Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJNyV4wAOcrTRvn5xMiHU_Xw24k.roa
File: MJNyV4wAOcrTRvn5xMiHU_Xw24k.roa (raw, json)
Hash identifier: 1KRGhD0avksdekJC5w3s2gSojJp08gecRpqheiWEals=
Subject key identifier: 30:93:72:57:8C:00:39:CA:D3:46:F9:F9:C4:C8:87:53:F5:F0:DB:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018845159E6213877735FA7AD463A2CBA3CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJNyV4wAOcrTRvn5xMiHU_Xw24k.roa
Signing time: Mon 22 May 2023 20:10:24 +0000
ROA not before: Mon 22 May 2023 20:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:45:15:9e:62:13:87:77:35:fa:7a:d4:63:a2:cb:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 20:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=309372578c0039cad346f9f9c4c88753f5f0db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:87:60:07:af:37:e6:f5:fb:84:ca:8f:af:
95:c8:e8:85:89:16:d4:ff:3b:bd:01:14:bc:13:ab:
62:1d:81:74:29:cf:18:a6:90:6e:d3:21:2c:8e:a0:
be:e0:9c:b6:fe:17:09:01:52:e1:02:24:e3:a4:58:
e1:fb:b5:b8:50:80:ff:4b:a3:dd:99:66:51:25:31:
9a:bf:4e:f9:d7:c5:18:1c:b5:fb:71:98:ae:da:de:
a7:ec:30:38:a2:95:ea:43:6b:e5:0a:20:37:21:57:
57:74:18:70:07:15:df:ad:22:9f:fd:4f:6b:3e:fa:
6f:f6:05:9b:39:e3:b0:26:cc:64:0e:f3:7f:4b:13:
39:19:fd:9f:74:ca:6f:c7:8b:e1:f8:fa:57:b7:e1:
8f:0d:d3:4e:e6:c6:fb:cc:e4:54:16:2d:e6:8b:de:
a1:27:af:a6:62:57:73:1f:52:53:a9:f6:1d:9a:61:
57:08:5c:0b:57:c4:44:f9:55:00:59:6b:0e:8f:44:
4a:92:60:f1:b6:e7:49:37:34:f9:03:cf:8d:8d:e0:
dc:e3:9b:1b:30:35:24:81:e2:55:9b:e7:e7:b7:00:
d3:84:9d:5d:a0:fa:e7:0a:19:30:c8:cf:be:a9:8c:
02:0f:7b:49:d8:9a:57:99:34:6d:d4:3f:0c:2e:2a:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:72:57:8C:00:39:CA:D3:46:F9:F9:C4:C8:87:53:F5:F0:DB:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MJNyV4wAOcrTRvn5xMiHU_Xw24k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:8d:13:29:91:a1:a0:e5:c4:75:e3:40:72:d3:b5:ab:a2:cc:
f9:43:47:63:94:9d:de:eb:55:52:d7:64:1b:24:d6:ca:b8:b1:
40:f8:4f:26:95:1b:c2:49:37:9b:f4:bc:b9:fe:c6:a3:2f:c7:
9a:45:12:93:1b:b9:bc:7a:d5:29:b3:0b:4b:85:b0:be:08:e8:
ad:98:cf:79:81:29:60:56:b0:32:bb:1d:3f:e2:c7:93:97:04:
b3:9f:fa:ea:48:57:d7:7c:e1:15:dc:65:c1:3d:0f:54:a5:83:
92:8a:d7:c1:ab:ba:da:c9:63:26:0f:37:8d:87:88:39:7d:1f:
e1:79:bb:d2:ba:3a:4a:56:f8:49:ca:18:49:b1:54:72:e8:81:
f7:83:8d:12:59:2e:bc:e3:73:a4:d8:60:4d:0c:65:04:6b:57:
c7:07:58:a1:62:f2:20:47:28:5a:6e:88:2f:6a:31:5f:22:36:
21:62:b6:8b:a2:da:78:5b:76:f6:ca:be:c8:4a:64:ab:98:1a:
ba:62:3a:b0:65:82:1b:f5:36:4c:10:e7:8a:5c:f5:2c:b5:7f:
48:1f:9b:a4:62:f4:50:b1:60:63:dd:bc:30:4d:c2:38:15:15:
2e:f7:98:f7:6a:01:34:8f:bb:28:a1:2f:08:44:48:b2:91:3b:
67:a5:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:44:58 2025 by rpki-client