Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0Mcrm3rl4wk9IGpzkTQYBwYnPsw.roa
File: 0Mcrm3rl4wk9IGpzkTQYBwYnPsw.roa (raw, json)
Hash identifier: rZ9GH/UWygaVOxncSS2egetKWWnlmTpYEUW2Obbn+Io=
Subject key identifier: D0:C7:2B:9B:7A:E5:E3:09:3D:20:6A:73:91:34:18:07:06:27:3E:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C66EDBF462C00E96CC2452D7E8F80F50A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0Mcrm3rl4wk9IGpzkTQYBwYnPsw.roa
Signing time: Thu 14 Dec 2023 06:05:06 +0000
ROA not before: Thu 14 Dec 2023 06:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:66ed:1eb5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:ed:bf:46:2c:00:e9:6c:c2:45:2d:7e:8f:80:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 14 06:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c72b9b7ae5e3093d206a739134180706273ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:13:e7:22:66:63:8c:75:d7:29:2d:56:ab:
ee:be:50:79:bc:29:0a:9f:8f:d1:e3:22:5f:93:53:
1c:4f:3b:9b:c9:56:7f:22:c4:24:90:18:9a:3c:69:
36:b0:36:b4:5f:9d:07:7f:b7:12:16:19:23:4c:c9:
5a:7b:d4:31:5f:f3:0b:f1:82:b7:e2:ec:7b:4d:b4:
52:9b:99:9c:71:c3:99:51:30:fc:f8:22:e7:e4:b9:
b1:c7:3c:59:48:5f:68:2c:c1:b5:f8:bb:d7:80:8d:
5a:97:c2:9a:5d:f4:00:b7:fe:92:b7:27:3a:75:95:
dc:33:bf:da:ef:b6:4a:df:7f:d1:79:d5:7c:df:1e:
7a:e1:00:4e:2a:8a:6e:17:52:af:4d:3d:c8:e3:72:
a1:0f:e9:b8:b6:aa:cd:f4:28:c5:14:37:93:09:f9:
29:8f:00:d3:b1:18:e9:9d:f2:2a:c5:06:c9:20:f5:
3e:2b:a3:c8:f1:02:5d:97:7f:c7:fc:46:48:b4:91:
d2:cc:44:bc:a1:93:d7:c1:25:33:11:25:6b:7f:c0:
f8:99:63:b1:cb:af:3e:36:da:d8:41:4a:33:20:cb:
ec:54:02:5f:a1:6d:ee:ce:d3:ac:49:a1:c7:33:4f:
db:f1:59:c3:b4:29:3e:4c:f6:da:20:5e:f0:33:2f:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:2B:9B:7A:E5:E3:09:3D:20:6A:73:91:34:18:07:06:27:3E:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0Mcrm3rl4wk9IGpzkTQYBwYnPsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:5e:4e:e5:73:f9:42:15:54:65:2e:f2:ac:b7:8c:1d:75:88:
51:35:2c:af:34:f2:94:64:ab:c6:35:da:6f:3b:b6:a5:88:ff:
25:76:25:c6:fa:13:db:37:0a:68:cd:cb:e3:42:af:0c:55:fd:
07:f1:c1:03:c4:be:7f:f8:51:8e:2d:31:ab:d3:20:1f:4a:d4:
b6:a1:b0:46:01:c3:d7:17:0c:40:58:3f:4a:f7:38:b2:10:ec:
1f:8b:7e:f3:32:6c:37:df:d7:41:71:5e:7c:e7:0b:24:41:36:
48:2e:14:d5:72:79:9d:0b:68:ba:bd:dc:8c:36:60:ef:4c:f4:
2a:28:56:00:f7:23:8b:ed:3d:87:df:c4:4a:68:9a:a4:27:32:
aa:41:dd:a5:0e:d3:dd:8d:9b:4b:cd:ce:50:a7:f9:a1:58:1b:
e4:b1:5a:b1:37:70:44:94:50:d5:87:3f:3b:20:90:ec:4c:c8:
f2:58:0f:07:50:5e:a7:ff:f6:0b:d1:70:a9:1b:cf:10:67:97:
18:27:38:27:0f:a0:2a:23:cd:e9:f6:01:8b:a4:dc:c0:cb:9e:
44:3d:70:a7:65:52:f5:1e:47:82:4b:72:65:d6:02:e1:58:07:
c3:df:67:81:a0:14:73:55:74:c8:1b:d7:72:a5:10:00:80:96:
f8:9b:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:31:19 2025 by rpki-client