Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kop8roQmYoHT9o2JkoClCsP_mbg.roa
File: Kop8roQmYoHT9o2JkoClCsP_mbg.roa (raw, json)
Hash identifier: y2ayR8Cr0KymwOV6FK2zhRAvUKqgRj+UJrfDBlJEuUc=
Subject key identifier: 2A:8A:7C:AE:84:26:62:81:D3:F6:8D:89:92:80:A5:0A:C3:FF:99:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898A2B159B20D89E25D41E09B1F05E0C4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kop8roQmYoHT9o2JkoClCsP_mbg.roa
Signing time: Mon 24 Jul 2023 23:10:26 +0000
ROA not before: Mon 24 Jul 2023 23:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8a:2b:15:9b:20:d8:9e:25:d4:1e:09:b1:f0:5e:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 23:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a8a7cae84266281d3f68d899280a50ac3ff99b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:4a:c8:d7:d0:8d:a3:68:c7:94:36:f0:27:
c2:37:c8:4c:77:04:ac:f1:38:5e:e8:7a:0c:52:61:
b3:71:3b:3b:fd:cc:94:d3:a2:1f:1d:0d:3f:23:7c:
dc:17:a3:ac:1b:c0:97:b2:0c:7c:9b:a8:99:1d:e0:
f3:9e:51:84:b6:85:81:3c:23:78:7d:bb:b1:53:e5:
df:7c:91:06:8d:4f:85:bb:34:3a:eb:22:a7:63:d5:
cd:3c:4b:e6:fd:52:51:73:4f:34:8b:ea:5f:5b:98:
e3:3f:3c:71:45:cc:e7:44:7e:f8:10:8a:e2:11:0c:
35:a0:ad:09:a6:16:c9:51:ca:32:11:12:87:4a:02:
d0:23:5f:a7:55:27:d8:7b:d2:09:14:e2:3b:ea:b8:
ec:f0:5e:64:35:a1:2a:5d:c1:1e:58:f4:93:05:c8:
80:ad:6f:d7:44:58:e7:b9:a5:79:99:dd:d0:83:8f:
30:f6:17:62:19:bc:10:98:2f:c3:72:bc:a1:c7:e3:
5a:37:da:0f:a2:9d:9c:c1:4c:4d:5f:8a:4c:77:6c:
67:6d:b3:27:d0:bb:9e:a0:03:fd:a9:b5:1e:57:4d:
25:ab:a7:58:cb:fd:1f:91:3e:7d:0f:d3:4f:72:ec:
7a:c4:d8:d7:84:f3:30:69:a9:a2:86:08:7c:92:07:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8A:7C:AE:84:26:62:81:D3:F6:8D:89:92:80:A5:0A:C3:FF:99:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Kop8roQmYoHT9o2JkoClCsP_mbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:fb:48:e0:68:77:14:2b:7a:6d:2a:04:e3:e5:e3:db:e2:1f:
56:98:1f:cc:78:8f:4f:df:01:0d:92:85:f2:98:38:48:b4:6c:
fc:c3:a2:a2:42:5b:5f:2f:61:01:80:5b:6e:16:8b:43:6b:42:
3c:ca:d2:38:e8:7b:99:fa:6b:d8:e9:84:14:0d:34:de:76:ab:
b5:04:cb:3f:22:34:17:de:dd:68:f7:7b:8d:20:06:5b:76:57:
b0:e3:e8:4e:c4:02:92:0c:b8:4e:fa:64:f9:53:f0:d0:cf:cc:
40:7f:d2:26:2b:3d:08:0c:ce:71:a3:d4:e4:58:43:5f:32:c0:
8b:3c:78:b9:16:7a:c9:30:29:8f:88:eb:3f:3c:9b:79:23:70:
84:06:9e:9c:54:8b:51:04:f3:3e:7b:4b:34:3d:52:79:a9:53:
94:fa:04:80:bb:e4:b1:d2:1a:66:2d:fe:cf:56:6b:9f:f6:44:
e1:51:b8:43:50:08:12:04:db:13:62:b0:54:50:9f:7c:2c:d7:
32:f1:c5:ba:19:ef:8e:fb:16:77:9c:4f:91:39:82:af:cc:f3:
01:23:c1:0b:41:dc:b8:f3:cb:e9:f7:73:b5:17:6f:90:34:0e:
92:60:1f:53:83:bc:da:eb:4d:a8:b9:8e:62:a1:b1:3f:79:6e:
b4:90:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:34 2025 by rpki-client