Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkBAuqKPYYOaYNnMIIYuxFdx_8.roa
File: MvkBAuqKPYYOaYNnMIIYuxFdx_8.roa (raw, json)
Hash identifier: tOj6ZjmZa+zZva27rao0D98732jrJbPDzaVH5VIBdvQ=
Subject key identifier: 32:F9:01:02:EA:8A:3D:86:0E:69:83:67:30:82:18:BB:11:5D:C7:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91417296
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkBAuqKPYYOaYNnMIIYuxFdx_8.roa
Signing time: Thu 30 Jun 2022 19:10:02 +0000
ROA not before: Thu 30 Jun 2022 19:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436985494 (0x91417296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 30 19:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32f90102ea8a3d860e698367308218bb115dc7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:c9:ae:cd:e1:a9:48:6b:e3:37:74:70:75:
d5:3d:1c:a1:fd:29:f1:66:d7:a8:40:ea:a7:66:3a:
a6:63:e8:a6:ab:fe:17:5f:59:09:dd:6d:5a:6a:fc:
9e:b0:8f:09:ce:8d:e1:11:5a:db:90:2a:6d:70:85:
07:10:03:5a:66:dc:cb:81:7b:cd:30:44:f1:52:fb:
0e:56:92:ae:c4:d5:9f:6b:6c:29:4a:a2:46:6a:fa:
4f:71:ca:11:0d:a5:b0:90:cd:53:06:9c:f6:17:38:
3c:d0:45:46:d4:1a:f2:a6:b5:74:36:41:95:95:79:
0e:d7:fd:02:34:26:40:4b:e1:ff:4b:97:d0:24:07:
ce:0e:13:26:a5:f3:64:f2:7c:e8:e3:16:eb:30:3e:
07:d3:4a:ce:1d:e8:08:ed:b8:be:68:cf:db:02:02:
4e:bb:9a:d8:3e:73:e9:d0:c0:2f:2a:a6:41:93:68:
1e:14:52:1d:f4:01:fc:03:78:bf:36:0c:5b:11:94:
83:1c:54:2e:3a:bf:7c:2b:23:33:9e:27:dd:5b:f7:
6a:70:40:4c:65:da:8f:65:36:9b:6e:04:94:a4:37:
46:b9:c2:eb:90:a9:45:f8:88:28:aa:d5:0e:fd:00:
df:02:21:62:3e:9e:76:ff:1c:e7:c5:2e:21:58:0d:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:01:02:EA:8A:3D:86:0E:69:83:67:30:82:18:BB:11:5D:C7:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkBAuqKPYYOaYNnMIIYuxFdx_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:f6:77:aa:04:f9:34:2d:b9:7b:a9:d2:5f:28:11:33:e9:7f:
09:e2:8b:26:0b:5b:b1:2c:1a:2a:c8:4f:65:02:b6:9d:83:5a:
d5:fd:87:a5:44:d3:52:a4:06:e6:78:c3:64:53:51:73:53:b6:
28:49:d8:97:de:d6:75:82:b1:ae:10:79:40:42:60:97:6a:9c:
a0:c6:a3:f0:a8:03:7d:1a:d9:46:e9:ca:49:9a:bd:38:20:5c:
e5:a1:c7:ed:81:78:c3:3e:76:b5:6a:66:a8:e8:1c:4e:ad:cd:
1d:d2:0e:55:0f:60:df:77:2d:f7:82:6f:6d:64:4c:ec:85:b7:
53:a4:c3:96:a6:20:16:8b:15:33:ea:f2:69:5b:ee:ee:69:7c:
35:81:98:e9:46:44:69:af:36:62:2e:6b:b7:d9:64:cf:fd:aa:
a1:84:31:47:c8:c7:83:2f:df:86:ca:78:1e:85:b4:63:3b:92:
b5:0d:17:6b:76:a2:10:77:60:9d:e6:82:88:ba:cc:59:ef:0e:
b1:64:39:00:87:0b:2a:03:4b:9f:38:fa:f8:dc:bb:0d:92:5f:
2f:91:e2:51:81:16:ed:05:f9:64:27:d9:5a:54:a7:8c:0f:b9:
53:3f:34:c8:04:18:b6:82:96:16:a9:10:67:bd:6b:8d:f2:28:
27:df:7a:60
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJFBcpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MzAxOTEwMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDMyZjkwMTAyZWE4
YTNkODYwZTY5ODM2NzMwODIxOGJiMTE1ZGM3ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWWsmuzeGpSGvjN3RwddU9HKH9KfFm16hA6qdmOqZj6Kar
/hdfWQndbVpq/J6wjwnOjeERWtuQKm1whQcQA1pm3MuBe80wRPFS+w5Wkq7E1Z9r
bClKokZq+k9xyhENpbCQzVMGnPYXODzQRUbUGvKmtXQ2QZWVeQ7X/QI0JkBL4f9L
l9AkB84OEyal82TyfOjjFuswPgfTSs4d6AjtuL5oz9sCAk67mtg+c+nQwC8qpkGT
aB4UUh30AfwDeL82DFsRlIMcVC46v3wrIzOeJ91b92pwQExl2o9lNptuBJSkN0a5
wuuQqUX4iCiq1Q79AN8CIWI+nnb/HOfFLiFYDZkLAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUMvkBAuqKPYYOaYNnMIIYuxFdx/8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9NdmtCQXVxS1BZWU9hWU5uTUlJWXV4RmR4Xzgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAVPZ3qgT5NC25e6nSXygRM+l/CeKLJgtbsSwa
KshPZQK2nYNa1f2HpUTTUqQG5njDZFNRc1O2KEnYl97WdYKxrhB5QEJgl2qcoMaj
8KgDfRrZRunKSZq9OCBc5aHH7YF4wz52tWpmqOgcTq3NHdIOVQ9g33ct94JvbWRM
7IW3U6TDlqYgFosVM+ryaVvu7ml8NYGY6UZEaa82Yi5rt9lkz/2qoYQxR8jHgy/f
hsp4HoW0YzuStQ0Xa3aiEHdgneaCiLrMWe8OsWQ5AIcLKgNLnzj6+Ny7DZJfL5Hi
UYEW7QX5ZCfZWlSnjA+5Uz80yAQYtoKWFqkQZ71rjfIoJ996YA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:20:32 2025 by rpki-client