Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MwVtMGd6-MIjT0BdbLmJx4fiqZ8.roa
File: MwVtMGd6-MIjT0BdbLmJx4fiqZ8.roa (raw, json)
Hash identifier: iEduPb4qnn0qBzBfHepo2MsY7rzrg2H/fcVnn9nr20A=
Subject key identifier: 33:05:6D:30:67:7A:F8:C2:23:4F:40:5D:6C:B9:89:C7:87:E2:A9:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187635AB7AE89967F008680744F4942ACAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MwVtMGd6-MIjT0BdbLmJx4fiqZ8.roa
Signing time: Sun 09 Apr 2023 00:11:42 +0000
ROA not before: Sun 09 Apr 2023 00:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:63:5a:b7:ae:89:96:7f:00:86:80:74:4f:49:42:ac:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 00:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33056d30677af8c2234f405d6cb989c787e2a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:ea:4d:3c:96:d8:0a:cc:dd:bc:49:4e:58:
ce:80:16:59:89:61:9c:7c:b3:2d:cb:db:32:66:18:
85:5f:1c:ed:24:26:dd:d2:d0:1c:4b:f5:e0:aa:45:
03:c0:37:f4:b1:a6:b8:48:5a:23:b8:a2:4e:3c:0d:
2f:6b:b3:f7:14:15:12:46:e3:39:1a:d7:56:e3:9b:
4e:53:07:4b:bc:ff:17:32:c9:b5:9e:66:26:5d:50:
77:de:9a:a5:e2:ea:b1:91:04:aa:3c:63:3f:c3:77:
0a:7e:3b:44:88:68:bd:03:b4:2e:3d:8e:44:5d:97:
00:0d:2c:a3:11:52:fb:22:b0:18:0f:59:6b:d8:96:
91:c5:b8:25:68:23:76:3b:b9:38:87:82:c2:08:d4:
2e:86:f1:37:56:5a:db:bf:cc:ec:94:ee:e9:51:f1:
13:3d:6e:fc:72:e2:b9:d3:b0:19:39:cf:73:57:60:
29:38:51:f7:2b:ce:1a:b5:7d:8c:5e:9d:51:e3:dd:
8b:2f:0c:00:60:10:71:c3:4f:1c:99:64:c7:d0:b1:
7a:3c:40:70:2d:08:a3:a9:66:8d:0f:b1:36:5d:76:
9f:92:6c:e4:aa:29:69:db:13:8e:1f:c1:b5:42:32:
c8:b4:70:7b:58:6c:8b:ce:f8:be:09:7a:ed:37:04:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:6D:30:67:7A:F8:C2:23:4F:40:5D:6C:B9:89:C7:87:E2:A9:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MwVtMGd6-MIjT0BdbLmJx4fiqZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:e4:8b:fa:78:03:ef:ca:39:f7:44:38:e7:1c:77:83:20:23:
21:df:0b:ee:60:69:a2:40:0c:e6:1b:e5:44:8a:0d:9d:85:27:
ab:3b:1b:43:c9:6b:92:50:b0:27:05:01:87:22:fa:1d:cc:0f:
15:4d:5f:d4:7e:0f:ea:d3:1e:65:8f:28:38:9d:a3:e1:3f:8e:
01:e4:6b:c7:68:39:22:11:63:2d:c5:84:f1:f7:03:26:d0:c1:
b0:3b:67:d0:5e:c4:d8:14:54:e6:94:1e:22:c8:89:9b:7b:f1:
c7:b2:a6:e6:5a:94:3c:20:62:27:13:3c:e3:0d:06:e7:94:45:
f0:f2:9b:52:2b:0d:2c:d4:fc:9c:bf:c4:96:6d:a3:69:92:e9:
ac:33:67:b3:92:24:ad:ed:07:88:50:08:1d:f5:0d:c0:e0:50:
f2:40:17:66:b2:97:24:ef:a1:0b:2d:16:55:64:29:55:2c:7d:
d4:a8:e3:5a:74:d8:c1:43:55:a4:10:0d:e5:43:5a:3b:c2:89:
51:a3:d9:b6:5f:a2:e7:a3:6d:3f:2c:6e:01:9f:aa:6c:03:4e:
2c:6f:f0:48:e9:e6:6e:2a:98:cb:f9:87:3f:ef:58:01:e9:a6:
09:2f:c7:7d:b3:b6:08:21:33:4f:af:2a:98:a7:aa:59:42:e4:
a2:d0:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:45:07 2025 by rpki-client