Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M3VGPa8zh468HvktaHJyOg_iKiE.roa
File: M3VGPa8zh468HvktaHJyOg_iKiE.roa (raw, json)
Hash identifier: 2Urjb7MRVh9+K2XZXZbSfoXkOQj97lWZ4p4tyV3xsWY=
Subject key identifier: 33:75:46:3D:AF:33:87:8E:BC:1E:F9:2D:68:72:72:3A:0F:E2:2A:21
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFAFE736ADD16B10951764D788F72242C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M3VGPa8zh468HvktaHJyOg_iKiE.roa
Signing time: Thu 23 Nov 2023 07:04:21 +0000
ROA not before: Thu 23 Nov 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:fafe:42d0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:fe:73:6a:dd:16:b1:09:51:76:4d:78:8f:72:24:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3375463daf33878ebc1ef92d6872723a0fe22a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:df:ae:34:37:e6:df:a3:f0:1b:cb:83:1f:
9e:56:37:26:90:88:a9:76:1c:7a:aa:3c:f9:76:7d:
c3:c1:9a:5d:17:49:24:63:4a:d3:f9:b8:a8:ab:93:
7a:a5:b8:b4:6b:01:91:04:72:d8:4b:74:0c:11:73:
a1:c5:46:13:6f:de:70:44:64:4c:7c:df:f9:ab:59:
8d:4a:b5:45:ca:6b:0d:31:c5:73:17:d6:0f:cc:67:
6a:0c:c5:8d:1e:4e:13:f4:cf:d4:77:c9:67:2f:c2:
59:c8:24:3b:b9:6a:77:27:d4:2a:78:b1:50:38:f9:
b8:bf:e8:5f:e8:3e:21:ec:e6:e8:bd:a9:f0:53:21:
23:df:9a:fb:f4:78:87:bd:c3:07:5b:a4:fa:57:ab:
40:ca:4d:bf:ab:e2:c7:c3:01:12:62:43:20:2a:d2:
75:d2:c4:d8:d1:2c:cd:ae:5e:1a:cd:84:4b:a7:6b:
67:9c:dd:0f:66:e1:47:57:a2:e5:b5:96:62:64:9b:
6e:bc:7d:47:db:6c:95:3c:c6:59:d2:fb:74:f3:8b:
8c:44:7d:74:25:00:3d:06:05:6a:a3:7b:7a:af:76:
f8:65:4a:5a:6c:ed:5c:b7:7c:a0:3d:cc:16:9c:e5:
7c:1b:04:6c:8f:d4:4b:0a:45:a9:3a:aa:19:8a:81:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:46:3D:AF:33:87:8E:BC:1E:F9:2D:68:72:72:3A:0F:E2:2A:21
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M3VGPa8zh468HvktaHJyOg_iKiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2e:be:cc:c3:60:27:a0:95:ae:a9:73:d5:2a:4f:49:3e:32:
7f:fc:b4:5b:53:b6:06:cb:03:9f:89:c8:a9:af:47:2d:09:1c:
f5:c2:d5:26:d2:a2:70:66:2a:53:e8:7d:b2:92:a9:d6:8f:23:
4d:14:92:47:e9:58:fd:ce:fe:aa:eb:4c:a7:d8:ee:c5:35:6b:
bc:5b:54:98:a7:09:5c:45:72:a9:75:0f:69:d4:c5:54:0f:77:
e8:d5:f6:77:20:8d:bf:b0:9d:d6:cb:48:00:aa:08:47:8c:79:
02:43:5a:fe:1d:93:62:9f:29:32:33:2a:c3:a4:95:f5:26:87:
f4:94:85:5d:97:37:89:6b:66:87:bc:9c:4c:be:ab:05:0a:0b:
e8:e3:34:3f:a9:e4:f2:e3:8a:01:6c:f8:eb:ab:9c:2e:20:8b:
29:f6:32:61:2e:18:0f:4c:01:8c:e9:16:71:e0:61:83:5f:64:
f4:e0:0a:61:ac:17:99:9c:c2:da:8d:02:77:ab:df:56:9b:61:
95:7a:fb:4b:9d:b4:56:24:18:16:d7:7b:d3:77:81:ee:e7:8c:
16:d9:97:c8:9a:20:9f:9b:34:39:c3:a7:5b:20:e3:e9:83:f4:
b7:6d:ac:eb:88:7f:24:32:98:b8:65:24:74:80:94:1d:fe:96:
58:4c:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:40 2025 by rpki-client