Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MCNDDmqJRp--Gjx0g6IGcR7XqKc.roa
File: MCNDDmqJRp--Gjx0g6IGcR7XqKc.roa (raw, json)
Hash identifier: qrFmxgGDh/d9G6Tj9MjN4QF5KcQOND123kZMPOwHbRw=
Subject key identifier: 30:23:43:0E:6A:89:46:9F:BE:1A:3C:74:83:A2:06:71:1E:D7:A8:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D2B4DB932C17C3D9661D579E146B6537
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MCNDDmqJRp--Gjx0g6IGcR7XqKc.roa
Signing time: Sat 11 Mar 2023 22:05:13 +0000
ROA not before: Sat 11 Mar 2023 22:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:d2b3:ff77/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:b4:db:93:2c:17:c3:d9:66:1d:57:9e:14:6b:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 22:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3023430e6a89469fbe1a3c7483a206711ed7a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:1c:8d:ef:55:c6:84:dc:63:31:6b:a4:69:
54:2a:5b:2e:52:cc:45:c4:74:4b:97:75:32:17:e1:
08:36:6d:15:96:f4:48:49:29:d5:72:59:1c:aa:c7:
39:1e:ac:78:69:4b:47:71:2a:5f:51:7a:c3:35:1e:
6b:84:66:f6:07:82:51:7e:c5:2f:1b:4d:29:56:a0:
f6:26:30:58:db:2b:72:e7:71:6d:f5:d4:e5:a1:64:
59:3d:0a:e0:c3:e0:4b:b7:39:64:90:a2:94:f1:1b:
38:cd:27:64:ef:21:1d:b6:3b:df:cd:e7:5c:4d:df:
c8:8b:59:ba:4c:78:71:63:9c:ed:d4:82:fa:d2:54:
98:a4:e2:08:ca:ed:37:16:26:ba:0e:ae:82:2b:a7:
58:05:51:77:14:27:00:52:02:01:93:2f:a1:07:b3:
53:8c:84:fa:86:08:f2:46:aa:18:d3:af:a8:38:28:
5a:f6:a0:93:9b:c3:53:2d:ef:f2:28:e7:09:bb:aa:
ac:7a:76:1d:10:b1:68:9b:c7:85:68:1b:52:44:8c:
b8:23:1e:3e:bb:8d:4f:3b:e0:6d:4a:32:7b:65:49:
22:6b:5f:d6:5b:a2:fb:1d:d2:56:18:04:93:b1:70:
75:14:ec:ee:2f:4a:63:40:7a:e8:eb:5c:30:6a:d5:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:43:0E:6A:89:46:9F:BE:1A:3C:74:83:A2:06:71:1E:D7:A8:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MCNDDmqJRp--Gjx0g6IGcR7XqKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:1b:46:c2:2c:aa:db:bd:f1:9f:64:a8:46:30:44:a6:fc:c1:
8b:ef:bb:a4:d9:10:70:67:c3:4a:2c:c9:ce:40:2c:b2:90:5c:
93:09:04:b2:41:04:fc:67:5c:c9:37:6c:c3:56:5d:ce:18:ae:
e3:f0:67:42:97:74:87:9b:01:d4:59:08:58:f1:65:ad:a4:b3:
75:73:a9:34:ad:c3:28:5a:29:f5:f9:bc:1a:56:65:01:0a:f0:
78:a5:66:6f:89:77:43:bb:2d:97:89:66:9c:5d:c9:5d:ce:a5:
02:83:80:c0:7a:a5:51:8d:dc:36:34:e1:36:1c:19:48:ff:d3:
0d:8a:96:0a:5a:f5:2d:d3:31:8a:80:67:aa:e6:20:6a:77:af:
7e:74:6b:de:0a:14:f8:d0:f8:25:56:eb:c0:b9:0b:26:fc:d5:
83:3b:03:30:5b:e2:2d:51:eb:44:3b:ec:58:0f:42:df:cd:27:
2b:a2:59:6a:3f:55:e5:45:d1:0f:c9:17:30:0d:f2:4c:49:40:
94:7b:0f:95:2a:c6:da:b9:93:4b:6a:68:e4:01:3b:96:90:ac:
79:ad:a4:d9:c7:48:5b:86:4e:77:51:3f:cf:21:0b:5f:07:ad:
70:8f:f3:0b:93:27:76:32:6e:8c:d2:7b:6c:bd:b0:2b:c9:2c:
76:8b:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:42:01 2025 by rpki-client