Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MffhivYQxYrnFCHF4UtmQy9sw_4.roa
File: MffhivYQxYrnFCHF4UtmQy9sw_4.roa (raw, json)
Hash identifier: qYoCy1VzCsNkWC4sCKNN/wIqZ7ezMVAC6TQ1NZrq4WU=
Subject key identifier: 31:F7:E1:8A:F6:10:C5:8A:E7:14:21:C5:E1:4B:66:43:2F:6C:C3:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D02AD4558C33B83E3B54DDFEB7D77A3D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MffhivYQxYrnFCHF4UtmQy9sw_4.roa
Signing time: Sat 11 Mar 2023 10:15:13 +0000
ROA not before: Sat 11 Mar 2023 10:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:2a:d4:55:8c:33:b8:3e:3b:54:dd:fe:b7:d7:7a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 10:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f7e18af610c58ae71421c5e14b66432f6cc3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:88:da:32:aa:af:bb:3b:36:11:65:cf:dc:
de:de:3b:40:d9:19:a5:4c:67:50:f5:44:0e:57:77:
61:d9:53:df:9e:e5:0b:68:e9:ec:6f:04:01:b4:b1:
6a:e4:9d:f3:71:91:dc:42:b9:9d:33:ef:d6:59:0a:
bc:13:e8:de:50:ab:6f:bc:f4:26:2d:f6:c6:cc:b0:
c6:74:a1:6e:a0:c5:09:85:d8:56:99:a2:e7:19:4a:
04:d8:6a:95:16:9a:17:46:76:d1:bf:f5:6f:5f:62:
8c:82:be:0b:c6:2d:6d:e5:b9:55:7c:e0:0d:75:8d:
e0:4c:cb:4d:a9:89:02:26:d6:ed:46:93:82:49:bf:
7f:73:81:ec:c7:b4:c9:dd:98:df:8a:20:61:3a:b0:
cb:6f:7b:dd:45:8f:9e:56:e9:bc:44:28:fb:6c:3d:
23:f1:9b:fa:8b:ae:59:92:75:02:a7:38:38:b0:ca:
df:a1:0d:6b:b4:63:4d:59:73:ed:91:0c:8a:0d:33:
6a:4d:be:35:61:b4:f5:ec:4f:2c:1c:b7:8b:59:dd:
b1:11:07:84:6a:70:8a:14:ee:a3:a8:ee:2f:45:30:
f6:77:8d:d1:db:10:20:9d:a5:04:e1:d1:7b:16:8c:
a8:d5:0f:b9:4e:28:5d:77:23:2e:23:8a:cb:d5:b5:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:E1:8A:F6:10:C5:8A:E7:14:21:C5:E1:4B:66:43:2F:6C:C3:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MffhivYQxYrnFCHF4UtmQy9sw_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:d0:b2:0b:2b:08:2e:a5:02:c5:6b:67:d3:0a:bd:26:14:20:
22:ae:c7:fb:60:e7:64:84:07:41:0d:83:5b:4c:4b:53:17:fd:
e5:ce:9d:e9:41:ef:5b:ed:0c:4f:7a:06:b3:59:97:e3:3b:9e:
e5:1d:32:56:ac:89:35:57:83:e8:de:bf:56:83:b6:38:c0:ac:
b4:36:b2:73:47:7f:71:d2:c0:98:94:a0:0b:94:d7:e9:3c:f8:
f9:fa:c4:18:e0:e6:ed:d8:14:4d:6b:d7:eb:a3:8c:7f:81:9d:
49:9e:9a:1e:47:ad:78:58:1f:42:b7:67:42:71:28:d6:e1:ed:
4b:47:a0:18:9a:29:a8:c9:c1:90:a3:8c:e7:71:4b:b8:c8:3a:
64:f3:ad:92:fc:bc:26:b6:bb:88:c8:2e:76:3d:76:3b:fa:d8:
e3:45:e8:dd:54:4a:af:96:5d:c6:6f:a5:03:3d:ad:cf:06:90:
b8:2c:f9:e3:f2:37:a8:78:f9:48:a7:35:35:f0:98:30:f2:d8:
72:b2:2f:f4:90:64:bb:fe:f4:fb:cb:23:61:8f:ce:12:11:15:
5c:95:da:60:1c:20:41:a0:25:17:2f:54:fe:a0:0e:ac:d3:4d:
8f:27:f4:47:3f:f6:d0:5b:98:f5:fa:55:2e:56:fe:5e:31:5f:
0d:4b:4e:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbQKtRVjDO4PjtU3f6313o9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzExMTAxNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWY3ZTE4YWY2MTBjNThhZTcxNDIxYzVlMTRiNjY0MzJmNmNjM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkruI2jKqr7s7NhFlz9ze3jtA2Rml
TGdQ9UQOV3dh2VPfnuULaOnsbwQBtLFq5J3zcZHcQrmdM+/WWQq8E+jeUKtvvPQm
LfbGzLDGdKFuoMUJhdhWmaLnGUoE2GqVFpoXRnbRv/VvX2KMgr4Lxi1t5blVfOAN
dY3gTMtNqYkCJtbtRpOCSb9/c4Hsx7TJ3ZjfiiBhOrDLb3vdRY+eVum8RCj7bD0j
8Zv6i65ZknUCpzg4sMrfoQ1rtGNNWXPtkQyKDTNqTb41YbT17E8sHLeLWd2xEQeE
anCKFO6jqO4vRTD2d43R2xAgnaUE4dF7Foyo1Q+5TihddyMuI4rL1bWDgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDH34Yr2EMWK5xQhxeFLZkMvbMP+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTWZmaGl2WVF4WXJuRkNIRjRVdG1ReTlzd180LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAALQsgsrCC6lAsVrZ9MK
vSYUICKux/tg52SEB0ENg1tMS1MX/eXOnelB71vtDE96BrNZl+M7nuUdMlasiTVX
g+jev1aDtjjArLQ2snNHf3HSwJiUoAuU1+k8+Pn6xBjg5u3YFE1r1+ujjH+BnUme
mh5HrXhYH0K3Z0JxKNbh7UtHoBiaKajJwZCjjOdxS7jIOmTzrZL8vCa2u4jILnY9
djv62ONF6N1USq+WXcZvpQM9rc8GkLgs+ePyN6h4+UinNTXwmDDy2HKyL/SQZLv+
9PvLI2GPzhIRFVyV2mAcIEGgJRcvVP6gDqzTTY8n9Ec/9tBbmPX6VS5W/l4xXw1L
TvE=
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:10:39 2025 by rpki-client