Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvVVj1LV-BtTmGy0niCR4nPUVKA.roa
File: mvVVj1LV-BtTmGy0niCR4nPUVKA.roa (raw, json)
Hash identifier: EdKkZcHVh9RXj1wgpx2HRgLeVWeWeSheR7GQI/U+Ux4=
Subject key identifier: 9A:F5:55:8F:52:D5:F8:1B:53:98:6C:B4:9E:20:91:E2:73:D4:54:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CA212281CD32E4294C0B7DC1DF950A68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvVVj1LV-BtTmGy0niCR4nPUVKA.roa
Signing time: Fri 28 Apr 2023 23:09:41 +0000
ROA not before: Fri 28 Apr 2023 23:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ca:21:22:81:cd:32:e4:29:4c:0b:7d:c1:df:95:0a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 23:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af5558f52d5f81b53986cb49e2091e273d454a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:6a:5c:ab:9e:19:5b:68:e2:0e:43:7b:b9:
a9:47:b6:b5:e2:e4:33:87:c8:54:44:e3:d6:08:e0:
e8:e7:8c:38:77:83:25:bd:b4:8b:6b:a1:01:87:b4:
72:bd:e6:2a:22:15:23:58:4b:a9:83:e5:4b:b6:d2:
18:fe:c7:d2:8f:c5:cd:f7:40:7a:aa:ee:06:51:36:
49:95:7f:e7:d5:28:0a:16:5f:28:ba:27:0d:30:cc:
0e:7c:99:3d:5d:1f:c0:81:6d:39:c4:f0:cf:d3:41:
53:af:1a:0c:05:e2:1c:01:b8:2c:46:f7:8a:4a:d3:
91:65:f2:8f:7b:95:76:5e:2f:a7:8b:40:01:54:31:
fb:16:26:9e:70:02:c0:2c:48:8c:ee:d0:85:a5:bf:
da:15:ae:f6:67:ba:33:d2:c6:4e:39:54:97:92:33:
44:ad:6c:22:ca:1b:7c:f8:ad:ef:d4:23:25:80:da:
a1:a6:f4:0f:27:75:6b:5e:9b:79:eb:56:27:69:2e:
a4:b0:99:57:fe:0e:cb:c9:d2:1c:0e:29:23:70:04:
1d:94:9d:e3:e0:e9:41:77:15:b4:88:c9:a9:08:94:
96:46:5c:25:7f:21:42:d7:65:18:e6:c4:43:4b:44:
64:79:e3:6c:d0:63:fe:25:e4:4b:55:68:1c:78:36:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:55:8F:52:D5:F8:1B:53:98:6C:B4:9E:20:91:E2:73:D4:54:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mvVVj1LV-BtTmGy0niCR4nPUVKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:26:cb:ca:96:3b:61:6a:e6:c6:9c:6c:06:ee:39:c1:07:46:
8a:56:02:7b:ac:2d:d9:72:f9:43:cb:ca:db:30:08:a8:fd:6f:
0f:35:6f:33:8c:a3:be:86:ad:b7:dc:0f:e7:11:ac:d6:4b:18:
a2:26:04:24:94:91:b2:1c:aa:cc:86:67:ca:ee:67:39:49:c1:
b8:40:11:7b:b2:cf:ee:4b:90:7e:78:72:b5:d2:49:8c:d1:a7:
52:11:f0:a6:25:08:2c:31:09:8b:2a:d0:0a:b9:46:07:73:6c:
d3:a8:ec:1c:8b:a5:0b:c8:df:6e:aa:21:e0:e4:a2:9f:61:f3:
bd:b9:cf:27:b7:6b:b3:7c:51:af:1b:de:cc:62:02:eb:e3:c6:
5b:c9:35:ab:9f:7e:96:a5:39:cb:ef:bb:d6:00:be:e2:ab:78:
ce:75:c0:68:2e:7d:66:eb:51:45:48:58:6b:1e:1c:78:28:36:
72:12:90:f6:a1:48:6f:e7:50:f8:3e:a2:96:c3:f6:bf:d9:64:
56:85:55:47:59:a0:d2:55:94:1e:18:c5:ce:e6:71:a2:13:5a:
3e:66:65:ea:19:c1:d0:16:be:1b:6f:ab:c4:8e:26:d6:be:0c:
bf:90:29:e7:50:4f:d7:80:50:7c:ec:c8:72:a5:3f:7f:d7:2f:
67:56:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:34:33 2025 by rpki-client