Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOoznpCp0R62XbSi3W265IYidM4.roa
File: MOoznpCp0R62XbSi3W265IYidM4.roa (raw, json)
Hash identifier: 3mSoe50LSUT7x/wvNnXliaOi0reT0qcekMQXWUTUwQE=
Subject key identifier: 30:EA:33:9E:90:A9:D1:1E:B6:5D:B4:A2:DD:6D:BA:E4:86:22:74:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A3BD84A728BB5454ECD8229DC4D8B667
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOoznpCp0R62XbSi3W265IYidM4.roa
Signing time: Thu 12 Jan 2023 02:09:44 +0000
ROA not before: Thu 12 Jan 2023 02:09:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a3:bd:84:a7:28:bb:54:54:ec:d8:22:9d:c4:d8:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 02:09:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30ea339e90a9d11eb65db4a2dd6dbae4862274ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:f2:9b:1f:f1:3d:8d:84:77:16:6f:4e:6f:
91:4c:ee:04:c5:36:cf:bb:a1:78:5a:1d:66:c3:fa:
b9:c8:d5:4d:06:0c:6d:2d:62:8a:1d:a0:f1:03:f0:
21:b4:0d:c7:f2:79:a1:96:d9:dd:85:04:31:67:3a:
35:9f:af:10:5a:f6:83:e1:89:aa:73:45:26:b1:ff:
9a:cb:a7:24:e6:35:15:12:ab:be:a6:04:90:06:fe:
78:31:31:a3:1f:8d:82:fe:73:52:c0:61:35:98:c5:
7e:a4:55:de:d3:aa:a2:56:e3:f1:f9:c5:97:06:7b:
05:27:ec:79:6f:b0:a4:d4:c0:ab:b1:b7:80:83:d5:
40:9f:1c:45:c3:1c:d9:df:eb:3c:59:c9:96:c9:38:
2b:a5:c0:bf:7c:31:5f:cc:0b:21:54:f7:1f:21:11:
98:a5:d0:78:0f:64:d6:0b:4f:d8:c3:83:26:b5:1a:
d0:ed:55:a4:48:20:92:ca:9f:67:94:ca:3e:84:f9:
19:bd:ed:f6:5e:a9:69:69:44:62:b1:53:aa:40:c0:
f9:d3:4d:2d:f7:ab:a5:e5:3f:fc:fe:e0:24:88:5b:
5f:d9:25:be:e1:80:d2:ea:1c:41:4d:a8:b4:c5:b0:
ea:dd:a9:60:03:40:8e:aa:ae:f6:7a:6f:43:55:9c:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:33:9E:90:A9:D1:1E:B6:5D:B4:A2:DD:6D:BA:E4:86:22:74:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MOoznpCp0R62XbSi3W265IYidM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:88:b4:49:2b:52:fe:4f:0b:a0:3d:1c:ac:48:52:5e:15:57:
9f:10:70:6d:49:fa:15:38:3c:3e:84:77:13:de:70:d8:9d:aa:
97:c6:2d:03:ae:c8:31:28:12:25:d7:6b:4a:77:c7:05:67:b7:
fe:87:23:dd:58:b7:b3:a7:f2:44:a5:bc:21:3c:16:c8:c6:e3:
d3:04:6a:be:ed:fe:90:21:54:f0:ec:f8:73:9d:bb:ee:b6:7c:
20:4c:ee:30:f0:47:ae:ab:77:2f:23:e0:26:1e:ac:b0:b4:dd:
82:09:6b:74:18:60:06:ff:d4:4b:08:07:c8:8f:f8:83:79:33:
12:57:ed:07:6d:e6:a1:66:65:11:11:2b:ad:72:cb:56:d8:95:
db:d5:a2:49:ad:2e:7e:93:1a:d1:a9:26:73:56:78:0e:2e:e4:
9f:6b:62:01:9d:b5:df:74:90:69:e2:7c:21:b7:2c:35:57:81:
26:e4:9b:c5:62:27:20:2f:e2:ed:28:ed:61:bf:0f:88:be:c3:
81:0f:d1:18:b9:11:8e:42:93:ed:ef:e2:f4:d4:e6:26:38:57:
dd:76:3c:6a:f9:4f:62:4b:58:70:b7:2a:8f:02:7e:38:24:81:
f7:7a:cc:b4:de:0c:6d:ae:0c:f1:9e:97:49:aa:37:1a:6c:b1:
cf:fb:d4:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWjvYSnKLtUVOzYIp3E2LZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMDIwOTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVhMzM5ZTkwYTlkMTFlYjY1ZGI0YTJkZDZkYmFlNDg2MjI3NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok3ymx/xPY2EdxZvTm+RTO4ExTbP
u6F4Wh1mw/q5yNVNBgxtLWKKHaDxA/AhtA3H8nmhltndhQQxZzo1n68QWvaD4Ymq
c0Umsf+ay6ck5jUVEqu+pgSQBv54MTGjH42C/nNSwGE1mMV+pFXe06qiVuPx+cWX
BnsFJ+x5b7Ck1MCrsbeAg9VAnxxFwxzZ3+s8WcmWyTgrpcC/fDFfzAshVPcfIRGY
pdB4D2TWC0/Yw4MmtRrQ7VWkSCCSyp9nlMo+hPkZve32XqlpaURisVOqQMD5000t
96ul5T/8/uAkiFtf2SW+4YDS6hxBTai0xbDq3algA0COqq72em9DVZycLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDDqM56QqdEetl20ot1tuuSGInTOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTU9vem5wQ3AwUjYyWGJTaTNXMjY1SVlpZE00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADGItEkrUv5PC6A9HKxI
Ul4VV58QcG1J+hU4PD6EdxPecNidqpfGLQOuyDEoEiXXa0p3xwVnt/6HI91Yt7On
8kSlvCE8FsjG49MEar7t/pAhVPDs+HOdu+62fCBM7jDwR66rdy8j4CYerLC03YIJ
a3QYYAb/1EsIB8iP+IN5MxJX7Qdt5qFmZRERK61yy1bYldvVokmtLn6TGtGpJnNW
eA4u5J9rYgGdtd90kGnifCG3LDVXgSbkm8ViJyAv4u0o7WG/D4i+w4EP0Ri5EY5C
k+3v4vTU5iY4V912PGr5T2JLWHC3Ko8Cfjgkgfd6zLTeDG2uDPGel0mqNxpssc/7
1Cw=
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:52:35 2025 by rpki-client