Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M67QJKQajk3dk5rF-cNxM43Hn3Q.roa
File: M67QJKQajk3dk5rF-cNxM43Hn3Q.roa (raw, json)
Hash identifier: eZfUrjKUzUNpUe36vua2uCEn0aZRVkjqxZT7axda9B4=
Subject key identifier: 33:AE:D0:24:A4:1A:8E:4D:DD:93:9A:C5:F9:C3:71:33:8D:C7:9F:74
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1E38B8A0696B86BD4AF4DEB5A6B67ABC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M67QJKQajk3dk5rF-cNxM43Hn3Q.roa
Signing time: Wed 11 Oct 2023 10:11:55 +0000
ROA not before: Wed 11 Oct 2023 10:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:38:b8:a0:69:6b:86:bd:4a:f4:de:b5:a6:b6:7a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 11 10:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33aed024a41a8e4ddd939ac5f9c371338dc79f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:8e:ec:72:6b:5e:2c:63:7f:72:7a:32:1b:
93:54:80:95:d5:db:5f:5d:7b:92:c3:4c:ed:ef:0d:
d4:18:07:59:25:fb:a1:e9:bd:4a:a1:d2:9f:1d:95:
5c:04:32:90:ca:62:a5:2e:2c:e8:b5:f7:41:a0:e8:
6c:0d:87:5f:73:e1:a0:d9:0e:85:74:1a:39:f2:39:
09:57:ff:83:a2:ea:93:4d:8a:16:ea:70:38:d8:23:
be:67:d0:07:0b:01:30:b7:a0:37:09:06:fc:22:50:
57:ee:85:13:06:d1:84:8b:e8:c2:5b:85:d9:81:80:
bf:68:6c:2b:8b:42:f3:8b:66:76:00:fd:9a:9c:6e:
30:c9:8f:b6:1e:8e:26:9f:d0:bc:dc:12:02:0b:b2:
4c:f5:63:57:32:49:40:24:38:ab:6b:38:52:0a:51:
90:42:bd:ef:1e:58:50:70:9e:50:f3:f4:44:f7:7c:
da:d0:d9:b6:7a:d1:91:8d:d2:3d:cd:11:2c:3d:6c:
40:49:4a:5d:6b:e2:9d:5e:0b:61:67:94:bd:39:a1:
96:d0:e0:68:67:61:47:0a:b6:cf:1a:77:8c:27:4b:
a6:60:26:25:8d:62:a6:03:ba:27:cd:13:8e:6e:0a:
a8:f0:81:02:1e:53:10:18:79:c7:4a:1a:2c:31:3e:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:D0:24:A4:1A:8E:4D:DD:93:9A:C5:F9:C3:71:33:8D:C7:9F:74
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M67QJKQajk3dk5rF-cNxM43Hn3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:c9:ca:f2:ba:ab:ca:0d:81:52:53:1c:40:21:bc:09:32:de:
98:9a:dd:3a:21:f5:28:71:d1:3d:81:98:a9:23:a9:68:82:38:
58:0e:c4:99:60:11:58:86:63:e8:30:e6:dd:08:7c:cf:8e:4c:
fd:17:cb:4b:97:a3:8d:62:65:2a:14:52:e7:44:69:41:60:19:
c5:20:b0:31:85:c1:08:ac:b9:7b:f6:c8:37:27:aa:75:3f:6b:
db:d6:06:ab:9c:c0:b1:85:ef:5f:5e:b4:e0:b4:4c:a9:31:af:
98:39:09:5b:7d:82:67:7f:4a:d4:ad:d5:4d:4f:38:fb:7f:97:
9d:50:b1:55:a0:dc:8a:e2:8d:75:88:44:4a:4e:b4:7b:e9:ac:
21:45:72:7b:95:34:3e:dd:e7:76:de:a7:23:57:0e:4f:81:69:
fd:7c:2a:62:c2:e3:f0:28:99:2a:96:c5:69:80:36:45:b7:ad:
c7:b7:d8:39:d8:0b:2c:9b:61:19:5d:53:d1:3d:26:51:39:00:
93:a0:57:65:0b:8b:b6:1b:b7:b5:4e:f0:c6:8f:03:1b:8e:13:
aa:4f:f8:c2:96:a3:6e:e4:d2:87:b9:a9:5a:c9:71:dc:97:80:
f7:7d:5a:86:d0:35:29:b0:19:f5:5c:c0:df:ee:b4:67:57:34:
e4:d0:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:13:08 2025 by rpki-client