Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjmz9QgcWD_bi6jHEh7HnIaU1SE.roa
File: mjmz9QgcWD_bi6jHEh7HnIaU1SE.roa (raw, json)
Hash identifier: 0GdYQ/QJ6LquJuULc11iXoGiUd4vlaau3fKs3LFaqOg=
Subject key identifier: 9A:39:B3:F5:08:1C:58:3F:DB:8B:A8:C7:12:1E:C7:9C:86:94:D5:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189872BE0B9C2FF5C20F175DB6B83857A87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjmz9QgcWD_bi6jHEh7HnIaU1SE.roa
Signing time: Mon 24 Jul 2023 09:12:27 +0000
ROA not before: Mon 24 Jul 2023 09:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:2b:e0:b9:c2:ff:5c:20:f1:75:db:6b:83:85:7a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 09:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a39b3f5081c583fdb8ba8c7121ec79c8694d521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:a1:32:ad:ea:dd:30:36:cd:65:3a:f8:93:
cc:44:05:2a:5b:40:7f:03:60:86:ce:2b:5b:7e:09:
58:2a:83:02:de:2f:87:8c:e1:54:c4:cd:23:ef:57:
c6:ac:80:00:fb:94:17:73:0f:27:46:6a:3e:21:c9:
dc:a6:34:96:a3:12:e1:36:c7:80:86:42:24:79:d6:
52:8e:ff:b2:02:67:5d:f1:24:a6:53:d2:1d:72:27:
e6:24:77:27:9d:ee:84:27:ef:0b:29:33:be:f4:18:
b9:b0:98:94:d4:e1:a8:1a:99:7e:6e:7d:e6:47:c1:
6d:7f:ab:6d:76:af:a8:a2:c4:28:ba:ed:60:d2:45:
a9:a1:64:e5:d7:07:d3:bf:ad:6a:78:3f:81:0a:84:
97:9b:c3:a6:e1:a6:9d:cd:21:02:4a:bc:6d:cd:4b:
88:9a:68:9d:1f:bd:27:32:52:9a:a4:c6:00:c2:57:
8c:87:7d:51:31:25:52:ca:bb:74:ea:1c:2b:44:1c:
8f:39:aa:d5:27:1b:96:d8:8a:b6:59:cb:3a:a6:e0:
ff:44:56:f8:48:94:fe:72:d2:42:55:86:a0:f4:13:
95:c2:5b:a4:b3:f8:84:a0:9a:5b:44:76:5f:ad:a4:
d4:99:ad:a1:6e:28:13:da:01:62:b6:d2:e7:4d:c9:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:39:B3:F5:08:1C:58:3F:DB:8B:A8:C7:12:1E:C7:9C:86:94:D5:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mjmz9QgcWD_bi6jHEh7HnIaU1SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:16:65:27:7b:76:a1:f2:09:23:7a:48:ec:76:9a:6e:7e:41:
5d:7c:d3:a7:19:02:45:18:78:a8:02:80:39:8c:51:b4:35:b9:
07:b1:04:72:92:c6:59:23:ef:8c:77:ed:7f:74:64:ba:b7:ed:
6a:5a:97:5c:48:ca:c0:68:05:58:6e:19:8f:83:ce:9e:e9:9b:
60:67:19:14:73:ac:ac:64:7d:05:36:86:fa:b9:e4:77:df:89:
e4:3d:b3:ed:bc:16:67:35:1f:ea:bd:42:e9:98:7c:3f:fb:b1:
68:8d:c8:48:f2:77:59:9b:e8:f8:a5:14:2e:dc:48:06:7d:99:
1c:55:95:40:a8:6b:85:a7:f9:e5:c2:41:68:0f:32:2a:bd:1b:
c5:af:57:28:8b:7c:ce:8d:8e:99:3e:3f:1d:8a:91:40:f1:47:
c9:3e:f7:29:70:68:c3:0f:09:ad:de:8e:6b:3a:d0:4c:34:c6:
b7:55:88:f4:98:05:b6:cf:d9:17:92:f0:36:9a:65:5a:25:72:
a3:a7:4b:89:87:d4:b9:79:a3:5a:f0:e1:ee:bd:f3:06:96:75:
e3:c6:38:f2:7d:83:a3:a5:8d:ed:51:21:c4:0c:35:6d:79:46:
ce:79:0b:a4:28:9c:97:c9:7b:3e:ae:d5:58:8a:5d:f5:81:d9:
0f:59:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:27:21 2025 by rpki-client