Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGo_oNfhf0D2qbc6XXmgshjJLz4.roa
File: MGo_oNfhf0D2qbc6XXmgshjJLz4.roa (raw, json)
Hash identifier: uoj6zwcDnbE0VeeOgQ2yLYGVVM3zn5sr+O59N5wftIY=
Subject key identifier: 30:6A:3F:A0:D7:E1:7F:40:F6:A9:B7:3A:5D:79:A0:B2:18:C9:2F:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880AB7FA9E077C2B14589DD297A14A4713
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGo_oNfhf0D2qbc6XXmgshjJLz4.roa
Signing time: Thu 11 May 2023 12:10:09 +0000
ROA not before: Thu 11 May 2023 12:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:b7:fa:9e:07:7c:2b:14:58:9d:d2:97:a1:4a:47:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 12:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=306a3fa0d7e17f40f6a9b73a5d79a0b218c92f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:7c:57:97:fc:43:af:50:d8:9f:f0:2f:15:
30:dd:59:9c:22:48:de:fb:0b:15:27:87:e3:7f:a5:
18:39:a0:50:c3:c2:9b:3b:be:5f:69:c7:c4:b5:74:
ba:7c:10:c8:9a:83:75:a1:38:dd:04:d6:3c:b8:76:
0c:1c:a0:eb:d0:d4:7c:84:a9:a7:88:04:13:fa:9d:
f4:f6:83:9c:b1:8a:c3:52:ec:27:13:85:81:09:b3:
10:46:1c:f9:70:f4:cc:d7:72:3b:61:a2:0d:ea:e9:
b5:41:50:e1:66:c9:b5:f6:51:e6:a4:b9:5f:5a:14:
34:65:47:fa:36:a3:5b:a1:49:3b:30:fa:70:41:88:
76:9e:dd:27:70:03:72:e1:89:92:8c:42:90:0d:37:
cf:c6:89:44:ee:e0:06:da:4d:7b:63:c0:69:c8:1a:
3f:59:32:59:be:83:d8:0d:ff:c2:77:a5:34:d0:91:
f7:6a:cf:ee:ae:39:7c:fe:c4:87:ad:ef:2e:5c:b1:
fb:cf:47:c3:7a:67:12:1f:fc:dd:2a:f3:36:4a:d2:
81:38:9c:f6:b1:4a:57:05:b0:08:de:0e:90:38:45:
de:f4:98:a2:fa:4e:59:fa:2e:28:5b:b0:ea:18:50:
46:f3:8d:af:23:15:2d:19:fb:43:17:54:40:e5:a0:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:3F:A0:D7:E1:7F:40:F6:A9:B7:3A:5D:79:A0:B2:18:C9:2F:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MGo_oNfhf0D2qbc6XXmgshjJLz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:38:a0:47:db:bc:47:7d:49:80:7b:6c:89:00:76:3e:a7:81:
51:0d:36:14:09:fc:ed:36:3f:6e:c4:6e:34:2f:c9:9b:32:49:
9d:11:dc:3b:6d:0b:43:6e:11:4f:42:a2:12:bb:51:16:48:5a:
18:bf:52:aa:1e:89:4f:e0:2a:25:4e:98:ac:b3:33:15:81:be:
3a:43:0f:5d:0d:ff:11:6d:f9:1c:5d:8e:fc:79:5e:0a:e1:bd:
d9:81:c2:fb:09:8d:67:d0:3b:92:a7:eb:31:6f:98:bc:f1:e3:
13:17:67:c4:93:c0:e5:a5:b8:af:8f:74:9b:61:05:da:b8:b1:
8f:d9:9d:aa:41:79:79:89:6e:b5:4a:ad:5b:af:e3:5e:1b:05:
84:cb:73:2d:7b:c9:09:a6:df:8e:41:03:3b:7a:74:d8:e2:e6:
22:58:7e:55:c3:03:5f:67:7a:f4:8b:53:e6:e4:d0:ee:c2:fe:
bd:43:72:f4:bf:9e:b6:05:4c:41:58:27:da:e0:83:33:21:ca:
08:d6:df:46:06:b6:f0:1d:c7:9d:00:7d:46:3b:bb:aa:4e:27:
63:06:f1:36:6b:fc:c8:b9:fd:f6:78:57:ed:93:31:18:7c:40:
70:53:a6:3e:8e:d7:76:6b:40:8b:76:2b:c3:38:60:2d:09:5c:
f9:39:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:26:54 2025 by rpki-client