Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/22MMCXV39mRksqRlXj9h_APzz0c.roa
File: 22MMCXV39mRksqRlXj9h_APzz0c.roa (raw, json)
Hash identifier: ljJNHoABdVKZSM7IR9vpa9pGklKI+7COljhnxWE5fkg=
Subject key identifier: DB:63:0C:09:75:77:F6:64:64:B2:A4:65:5E:3F:61:FC:03:F3:CF:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0DB5073510ABDB0FF08916440A2B45E1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/22MMCXV39mRksqRlXj9h_APzz0c.roa
Signing time: Sun 26 Nov 2023 22:16:56 +0000
ROA not before: Sun 26 Nov 2023 22:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:b5:07:35:10:ab:db:0f:f0:89:16:44:0a:2b:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 22:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db630c097577f66464b2a4655e3f61fc03f3cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:ba:82:79:51:47:df:c7:8f:a2:cb:d6:7d:
5b:41:d7:59:25:02:1d:75:c8:98:c7:4b:4e:99:6f:
4b:75:e8:8a:2a:75:07:7a:6a:ea:9a:cc:a4:12:26:
00:01:a9:78:39:cf:58:06:49:e8:5f:cb:81:b0:32:
4f:df:31:4f:32:89:3a:f5:f9:85:52:d5:27:00:02:
39:6f:84:fe:80:b2:9d:1f:f4:24:7f:49:3a:f3:5f:
11:38:77:99:cc:7e:5c:df:3d:fe:03:4c:d0:d7:29:
b2:e1:65:55:a8:8b:9b:0d:9a:06:eb:f0:fa:0b:d3:
84:01:64:82:0a:39:33:c0:85:2e:6c:7c:eb:cc:12:
01:02:95:53:8c:24:56:02:53:19:e7:9a:54:da:d5:
40:a9:63:30:13:e2:b0:40:9a:81:8e:17:89:bc:12:
bd:ec:d7:5d:ee:3a:40:a5:03:7b:ef:fc:34:e1:b2:
a5:d0:17:10:eb:7f:cc:f5:71:6f:46:1e:63:04:85:
fd:55:c1:2d:ac:9b:f7:71:26:35:69:95:72:c7:f7:
ba:48:ab:24:b4:9c:7c:42:c9:ca:00:1d:1a:7d:d8:
54:29:d5:6f:c2:b1:7b:ff:13:c1:08:25:95:8d:4e:
b4:28:42:ea:9d:3d:41:2d:66:6a:98:3d:a1:7b:70:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:63:0C:09:75:77:F6:64:64:B2:A4:65:5E:3F:61:FC:03:F3:CF:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/22MMCXV39mRksqRlXj9h_APzz0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:7f:3d:d5:98:7d:06:ce:f5:d3:f0:bc:a8:bd:29:fc:98:1d:
c5:92:09:ee:9b:08:73:b9:91:ec:db:ba:65:4b:93:5f:4d:92:
66:40:d4:3f:92:e6:ca:26:38:08:2c:7c:9f:6b:57:99:79:d8:
46:fc:55:17:86:b8:57:bd:07:24:7b:fe:cd:54:9a:7f:77:3e:
10:bb:1d:e9:58:2f:e3:af:de:54:5d:51:da:4e:61:fd:74:db:
c0:a4:10:45:0c:91:65:31:2b:8d:58:97:db:44:48:46:27:77:
38:e0:f4:2e:53:32:57:44:b3:c7:1d:f3:bc:bc:63:f7:ed:54:
7b:e2:02:53:48:ee:1c:41:29:19:87:fe:30:70:4c:d3:b5:c3:
a1:19:09:d0:24:62:57:89:13:fc:4f:ae:9b:9b:e0:7e:1f:4f:
d1:53:2b:fd:70:f5:60:22:ac:20:e6:41:dc:5c:03:de:1e:ab:
59:c6:b6:2b:74:06:82:19:36:87:a8:81:8f:6d:5b:51:d7:93:
22:ec:d1:ac:0a:bb:c9:84:58:e6:02:c6:12:0e:f0:63:eb:9e:
70:44:0c:60:45:78:06:ba:8f:d7:dd:e9:dc:71:51:7c:08:88:
bc:8e:b6:ec:6d:c7:17:fe:ee:12:b0:c3:eb:f1:0c:75:b9:f8:
45:43:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:12:25 2025 by rpki-client