ca:d8:14:2b:
d3:c2:07:53:99:f3:16:60:e7:d5:b3:03:0f:9d:11:70:ce:5c:
da:e7:5b:b0:a2:75:c0:5b:88:7a:3c:b7:8e:59:7a:1f:df:81:
81:06:04:c1:b6:0b:27:67:3d:32:c1:0b:6c:57:c0:67:23:4e:
fa:c4:ad:76:c6:d4:0a:88:8a:92:5f:4b:7e:78:68:7c:9e:f5:
ed:a9:5d:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdCG0AeD1s5N5YlvUtb6ssyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAyMTMxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjNmYjkyMmE1YzNlMDYyMzZlMjRkNTExZjJkY2ZkMWEwMGNjYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjd7O4x9rbuQo9SXFYZ+E92SIFpG
T7dI/0qn3FqywTyn8Mw8aC5afB/JhBEBm9CXaV2/hENuU6d+nSdj8PlDieLKve3z
iRRt/8ikKymbgyvNSfZtMkcD7ed3gSw9bb7M0p3jsboeulYy31HX7m0Kl9lwJLWY
ICCynZORpzcCDlxDfH8mWMYaURCOfzzUxFuelwxOHsZoYyRa2gcvArZc5eSXmOV2
tzzCusBARO6NFrnM2VsdrkdvBBzMljYWMNxyg6Iv6J9sfDCF7MqdrkGo6N5szcWR
1jh0suK6QYMZ9iOhBoBxpje1DjBMF3NmbRgnpMsdsmwKQIVZxIlOSsTOYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJs/uSKlw+BiNuJNUR8tz9GgDMubMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbXotNUlxWEQ0R0kyNGsxUkh5M1AwYUFNeTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACCN8Lwjp1iX+8cKckI/
1JKs9DzN+WygtP1ZHV5dPv0KOn6a44R3xNOIHz1N/RTylTeppt9WSt1sP+E9PxpT
9sN5WPnvLZK/+xMtkhBHNq8uMNSqH5Srnb+F3nXD3be4i4c78gLkEd4gG/sYC9Fx
gAqlExVK/axoYcc9frSGfW+EiLm/jFw/XIi/ELQwOcwlv5CwRJOjfbeEquifr1kI
h7GTYkHIcjWu++nev7HPO36MytgUK9PCB1OZ8xZg59WzAw+dEXDOXNrnW7CidcBb
iHo8t45Zeh/fgYEGBMG2CydnPTLBC2xXwGcjTvrErXbG1AqIipJfS354aHye9e2p
XZY=
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:29 2025 by rpki-client