Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mdr-w4MSyJqEGjcsMI0NZQB6qt4.roa
File: Mdr-w4MSyJqEGjcsMI0NZQB6qt4.roa (raw, json)
Hash identifier: PzX2Lvhs+OjpuEGJUjIw5Suut/DKPwUJO1gYrlKftfg=
Subject key identifier: 31:DA:FE:C3:83:12:C8:9A:84:1A:37:2C:30:8D:0D:65:00:7A:AA:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D546756210E64324AB5F1F442AF27CC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mdr-w4MSyJqEGjcsMI0NZQB6qt4.roa
Signing time: Mon 19 Jun 2023 20:09:04 +0000
ROA not before: Mon 19 Jun 2023 20:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:46:75:62:10:e6:43:24:ab:5f:1f:44:2a:f2:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 20:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31dafec38312c89a841a372c308d0d65007aaade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:05:2d:7b:4e:aa:a2:9f:91:d8:7b:09:08:
71:45:7d:b7:be:b7:ae:dc:e4:32:f5:1b:32:f5:e0:
a7:18:0f:9d:c2:92:32:86:6c:2e:34:f5:a7:14:d9:
c0:42:ed:26:dd:38:26:e8:38:b2:98:90:47:43:77:
f8:ac:2b:e6:56:5d:5c:9d:93:ec:5f:cc:aa:ce:49:
51:19:63:51:25:80:83:4b:ab:14:08:02:c9:42:17:
fe:23:d5:08:1a:b3:b9:e2:be:76:fb:30:20:eb:d7:
41:e9:ca:44:82:5d:7b:6e:a0:e7:22:58:1e:9d:25:
7b:37:43:e5:3b:df:59:4e:89:28:0f:13:18:75:cd:
01:ec:d8:04:2a:6b:1c:a0:3e:b9:fe:60:11:21:65:
18:ff:1a:5d:ab:84:62:24:26:04:1f:31:98:50:fe:
6f:d3:a6:c6:f5:91:bb:74:68:0f:ce:96:b9:b6:55:
0e:04:90:d2:62:5a:e4:72:a3:25:5e:93:d1:dd:3d:
4f:94:4f:09:f0:5f:5e:08:0e:d6:a2:2a:b4:3c:1e:
4c:44:3f:f8:1c:ea:3a:4d:ee:d4:db:09:0d:ff:38:
12:0e:eb:88:00:56:7c:ca:a6:63:ef:79:ab:c0:44:
e5:fb:80:66:47:86:1d:d5:d2:d1:15:b2:fe:63:82:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:FE:C3:83:12:C8:9A:84:1A:37:2C:30:8D:0D:65:00:7A:AA:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mdr-w4MSyJqEGjcsMI0NZQB6qt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:c4:8d:74:62:cf:5f:48:85:e0:2d:ad:a1:bb:ca:0e:5c:5c:
5a:66:23:27:44:05:31:66:c5:02:a8:d3:29:07:98:9f:b9:42:
99:f2:03:f0:cd:26:4f:b6:d2:91:90:9f:10:70:19:c7:36:e9:
22:cc:14:51:22:7c:01:86:aa:0e:da:fe:5c:f7:2a:33:46:1d:
18:1b:79:43:e4:df:03:04:9d:f2:e4:4d:94:c2:25:23:80:4c:
4e:05:f1:34:e3:1f:97:c0:d7:f9:91:39:5d:a4:e2:43:7d:be:
45:cc:f3:08:d2:e8:d7:59:20:1c:c4:13:ca:7c:d9:c2:73:40:
59:e1:4b:56:8e:0e:b6:1e:a1:61:30:28:76:0d:e8:74:7f:d5:
9a:32:63:b9:61:73:c3:54:b2:71:b5:f3:3d:da:5e:8b:bf:34:
61:f5:f2:52:12:ef:1d:43:8d:37:29:bb:09:8c:43:61:91:ca:
4a:5e:13:52:04:af:0e:85:56:fc:35:12:29:18:01:e1:aa:3b:
ba:eb:8b:8c:23:dc:d1:a5:57:4a:fd:1e:d4:68:6e:98:b9:dd:
b6:30:78:27:19:0b:8f:1f:16:cb:12:5c:e3:14:c1:fd:1b:27:
8e:a3:0b:83:77:f2:69:24:1a:8a:78:f1:67:9b:8b:eb:27:c5:
c5:30:2c:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjVRnViEOZDJKtfH0Qq8nzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE5MjAwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWRhZmVjMzgzMTJjODlhODQxYTM3MmMzMDhkMGQ2NTAwN2FhYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D0FLXtOqqKfkdh7CQhxRX23vreu
3OQy9Rsy9eCnGA+dwpIyhmwuNPWnFNnAQu0m3Tgm6DiymJBHQ3f4rCvmVl1cnZPs
X8yqzklRGWNRJYCDS6sUCALJQhf+I9UIGrO54r52+zAg69dB6cpEgl17bqDnIlge
nSV7N0PlO99ZTokoDxMYdc0B7NgEKmscoD65/mARIWUY/xpdq4RiJCYEHzGYUP5v
06bG9ZG7dGgPzpa5tlUOBJDSYlrkcqMlXpPR3T1PlE8J8F9eCA7Woiq0PB5MRD/4
HOo6Te7U2wkN/zgSDuuIAFZ8yqZj73mrwETl+4BmR4Yd1dLRFbL+Y4KHMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDHa/sODEsiahBo3LDCNDWUAeqreMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTWRyLXc0TVN5SnFFR2pjc01JME5aUUI2cXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACfEjXRiz19IheAtraG7
yg5cXFpmIydEBTFmxQKo0ykHmJ+5QpnyA/DNJk+20pGQnxBwGcc26SLMFFEifAGG
qg7a/lz3KjNGHRgbeUPk3wMEnfLkTZTCJSOATE4F8TTjH5fA1/mROV2k4kN9vkXM
8wjS6NdZIBzEE8p82cJzQFnhS1aODrYeoWEwKHYN6HR/1ZoyY7lhc8NUsnG18z3a
Xou/NGH18lIS7x1DjTcpuwmMQ2GRykpeE1IErw6FVvw1EikYAeGqO7rri4wj3NGl
V0r9HtRobpi53bYweCcZC48fFssSXOMUwf0bJ46jC4N38mkkGop48Webi+snxcUw
LDI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:04 2025 by rpki-client