Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPHHNCyMSzjGIssDgARaty0r208.roa
File: mPHHNCyMSzjGIssDgARaty0r208.roa (raw, json)
Hash identifier: eL0IhbJlzu88BINLon0S1jwt+QwDVv5EJj1zSNWzSbM=
Subject key identifier: 98:F1:C7:34:2C:8C:4B:38:C6:22:CB:03:80:04:5A:B7:2D:2B:DB:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865DC8AAA6539033062BAD462CC38556EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPHHNCyMSzjGIssDgARaty0r208.roa
Signing time: Fri 17 Feb 2023 05:11:17 +0000
ROA not before: Fri 17 Feb 2023 05:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5d:c8:aa:a6:53:90:33:06:2b:ad:46:2c:c3:85:56:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 05:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98f1c7342c8c4b38c622cb0380045ab72d2bdb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:2e:5f:01:39:df:f9:7e:65:37:f0:e2:13:
92:9c:0d:54:16:b5:26:8d:d4:5d:12:e8:9d:d2:4f:
21:82:2f:ce:3a:55:f6:64:54:b1:ee:93:3c:91:b7:
50:7e:d4:cd:3f:c1:db:ff:16:45:01:c8:a3:fd:1b:
f3:f9:05:9e:bb:c0:0c:ea:b2:74:e8:cc:5f:a5:05:
d9:a8:5c:db:eb:d3:fa:60:fa:c1:23:ca:ad:b4:90:
24:5c:b3:61:e8:66:07:06:b3:31:e2:fd:f6:4d:93:
3d:60:db:e0:eb:09:3c:a2:2c:20:42:ef:e9:47:70:
d6:2d:35:a2:34:b8:5c:3a:91:f6:41:80:56:83:84:
00:9e:4e:9a:5e:6a:e9:0a:fa:e8:4a:e5:a5:ac:46:
86:ee:c5:71:81:e6:e7:1c:1c:5d:28:b8:43:6f:c3:
83:3c:9f:17:1e:f0:c9:18:cd:a9:f4:6c:49:b9:14:
0f:fb:d7:be:21:39:31:25:ae:88:d9:5b:10:1a:44:
38:70:ca:78:39:43:88:a1:f6:d3:9b:1f:6d:81:33:
1d:d7:a1:eb:ad:34:a3:bf:92:74:58:7c:24:c0:8a:
e4:5b:61:53:e7:17:23:53:69:1e:86:5f:d2:35:8d:
e7:50:fd:74:51:39:0c:79:fe:53:69:8a:9d:25:e2:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F1:C7:34:2C:8C:4B:38:C6:22:CB:03:80:04:5A:B7:2D:2B:DB:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPHHNCyMSzjGIssDgARaty0r208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:52:06:e2:32:f8:d6:7b:91:2f:71:65:a2:40:72:55:ab:38:
74:72:0c:f7:6f:a3:21:86:65:ee:60:d2:d9:76:13:72:ad:c8:
8c:72:1a:4a:e7:06:70:3d:af:d9:a9:1b:32:67:cb:33:b2:15:
ff:b9:a9:66:a1:da:52:6f:d4:b9:29:be:79:3b:20:63:9c:12:
22:59:7b:7f:03:05:aa:b1:40:fd:05:8d:c6:6d:5c:3c:d7:00:
94:58:f4:5e:6d:4e:e9:e2:8b:5f:50:ec:f9:88:c9:1e:b7:2c:
de:1c:69:58:60:b5:98:64:26:ea:c6:60:9f:42:34:a8:61:e5:
06:08:e6:6d:39:2c:a6:1e:7f:69:04:be:db:6f:83:a9:e9:86:
49:41:38:51:30:be:12:e9:33:4c:e0:d5:2c:e8:2a:75:e1:02:
7e:62:36:8b:32:35:ca:86:b4:b2:53:bf:7d:d0:ae:14:fe:af:
24:c5:5a:0e:7f:79:9c:62:8b:e7:2f:35:03:49:b2:e0:05:bb:
96:ea:fb:3c:7d:37:fa:b2:32:5d:4f:5c:c2:11:99:27:b2:ee:
b7:ea:31:34:17:16:7b:82:30:65:92:71:43:d3:b4:ca:96:4d:
f3:19:7a:22:56:d9:f6:8f:55:ee:f6:c6:39:b3:f9:9b:9d:0a:
36:ad:0a:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZdyKqmU5AzBiutRizDhVbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE3MDUxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGYxYzczNDJjOGM0YjM4YzYyMmNiMDM4MDA0NWFiNzJkMmJkYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjIuXwE53/l+ZTfw4hOSnA1UFrUm
jdRdEuid0k8hgi/OOlX2ZFSx7pM8kbdQftTNP8Hb/xZFAcij/Rvz+QWeu8AM6rJ0
6MxfpQXZqFzb69P6YPrBI8qttJAkXLNh6GYHBrMx4v32TZM9YNvg6wk8oiwgQu/p
R3DWLTWiNLhcOpH2QYBWg4QAnk6aXmrpCvroSuWlrEaG7sVxgebnHBxdKLhDb8OD
PJ8XHvDJGM2p9GxJuRQP+9e+ITkxJa6I2VsQGkQ4cMp4OUOIofbTmx9tgTMd16Hr
rTSjv5J0WHwkwIrkW2FT5xcjU2kehl/SNY3nUP10UTkMef5TaYqdJeKpawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJjxxzQsjEs4xiLLA4AEWrctK9tPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbVBISE5DeU1TempHSXNzRGdBUmF0eTByMjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHtSBuIy+NZ7kS9xZaJA
clWrOHRyDPdvoyGGZe5g0tl2E3KtyIxyGkrnBnA9r9mpGzJnyzOyFf+5qWah2lJv
1Lkpvnk7IGOcEiJZe38DBaqxQP0FjcZtXDzXAJRY9F5tTunii19Q7PmIyR63LN4c
aVhgtZhkJurGYJ9CNKhh5QYI5m05LKYef2kEvttvg6nphklBOFEwvhLpM0zg1Szo
KnXhAn5iNosyNcqGtLJTv33QrhT+ryTFWg5/eZxii+cvNQNJsuAFu5bq+zx9N/qy
Ml1PXMIRmSey7rfqMTQXFnuCMGWScUPTtMqWTfMZeiJW2faPVe72xjmz+ZudCjat
CpU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:38 2025 by rpki-client