Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MHIM01rinF4m9M9Uj58avroGKpY.roa
File: MHIM01rinF4m9M9Uj58avroGKpY.roa (raw, json)
Hash identifier: OId2gg0TidsEIlDrrSvXNajOAH908ypA5jpgNFqHM7Y=
Subject key identifier: 30:72:0C:D3:5A:E2:9C:5E:26:F4:CF:54:8F:9F:1A:BE:BA:06:2A:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897D4FC599581D074A87B73DBEBB8973BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MHIM01rinF4m9M9Uj58avroGKpY.roa
Signing time: Sat 22 Jul 2023 11:15:27 +0000
ROA not before: Sat 22 Jul 2023 11:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7d:4f:c5:99:58:1d:07:4a:87:b7:3d:be:bb:89:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 11:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30720cd35ae29c5e26f4cf548f9f1abeba062a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:e6:34:8c:ed:c3:a2:29:96:4c:42:db:fd:
dd:70:99:5f:e9:f5:81:0c:8b:10:82:78:a0:39:85:
b3:cf:f2:59:e3:01:7d:07:19:67:92:db:dd:ce:3d:
f4:ce:26:7b:c4:73:f0:6b:3a:19:16:e0:fe:4f:a2:
4c:0f:4f:5b:0d:06:87:24:20:c1:f4:f0:6e:ef:0f:
99:16:b7:24:6d:dc:cf:2d:6d:6b:72:e3:e9:e0:39:
61:28:78:ae:84:7b:fb:30:81:08:16:0e:35:31:2e:
81:22:35:d8:98:08:d8:82:15:e5:ee:bf:fe:b8:91:
af:20:d4:cf:b1:48:ca:22:55:32:40:86:75:a9:5d:
69:77:af:66:a6:fa:05:23:ce:d0:26:1f:b3:e6:d1:
19:14:59:2b:ae:da:9c:de:27:17:41:87:e9:89:05:
2e:6d:2a:94:c9:c2:9b:5d:d5:22:a4:e1:62:57:f6:
8d:81:fe:a5:18:69:d3:90:d3:b7:af:26:ca:18:fd:
66:64:69:36:eb:d0:c0:eb:19:54:a1:36:c0:ca:d3:
07:fe:95:a3:84:aa:28:1e:9a:59:20:a9:2d:c7:2d:
b5:b9:34:24:24:28:08:14:f0:ca:3e:fa:7d:2e:3a:
63:6f:97:5c:ef:b0:59:66:7b:94:a1:18:93:4f:96:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:72:0C:D3:5A:E2:9C:5E:26:F4:CF:54:8F:9F:1A:BE:BA:06:2A:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MHIM01rinF4m9M9Uj58avroGKpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:8b:28:44:04:fa:84:d5:31:67:d9:22:cb:6c:23:8d:09:db:
f0:ff:bd:c2:24:bc:32:c9:a7:4f:70:87:ab:cc:2b:77:42:3d:
19:59:48:5e:03:fa:e0:b6:1a:3a:40:b4:61:9f:86:ff:a6:6c:
ba:9f:b0:a1:1f:a5:87:c4:0f:cf:e3:df:cd:f2:3d:05:2c:7e:
8d:3c:cb:9c:88:a5:1a:77:40:13:80:3e:cb:44:ff:91:c8:5a:
f4:ee:07:93:f1:e5:88:3e:09:03:be:3e:ce:64:de:0f:f9:fe:
39:d7:99:98:89:de:27:8d:2a:5c:b4:ca:83:45:a2:47:6e:83:
ff:17:a7:9d:16:02:22:16:a4:6e:b6:14:5a:63:a9:30:34:25:
99:9c:2b:21:47:eb:87:cc:7c:a1:bf:4a:ed:79:db:a1:3f:1a:
39:48:9c:99:9f:d7:a8:6a:b5:55:3b:5d:19:4e:47:b4:ba:ab:
b9:cb:4e:10:31:b7:85:94:05:a8:f4:9a:cf:56:12:cb:9f:5f:
13:8f:4b:40:9c:56:c9:4c:f1:43:2c:db:c3:83:a9:db:85:e8:
e8:13:e1:eb:15:14:0f:52:8f:27:16:7e:ea:21:33:a8:ec:22:
4a:19:f2:7e:b5:03:30:4a:16:76:01:cd:a6:63:fe:69:98:40:
6a:dc:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:18:44 2025 by rpki-client