Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M777CTrFSYfucJZdAR18o2k8qKU.roa
File: M777CTrFSYfucJZdAR18o2k8qKU.roa (raw, json)
Hash identifier: m2jxvDGCZXxBHJx4rUDkLrMg7nlLjGwPq0C8lAdIHkM=
Subject key identifier: 33:BE:FB:09:3A:C5:49:87:EE:70:96:5D:01:1D:7C:A3:69:3C:A8:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1801AB0341354C77DB05B0FEFD6C6670
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M777CTrFSYfucJZdAR18o2k8qKU.roa
Signing time: Tue 28 Nov 2023 22:16:51 +0000
ROA not before: Tue 28 Nov 2023 22:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:18:01:ab:03:41:35:4c:77:db:05:b0:fe:fd:6c:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 28 22:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33befb093ac54987ee70965d011d7ca3693ca8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:85:62:37:97:6d:c2:ea:4a:5a:d7:cb:07:
ab:77:09:65:9a:3a:4d:e1:13:97:7d:aa:ad:b9:0b:
74:c9:48:ce:7f:6c:46:ed:91:3a:9f:b1:1a:1e:ec:
dc:d6:47:2c:f6:06:cc:1e:8e:ee:38:b0:4e:bd:b1:
6e:b7:7e:14:5a:40:08:85:e5:5a:f4:77:e5:f8:6b:
28:ab:81:b7:a3:4f:cd:17:fb:a6:d0:76:3d:00:c4:
27:12:e8:d9:e6:31:7f:79:3a:15:20:a5:5e:50:c3:
74:3f:f1:a2:0a:e4:da:76:29:82:95:4e:81:ce:ac:
27:9c:71:48:34:d1:54:4e:3f:a2:f7:7a:94:b8:97:
98:ac:11:d4:19:c5:fb:ec:94:f0:c2:52:bd:ee:29:
ad:18:07:aa:22:00:ab:66:e7:76:32:4a:ff:cb:0e:
f1:36:b5:0e:60:0d:23:60:d4:6c:a3:a2:dd:11:49:
6f:3f:0b:13:f0:a2:5b:69:4f:49:a4:47:a2:36:36:
e3:3c:b0:0a:88:f6:64:4b:55:2c:cd:c2:fb:d0:8d:
c6:c6:3b:e3:1f:bc:12:f8:a4:9b:d3:05:52:ad:48:
49:98:76:c8:e2:f4:ff:6b:2e:b0:d5:41:49:87:da:
58:a8:92:68:2f:c1:7d:23:74:ea:4f:a0:08:f6:59:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:FB:09:3A:C5:49:87:EE:70:96:5D:01:1D:7C:A3:69:3C:A8:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M777CTrFSYfucJZdAR18o2k8qKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:11:8e:9c:54:de:e7:4e:e1:35:be:e3:57:2c:7f:08:e3:41:
55:52:33:ff:6c:36:3f:4f:c3:34:9e:d6:1e:5d:50:e3:38:a9:
70:85:45:96:3d:c3:ea:58:c0:14:b7:4c:fd:ba:de:bb:5c:36:
c3:d8:54:de:ea:39:b5:df:50:9d:6a:93:f7:f1:01:22:60:a5:
e8:49:8f:ab:65:0b:f7:ec:87:be:b0:0d:04:d8:6f:5a:7f:c9:
44:54:e1:f7:da:73:79:2f:32:f5:27:a8:c7:77:f9:d2:50:03:
2e:4e:37:e0:7c:b3:f7:ce:a8:a0:79:db:c7:cb:71:f9:e0:4a:
e6:d7:b3:e7:a2:f8:cd:6d:d1:25:a7:44:99:ae:9c:64:2c:de:
be:f2:f4:52:5e:ff:f3:42:73:d7:4c:2e:6a:f5:66:e7:66:3f:
fa:70:82:65:ce:b9:7d:42:d2:c1:d9:13:cc:8c:b3:ec:a7:b0:
af:36:eb:78:72:5d:bc:4b:47:8e:2c:72:d9:7c:6b:d5:e7:1c:
57:f4:49:e1:16:37:75:94:92:0f:75:72:80:95:d0:1c:13:9a:
1a:a3:b7:ce:d8:e2:d3:03:4c:75:9b:d6:f9:3d:9b:a5:cb:4b:
64:92:e2:e3:e4:5b:94:73:d7:ce:ec:d7:f1:49:ec:8a:fa:0c:
02:47:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:09:06 2025 by rpki-client