Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0MdMcu6HSy5i5OqRa4czUJKuVCw.roa
File: 0MdMcu6HSy5i5OqRa4czUJKuVCw.roa (raw, json)
Hash identifier: vNDlCeG3G4YeFl0tLAzOfVGf9V9FN0nNdCfLpJGkNMw=
Subject key identifier: D0:C7:4C:72:EE:87:4B:2E:62:E4:EA:91:6B:87:33:50:92:AE:54:2C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF050214303372A7C9D29BBE5FB62505A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0MdMcu6HSy5i5OqRa4czUJKuVCw.roa
Signing time: Mon 02 Oct 2023 12:14:57 +0000
ROA not before: Mon 02 Oct 2023 12:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:50:21:43:03:37:2a:7c:9d:29:bb:e5:fb:62:50:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 12:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c74c72ee874b2e62e4ea916b87335092ae542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:ec:11:b4:8c:e8:1c:05:57:0f:29:82:e3:
bc:46:09:ba:62:6b:e0:c3:e3:87:9a:de:71:e2:28:
bc:bf:8d:2a:53:02:71:2c:f2:ec:37:97:1a:1b:b8:
91:79:84:4d:94:9c:1d:e5:b9:83:2c:3a:d4:ba:52:
45:b9:9b:ce:c2:e0:79:43:3b:b1:d5:51:38:de:0a:
f0:f1:8d:87:ca:f7:4e:74:c8:a4:1e:4f:33:f6:00:
ab:48:55:9b:83:34:f1:cf:55:48:ee:bf:c7:56:c4:
94:bf:59:37:d2:77:5f:6a:e7:61:15:8d:02:89:33:
b8:a6:63:3d:f2:1d:9b:78:cd:e1:4f:e7:4e:a0:61:
8c:b2:19:cc:20:74:ee:d5:ef:c2:b6:9f:4f:f1:4a:
81:6b:ba:f8:3d:63:55:20:af:a2:5c:3f:83:f5:f9:
ad:a1:ae:63:b4:8f:4a:7d:7f:c3:5d:5d:3c:eb:f6:
93:ee:60:f1:33:e5:1c:17:b8:52:0e:d9:f3:da:34:
34:4a:5a:46:69:8f:2d:08:35:bf:ec:03:8f:af:59:
a7:70:23:35:1d:4b:88:e9:91:b2:90:bd:af:b1:92:
02:88:71:78:45:d1:aa:ad:c3:5b:31:5b:19:20:25:
0e:21:05:16:50:52:3a:de:97:0a:1c:2f:d4:36:34:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:4C:72:EE:87:4B:2E:62:E4:EA:91:6B:87:33:50:92:AE:54:2C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/0MdMcu6HSy5i5OqRa4czUJKuVCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:15:3d:d5:23:0c:82:59:33:05:a7:67:64:b5:c8:f2:4c:0a:
77:ae:9b:46:94:e0:45:fd:dc:42:7f:8b:06:e5:0f:ef:28:d0:
ca:71:c8:34:e6:18:c2:53:f4:a4:f9:c7:28:fb:de:df:e0:22:
03:81:47:86:41:24:83:a6:8c:2e:74:ff:14:77:c4:ef:cf:d0:
ff:53:3d:e8:90:82:c2:0d:cc:ef:59:ee:93:27:ef:b9:62:28:
80:56:8b:38:27:b3:08:72:35:d6:1e:01:b4:51:85:a4:53:0b:
78:85:7f:99:ea:9f:a4:ac:7e:24:84:40:e4:5c:1b:2c:3a:75:
b8:0a:3f:06:b5:b3:12:32:9c:f3:da:b5:ee:4a:f3:7d:2d:d5:
04:bb:2b:fc:34:cb:8e:6d:9b:0b:12:56:c2:af:f9:a6:89:2d:
42:91:9f:d9:2b:30:75:39:13:bf:61:cc:cc:26:cf:51:79:33:
90:11:5d:3c:43:15:8c:45:05:16:cf:04:b0:5c:5b:83:0a:e0:
9e:a0:fb:77:af:33:31:e7:49:a2:6d:82:6e:9b:a8:6d:2f:89:
6f:e9:28:83:3e:65:87:d4:87:de:95:bf:2a:e3:f1:c1:89:c0:
7d:63:64:f3:d0:ca:96:8c:76:1a:12:88:67:40:72:4e:14:7f:
11:0d:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:01:31 2025 by rpki-client