Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_MZ3MPkBIiN4oWpL1nsZXHkvfo.roa
File: v_MZ3MPkBIiN4oWpL1nsZXHkvfo.roa (raw, json)
Hash identifier: G8sWGMLt1dDhs9TuyFlnBtpOVM8lWhL9zRi2GzkJ3Tg=
Subject key identifier: BF:F3:19:DC:C3:E4:04:88:8D:E2:85:A9:2F:59:EC:65:71:E4:BD:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868C5B8C3A50492F2C1FA1AACEC56B903F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_MZ3MPkBIiN4oWpL1nsZXHkvfo.roa
Signing time: Sun 26 Feb 2023 06:14:15 +0000
ROA not before: Sun 26 Feb 2023 06:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:5b:8c:3a:50:49:2f:2c:1f:a1:aa:ce:c5:6b:90:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 06:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff319dcc3e404888de285a92f59ec6571e4bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:4b:ba:77:93:0e:16:8b:46:80:50:1d:0f:
78:46:05:ff:5c:85:20:2a:4d:71:9f:f4:79:fd:3b:
30:e1:43:bf:5b:79:28:5d:5f:e0:8f:43:6c:8b:86:
44:3f:74:e2:22:a7:b2:8a:59:29:99:d0:e1:8a:90:
8c:dd:a9:63:76:29:37:58:a6:da:72:88:90:72:6c:
72:a6:22:c2:93:cc:5a:65:c0:e1:93:7f:3d:cf:6b:
a6:e2:85:7c:34:5c:a7:e4:e1:28:f2:66:3d:06:97:
32:08:84:e5:62:19:30:3e:50:04:18:1a:98:20:81:
3f:0b:6f:55:9c:3f:cd:c9:99:ed:d4:d4:c3:86:ed:
83:d5:f0:8b:0c:b2:3e:3e:63:36:4a:c9:e7:4b:10:
09:cc:1e:36:27:32:82:d0:d8:57:b7:99:db:43:75:
37:90:00:0b:7c:26:c4:fa:63:7a:6f:f4:49:61:28:
3b:6a:90:51:40:a8:34:ce:6d:3e:b6:75:d9:1d:e3:
a5:86:c9:86:7c:53:0c:a4:4f:1e:f9:33:66:b4:03:
a3:9c:a7:3c:50:3b:d8:1e:f3:21:a1:90:67:d7:34:
18:52:f7:1c:88:bf:ea:4e:2f:a1:fc:91:f3:10:6b:
ea:f9:bf:2e:27:3d:63:63:21:8e:da:28:66:95:ff:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:19:DC:C3:E4:04:88:8D:E2:85:A9:2F:59:EC:65:71:E4:BD:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v_MZ3MPkBIiN4oWpL1nsZXHkvfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:80:26:13:01:87:fa:b3:c3:3b:57:4a:bc:1e:c6:5a:52:22:
2f:39:2e:fe:75:7e:cd:09:7f:fc:0c:45:fe:8c:4c:95:0a:b1:
aa:b0:7e:22:07:07:e9:5f:c1:43:c0:1a:b3:02:22:19:2e:6b:
a1:15:30:5e:6e:56:16:fe:b1:02:7b:de:7e:c3:bf:34:55:24:
7d:9a:dd:f1:0e:95:cc:81:62:c1:b9:e5:56:b8:f2:07:6d:8a:
02:fe:ef:00:bb:c0:f8:1c:3a:ea:95:ab:3c:c0:1d:75:a0:5f:
d2:63:00:af:22:61:9d:b4:aa:75:b9:8e:37:06:2c:26:58:02:
69:e3:a0:b3:14:21:c0:98:d5:fd:3e:0e:d8:41:0f:09:91:0a:
cb:79:bd:14:af:90:81:62:de:f7:62:a3:bb:1a:ae:ff:74:5a:
41:1a:1e:8b:61:ee:89:3a:4a:28:3f:78:92:76:2c:15:12:cc:
ba:87:0d:ef:61:3d:26:33:05:7f:e0:31:07:7e:4a:f3:4a:ee:
69:36:39:c1:35:59:b0:6d:34:fd:52:6b:7c:66:11:63:cc:a4:
f3:31:5d:f2:6f:85:ff:8b:5c:e8:59:8f:67:0b:96:15:94:89:
34:15:35:de:b0:fc:a4:1f:a1:ce:e5:f8:82:1c:b2:92:ec:40:
cc:e7:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:59 2025 by rpki-client