Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGFK7anC_Aw9_oycc8DjzRTBiOQ.roa
File: MGFK7anC_Aw9_oycc8DjzRTBiOQ.roa (raw, json)
Hash identifier: 0hIrBbsK2+CJQyd+5hQ8Fj3JvMErJqXYYW2dNJJ4fKs=
Subject key identifier: 30:61:4A:ED:A9:C2:FC:0C:3D:FE:8C:9C:73:C0:E3:CD:14:C1:88:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188410101C5F98B8A4A77939EAAB2756700
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGFK7anC_Aw9_oycc8DjzRTBiOQ.roa
Signing time: Mon 22 May 2023 01:09:24 +0000
ROA not before: Mon 22 May 2023 01:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:41:01:01:c5:f9:8b:8a:4a:77:93:9e:aa:b2:75:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 01:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30614aeda9c2fc0c3dfe8c9c73c0e3cd14c188e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:00:50:fb:fb:a4:6e:98:0b:79:e8:30:99:
97:8f:b8:e2:43:14:f2:56:b3:37:51:1c:fe:df:00:
ac:78:95:59:04:2d:4e:d6:a0:23:02:45:ed:74:1d:
9c:12:f5:46:02:01:cf:c2:d8:2b:7c:33:20:12:8d:
d5:9f:87:95:ca:5d:91:0c:f8:a7:5d:2c:92:53:19:
4b:8e:82:b9:f5:16:23:d5:0f:32:e7:4e:5c:42:e3:
44:d0:af:24:e4:4b:00:d8:26:69:fe:22:ef:57:ba:
c4:f0:37:6a:22:57:af:b9:00:26:23:55:95:ad:13:
f4:dd:01:00:0a:8e:97:0e:c8:8a:bd:54:f5:2f:77:
13:61:70:5b:92:91:bd:53:a1:75:5f:6e:04:52:6b:
75:59:66:05:fb:9c:d7:3a:97:5a:9d:c0:05:92:bd:
db:ba:08:8c:1e:1b:80:55:f3:80:f0:42:4b:87:be:
fd:f1:60:64:c5:39:11:33:35:e4:85:f8:81:97:4c:
f5:3e:bf:30:fa:81:b3:1e:47:54:b5:38:88:b1:95:
0c:9f:fa:cb:06:50:91:3f:56:e4:ad:e7:02:be:0e:
d2:19:0c:fd:f1:f0:d5:2c:fd:79:04:3d:9c:b3:03:
05:3e:16:1a:18:54:9c:7f:6b:7c:4f:41:22:1c:5e:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:4A:ED:A9:C2:FC:0C:3D:FE:8C:9C:73:C0:E3:CD:14:C1:88:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGFK7anC_Aw9_oycc8DjzRTBiOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:9d:1c:34:71:d3:5f:ce:4a:46:59:66:65:6f:67:ea:4d:ec:
8f:16:05:5a:c1:4d:00:77:bf:f7:7d:46:b2:2e:2a:55:3e:a7:
ec:6b:1f:80:cf:e3:5d:7f:ea:3b:e8:5d:ce:3c:c4:20:5c:7b:
e4:3d:2f:49:bd:78:55:5a:a0:31:5e:64:3d:1d:e1:58:98:df:
4b:58:28:9b:a7:5f:22:60:8d:24:9c:66:c5:36:45:e8:e0:be:
e1:61:12:f6:d5:4c:1f:4b:ae:7b:af:0c:2e:0b:7b:4b:5c:52:
7a:00:df:9e:cc:6c:a8:63:87:cc:7a:c6:df:ef:f0:a5:fc:9f:
71:fa:11:ee:a2:64:d0:4a:7d:d8:81:72:8f:98:1b:b0:a0:ae:
9a:16:a7:3b:9f:ab:e8:8e:a0:54:83:28:53:41:ef:e8:4c:b9:
59:15:4e:c4:9b:52:af:8a:dd:4f:2e:87:ce:2e:42:1c:bd:03:
40:68:39:ee:8a:d1:98:db:9a:e3:4f:23:29:e7:22:80:e1:07:
d1:02:df:a4:db:03:83:e2:30:c7:7a:f9:39:1b:f6:9a:cd:38:
d5:dd:9f:5e:69:2d:a9:6c:c2:7b:c5:bd:7a:b9:e3:32:d4:71:
09:18:31:64:76:17:dd:1d:20:60:2a:81:f8:80:ee:10:84:c6:
74:d5:29:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhBAQHF+YuKSneTnqqydWcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIyMDEwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDYxNGFlZGE5YzJmYzBjM2RmZThjOWM3M2MwZTNjZDE0YzE4OGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIMAUPv7pG6YC3noMJmXj7jiQxTy
VrM3URz+3wCseJVZBC1O1qAjAkXtdB2cEvVGAgHPwtgrfDMgEo3Vn4eVyl2RDPin
XSySUxlLjoK59RYj1Q8y505cQuNE0K8k5EsA2CZp/iLvV7rE8DdqIlevuQAmI1WV
rRP03QEACo6XDsiKvVT1L3cTYXBbkpG9U6F1X24EUmt1WWYF+5zXOpdancAFkr3b
ugiMHhuAVfOA8EJLh7798WBkxTkRMzXkhfiBl0z1Pr8w+oGzHkdUtTiIsZUMn/rL
BlCRP1bkrecCvg7SGQz98fDVLP15BD2cswMFPhYaGFScf2t8T0EiHF79zQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDBhSu2pwvwMPf6MnHPA480UwYjkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTUdGSzdhbkNfQXc5X295Y2M4RGp6UlRCaU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+dHDRx01/OSkZZZmVv
Z+pN7I8WBVrBTQB3v/d9RrIuKlU+p+xrH4DP411/6jvoXc48xCBce+Q9L0m9eFVa
oDFeZD0d4ViY30tYKJunXyJgjSScZsU2RejgvuFhEvbVTB9LrnuvDC4Le0tcUnoA
357MbKhjh8x6xt/v8KX8n3H6Ee6iZNBKfdiBco+YG7CgrpoWpzufq+iOoFSDKFNB
7+hMuVkVTsSbUq+K3U8uh84uQhy9A0BoOe6K0ZjbmuNPIynnIoDhB9EC36TbA4Pi
MMd6+Tkb9prNONXdn15pLalswnvFvXq54zLUcQkYMWR2F90dIGAqgfiA7hCExnTV
KSk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:42 2025 by rpki-client