Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-mZmMRKR-2-5w_8mAJtkrBCClsQ.roa
File: 1-mZmMRKR-2-5w_8mAJtkrBCClsQ.roa (raw, json)
Hash identifier: 9u/r8ifSa6PIW+ZVNZirO6YWujr0TpFUGie+rbW+MGI=
Subject key identifier: FA:66:66:31:12:91:FB:6F:B9:C3:FF:26:00:9B:64:AC:10:82:96:C4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDFC9612B0768E217EAC41A26738DABA9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-mZmMRKR-2-5w_8mAJtkrBCClsQ.roa
Signing time: Sat 18 Nov 2023 00:16:38 +0000
ROA not before: Sat 18 Nov 2023 00:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:df:c9:61:2b:07:68:e2:17:ea:c4:1a:26:73:8d:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 18 00:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa6666311291fb6fb9c3ff26009b64ac108296c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:87:9e:c0:32:b7:5c:55:db:25:ac:d9:87:
71:6c:2f:40:9e:e7:d6:66:c8:94:e7:5b:a2:87:66:
8a:25:c6:00:45:6d:90:3f:81:92:64:fc:4b:2f:a1:
f2:10:d4:60:84:18:e9:42:ad:e6:6f:5b:9a:39:f3:
b3:e5:3a:dd:6a:33:f0:36:bd:3e:7e:0a:af:63:c2:
f9:7d:b5:be:74:24:59:31:ec:7b:89:68:6a:bc:b5:
25:88:3f:fb:ef:88:30:aa:c1:51:28:72:76:eb:fd:
ca:bd:11:63:3f:7b:fc:d9:22:9a:be:d1:d2:69:79:
73:d9:cc:f9:bc:c8:19:3b:f2:cc:43:53:e8:13:03:
d5:5f:bc:e5:26:d2:18:f1:6e:df:01:4a:88:6c:90:
aa:93:a3:43:6d:16:1a:dd:11:41:c3:93:1e:2b:47:
b4:b6:e5:58:23:85:a7:56:14:a0:69:c9:76:aa:bd:
47:32:96:fc:49:4f:1d:80:51:f1:a8:28:28:25:2b:
46:63:54:8e:33:aa:40:4e:4f:bd:32:01:bc:7d:44:
24:72:2a:41:fa:79:ff:34:48:03:ae:02:09:5d:f6:
69:e6:a1:c7:1c:f5:ea:82:2c:ad:24:7a:31:1b:ae:
b5:df:15:6e:7c:9b:41:19:b0:bc:ea:78:a6:ed:1e:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:66:31:12:91:FB:6F:B9:C3:FF:26:00:9B:64:AC:10:82:96:C4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-mZmMRKR-2-5w_8mAJtkrBCClsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9f:9f:25:47:43:1e:c8:39:dc:61:8e:05:11:9f:10:dd:a9:
02:eb:b5:d4:63:51:ea:4c:16:ca:15:c3:fc:37:fa:a7:43:52:
55:fc:a9:c0:85:07:a9:43:ff:67:72:9d:db:b0:99:ef:39:e9:
11:e0:6d:a9:d9:1e:d7:ea:d0:84:8c:50:1c:30:6b:44:45:83:
1b:0f:27:9a:e5:fb:68:e2:ba:a9:eb:9a:6f:8f:71:7f:91:47:
4f:69:85:93:0d:c8:01:14:9c:88:5f:bd:0f:2d:b0:a5:76:6f:
c4:a5:15:93:e1:e7:50:19:79:2c:db:db:5b:3e:a0:57:e5:e2:
43:37:5e:4f:a8:70:61:01:a7:fd:b5:8e:76:3f:eb:ff:4b:b5:
b6:a2:12:f4:f0:06:d1:b0:db:e7:39:d8:8d:05:10:4f:31:f2:
fe:f1:ef:d8:0b:fe:31:40:07:e9:72:f1:b9:72:f9:cd:00:28:
f7:6e:ef:8e:d4:33:43:05:2a:43:6d:3a:45:c4:e3:0b:f3:c3:
d6:96:f6:63:f4:7b:c8:1d:7e:8d:3d:3d:1b:34:f8:b1:71:b2:
05:cc:aa:dd:01:aa:b6:b9:c3:6f:9a:a2:b0:e5:b7:70:99:c1:
e3:90:5c:8a:c3:68:8e:ac:a8:23:a3:d8:3b:48:5a:ba:97:bb:
f6:df:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:16:12 2025 by rpki-client