Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa
File: MWCcspLyElnDyPK15mw6VhjsfpY.roa (raw, json)
Hash identifier: B1Vggq38aij/GN2nQRVJ1uCN4b8ui7AMqaSU8glwl9U=
Subject key identifier: 31:60:9C:B2:92:F2:12:59:C3:C8:F2:B5:E6:6C:3A:56:18:EC:7E:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A8DA52F51D9AC7A68DFE315637428A71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa
Signing time: Sun 30 Jul 2023 22:10:27 +0000
ROA not before: Sun 30 Jul 2023 22:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:da:52:f5:1d:9a:c7:a6:8d:fe:31:56:37:42:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 22:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31609cb292f21259c3c8f2b5e66c3a5618ec7e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:c1:e9:6c:09:ef:d6:21:8c:5d:00:4a:1b:
ef:5d:ba:50:cb:58:9c:b0:29:e1:a3:ca:3f:86:df:
be:09:ba:16:98:0e:47:f4:c5:e1:72:56:8a:dd:b6:
4b:dc:94:1f:cc:a8:16:e3:ab:a5:53:85:e3:64:31:
33:72:03:e8:cc:da:6c:fc:05:08:b9:30:08:1a:45:
c5:36:54:95:5d:0c:61:9d:57:90:73:5b:d5:f2:d8:
c4:77:aa:8e:69:ce:04:58:b9:1f:6d:77:5c:84:2b:
cf:cd:62:26:a6:23:cc:d5:1c:8c:cc:ae:0c:13:67:
04:17:7e:03:3d:3d:f2:f8:35:05:9c:cf:ff:76:34:
2b:92:f3:94:78:22:57:4a:f1:97:09:7e:86:ea:e1:
9d:6f:33:16:db:ef:00:82:59:b1:b2:63:d3:14:ee:
f7:b6:dd:4a:f0:76:f9:88:b8:5b:cd:00:d0:3d:c0:
e6:1c:6a:b9:5f:3f:84:83:3e:7d:93:fc:63:52:5c:
fc:eb:c4:e5:65:52:6e:d9:7f:2d:1a:d5:05:dc:12:
0a:75:a6:d2:29:8e:e4:b7:24:26:6d:34:df:8d:4f:
2a:d5:9c:db:3d:99:6a:83:83:6b:2c:a2:d6:8e:39:
d9:09:7d:62:2f:7e:10:01:d6:a8:ee:5d:8f:c0:c1:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:60:9C:B2:92:F2:12:59:C3:C8:F2:B5:E6:6C:3A:56:18:EC:7E:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d5:aa:88:31:6b:bd:4a:7f:6a:2b:cf:d4:c8:3b:4a:71:de:
77:a3:5c:78:ad:a1:e7:93:d5:10:ef:a9:75:b0:91:75:49:6b:
91:58:5a:34:ef:c8:34:cc:ba:d0:a0:b1:7b:c9:72:4b:a1:70:
fe:2c:e5:54:a2:4a:0f:5f:13:8a:54:b4:53:0c:21:62:97:21:
a7:13:25:89:a1:7d:66:25:67:b2:d6:60:55:a8:f4:a6:2c:f9:
b9:14:46:2b:68:d6:aa:be:6c:02:e8:83:16:43:78:53:a1:c9:
7e:81:f2:bf:0b:40:92:a2:89:80:c4:48:74:cb:da:c3:d3:59:
4e:7f:d0:dc:dc:fc:26:af:e3:f1:e9:58:68:05:4b:fa:65:25:
5f:c2:5d:01:d8:80:32:88:dd:f9:15:4a:c3:15:62:96:4e:21:
01:52:d5:c3:da:3f:0a:f0:ed:fd:35:da:20:48:5b:c2:ac:a5:
03:75:66:d7:8b:3d:26:d1:9e:1f:f2:3f:a7:d7:51:71:2c:cb:
1f:54:6c:21:57:8f:ad:27:3b:a5:7c:20:88:19:e5:53:ed:7b:
4f:03:07:59:20:94:0c:1a:5f:57:e1:51:9e:66:90:0d:3c:5b:
29:bd:48:21:2f:81:dd:dc:5b:1a:34:a0:e3:6e:c3:56:5b:61:
29:5c:d5:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmo2lL1HZrHpo3+MVY3QopxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMwMjIxMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTYwOWNiMjkyZjIxMjU5YzNjOGYyYjVlNjZjM2E1NjE4ZWM3ZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiunB6WwJ79YhjF0AShvvXbpQy1ic
sCnho8o/ht++CboWmA5H9MXhclaK3bZL3JQfzKgW46ulU4XjZDEzcgPozNps/AUI
uTAIGkXFNlSVXQxhnVeQc1vV8tjEd6qOac4EWLkfbXdchCvPzWImpiPM1RyMzK4M
E2cEF34DPT3y+DUFnM//djQrkvOUeCJXSvGXCX6G6uGdbzMW2+8AglmxsmPTFO73
tt1K8Hb5iLhbzQDQPcDmHGq5Xz+Egz59k/xjUlz868TlZVJu2X8tGtUF3BIKdabS
KY7ktyQmbTTfjU8q1ZzbPZlqg4NrLKLWjjnZCX1iL34QAdao7l2PwMGdyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDFgnLKS8hJZw8jyteZsOlYY7H6WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTVdDY3NwTHlFbG5EeVBLMTVtdzZWaGpzZnBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIrVqogxa71Kf2orz9TI
O0px3nejXHitoeeT1RDvqXWwkXVJa5FYWjTvyDTMutCgsXvJckuhcP4s5VSiSg9f
E4pUtFMMIWKXIacTJYmhfWYlZ7LWYFWo9KYs+bkURito1qq+bALogxZDeFOhyX6B
8r8LQJKiiYDESHTL2sPTWU5/0Nzc/Cav4/HpWGgFS/plJV/CXQHYgDKI3fkVSsMV
YpZOIQFS1cPaPwrw7f012iBIW8KspQN1ZteLPSbRnh/yP6fXUXEsyx9UbCFXj60n
O6V8IIgZ5VPte08DB1kglAwaX1fhUZ5mkA08Wym9SCEvgd3cWxo0oONuw1ZbYSlc
1fM=
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:49:27 2025 by rpki-client