Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkRLH4lorYMLY1c9IT3auS7Rd0.roa
File: MvkRLH4lorYMLY1c9IT3auS7Rd0.roa (raw, json)
Hash identifier: bMaLP8g2XtqUkXU6SbE/pnCElo3jpAK+Db4Qx5GCPV0=
Subject key identifier: 32:F9:11:2C:7E:25:A2:B6:0C:2D:8D:5C:F4:84:F7:6A:E4:BB:45:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D05707CC9BB35DD007E8E73EED5649D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkRLH4lorYMLY1c9IT3auS7Rd0.roa
Signing time: Sun 18 Jun 2023 21:09:04 +0000
ROA not before: Sun 18 Jun 2023 21:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d0:57:07:cc:9b:b3:5d:d0:07:e8:e7:3e:ed:56:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 21:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f9112c7e25a2b60c2d8d5cf484f76ae4bb45dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:38:ca:25:2b:ec:86:3e:9b:6a:68:11:ee:
69:e1:14:23:9c:fe:19:25:7d:ec:e9:1b:00:f0:f5:
92:93:52:e3:1e:ba:7c:3b:22:13:0c:34:7a:00:cb:
6f:c1:ae:8f:e1:4a:6b:92:d6:17:d4:9a:9f:3d:10:
07:9f:74:ba:63:64:c6:64:11:d1:bb:3b:c5:b9:4f:
59:20:02:f1:41:c3:fa:7e:98:bf:73:df:d0:c4:b8:
39:cc:42:6f:d9:f2:ff:df:c5:26:12:76:9e:2d:06:
1a:e1:93:a6:0d:12:0d:5b:dc:0e:f7:f9:87:8f:d0:
b5:34:ba:e5:61:5b:f0:96:b0:81:6b:3c:eb:0d:bd:
b3:54:c2:fa:0d:cd:35:dd:9e:d0:81:4b:a4:a4:92:
16:22:e5:56:b3:3b:7b:a9:d2:46:e6:f3:3a:e8:e9:
36:75:4c:22:b8:26:cf:16:24:3c:f7:ed:50:39:3e:
37:51:79:c1:d5:f8:2b:25:26:0c:9f:e6:6f:a9:35:
10:e6:00:e9:90:77:22:61:b1:73:72:35:16:0c:ea:
78:41:d5:da:04:db:cd:21:c7:0b:62:5e:4c:5c:17:
ec:8f:6b:d1:34:83:20:e4:3e:5f:e5:5d:28:59:10:
b2:7e:3b:f9:1c:38:8f:a4:c3:f9:40:a4:cf:37:9d:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:11:2C:7E:25:A2:B6:0C:2D:8D:5C:F4:84:F7:6A:E4:BB:45:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MvkRLH4lorYMLY1c9IT3auS7Rd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:f0:cc:37:33:e4:23:b9:17:f0:11:a2:b1:01:86:ca:e4:5e:
0a:b8:f8:2f:cf:ad:5a:10:55:f1:1a:35:dc:d5:bb:ed:3b:0b:
6f:be:38:e5:ec:19:50:35:7a:1d:3d:89:ec:57:ba:7d:6f:3c:
b2:57:0e:3b:c7:13:09:54:1e:c0:b6:0a:69:0f:6f:95:89:1e:
bc:ac:fc:35:b3:27:3f:a7:2c:f2:d5:68:fe:e5:21:45:12:08:
93:4b:a4:04:7c:ae:0d:63:45:55:e9:c9:88:c0:04:b2:8e:cc:
6c:5a:19:70:6a:ae:5d:91:5f:5f:58:f6:e4:b9:fd:37:be:6e:
3e:4c:f0:9e:cc:99:64:39:82:46:33:51:09:aa:95:cb:28:92:
3c:58:6b:59:c1:17:d2:d4:da:78:36:2f:b2:b7:9b:12:f0:bc:
64:90:e9:bc:da:11:7c:01:76:ad:78:df:1b:e2:6f:ad:57:3a:
a6:42:85:33:ae:d5:78:59:ad:c2:69:e7:1d:a1:51:40:0f:2c:
c7:12:be:62:dd:a8:09:c3:c2:d2:3e:db:5d:bd:26:f0:c4:bc:
8b:cd:d3:4b:07:5f:75:99:ad:d8:b6:9d:1d:1c:11:c6:69:ee:
db:e7:9f:05:de:10:cd:90:48:9a:1e:b4:4a:1c:fc:dc:50:0b:
75:06:71:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjQVwfMm7Nd0Afo5z7tVknWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE4MjEwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmY5MTEyYzdlMjVhMmI2MGMyZDhkNWNmNDg0Zjc2YWU0YmI0NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrU4yiUr7IY+m2poEe5p4RQjnP4Z
JX3s6RsA8PWSk1LjHrp8OyITDDR6AMtvwa6P4UprktYX1JqfPRAHn3S6Y2TGZBHR
uzvFuU9ZIALxQcP6fpi/c9/QxLg5zEJv2fL/38UmEnaeLQYa4ZOmDRINW9wO9/mH
j9C1NLrlYVvwlrCBazzrDb2zVML6Dc013Z7QgUukpJIWIuVWszt7qdJG5vM66Ok2
dUwiuCbPFiQ89+1QOT43UXnB1fgrJSYMn+ZvqTUQ5gDpkHciYbFzcjUWDOp4QdXa
BNvNIccLYl5MXBfsj2vRNIMg5D5f5V0oWRCyfjv5HDiPpMP5QKTPN51xcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDL5ESx+JaK2DC2NXPSE92rku0XdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXZrUkxINGxvcllNTFkxYzlJVDNhdVM3UmQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHLwzDcz5CO5F/ARorEB
hsrkXgq4+C/PrVoQVfEaNdzVu+07C2++OOXsGVA1eh09iexXun1vPLJXDjvHEwlU
HsC2CmkPb5WJHrys/DWzJz+nLPLVaP7lIUUSCJNLpAR8rg1jRVXpyYjABLKOzGxa
GXBqrl2RX19Y9uS5/Te+bj5M8J7MmWQ5gkYzUQmqlcsokjxYa1nBF9LU2ng2L7K3
mxLwvGSQ6bzaEXwBdq143xvib61XOqZChTOu1XhZrcJp5x2hUUAPLMcSvmLdqAnD
wtI+2129JvDEvIvN00sHX3WZrdi2nR0cEcZp7tvnnwXeEM2QSJoetEoc/NxQC3UG
cUM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:23 2025 by rpki-client