Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MDRjI1oRNHehLN5u-MszkaOgSdA.roa
File: MDRjI1oRNHehLN5u-MszkaOgSdA.roa (raw, json)
Hash identifier: pUAAu+p+1mQe2k26nK7JvKXD8OuwXN5iYh4wSV9Dqog=
Subject key identifier: 30:34:63:23:5A:11:34:77:A1:2C:DE:6E:F8:CB:33:91:A3:A0:49:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018993661087D232AEF1C396D07258CB1A30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MDRjI1oRNHehLN5u-MszkaOgSdA.roa
Signing time: Wed 26 Jul 2023 18:11:26 +0000
ROA not before: Wed 26 Jul 2023 18:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:66:10:87:d2:32:ae:f1:c3:96:d0:72:58:cb:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 18:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=303463235a113477a12cde6ef8cb3391a3a049d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:e8:78:ed:04:a4:8c:b2:8b:57:72:f4:6c:
d1:a6:a8:3c:9e:a7:d3:ec:4f:bd:71:d2:00:6b:25:
6b:c4:54:3b:ad:70:90:59:ac:8b:57:91:40:1f:38:
f5:57:ec:ab:63:82:36:32:f4:e0:c5:8d:df:8e:28:
ba:ed:82:67:0f:33:01:a4:6e:d2:3e:4e:96:6b:cc:
6c:1d:6c:71:59:b2:bf:1e:51:3e:cf:fa:7b:96:6f:
11:50:2c:1f:7d:84:83:6a:fd:62:f3:e0:48:15:6a:
19:85:d8:01:82:13:4a:9d:93:01:86:a1:bc:dc:0c:
3b:33:4e:ca:de:2a:c7:f8:fd:e0:c2:78:62:b7:c9:
e1:bc:88:7e:0c:de:a0:a9:a7:29:29:65:a4:44:0e:
30:85:59:06:37:b9:60:eb:62:07:a5:c3:a3:3e:48:
5f:32:f3:3b:fc:a1:7f:6f:82:32:1e:03:10:bc:3c:
d5:9a:76:ca:b8:91:31:e6:1e:0b:a4:2e:c7:25:fc:
c7:95:ac:d6:eb:ee:c1:0d:ba:3a:9b:6f:81:42:15:
99:65:26:8b:27:9a:e4:1b:12:3c:8a:c3:f1:9d:b2:
61:da:74:6d:ec:e6:26:2e:1c:28:75:b9:02:12:6b:
f9:50:91:2a:cd:2f:3c:f7:9e:06:03:a8:81:b2:93:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:63:23:5A:11:34:77:A1:2C:DE:6E:F8:CB:33:91:A3:A0:49:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MDRjI1oRNHehLN5u-MszkaOgSdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:04:9e:26:89:e0:c5:dd:df:d6:26:55:15:00:82:65:94:bd:
64:5e:ba:de:76:62:29:af:b3:d2:77:98:31:8f:0e:35:61:9a:
43:b6:d9:c9:c1:0e:ed:33:22:60:90:e1:07:5f:09:14:c3:cf:
0a:ae:6e:fe:01:dd:5e:f0:8f:7d:63:60:8d:3b:82:e7:8d:05:
90:90:a9:27:58:9f:5a:4a:b2:37:4d:a6:33:15:8b:01:e5:d6:
7a:b3:fa:2c:b5:ee:d7:80:88:96:39:cb:3e:c7:84:bf:9c:11:
7c:2b:75:b6:e5:35:86:a7:79:89:21:c1:e6:1c:d8:e8:6d:09:
1f:3e:d1:6b:39:9f:cd:af:6f:f8:2b:de:06:77:7a:7a:83:0c:
7a:e1:03:6c:5a:56:50:a4:b2:c6:e9:85:1b:27:fe:a6:e8:eb:
9a:ba:9c:ba:c6:a8:ef:5e:f5:11:ce:ae:09:47:4e:50:2c:2f:
d7:e0:d8:e5:3c:7c:e6:5b:79:8c:82:fa:82:5f:ad:2e:c6:8e:
5f:ab:66:2f:85:d9:60:58:79:0b:f9:fa:ff:f1:2e:f2:30:1b:
02:c4:f2:30:d8:c7:e5:22:fc:96:37:b4:66:09:40:c3:36:d0:
5a:3f:58:22:fa:a4:d9:ac:71:eb:53:73:68:76:32:49:f7:83:
9b:76:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:19:59 2025 by rpki-client