Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNe8RkfqZBPLoLI7gzyBRf2jWgk.roa
File: MNe8RkfqZBPLoLI7gzyBRf2jWgk.roa (raw, json)
Hash identifier: f4LvH69aOoBNAqpFuZcBxD1DTDFNvU6NIOOBSGuY+gw=
Subject key identifier: 30:D7:BC:46:47:EA:64:13:CB:A0:B2:3B:83:3C:81:45:FD:A3:5A:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB962112FD815298AD781E7AE3D6EACEB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNe8RkfqZBPLoLI7gzyBRf2jWgk.roa
Signing time: Thu 21 Sep 2023 20:15:26 +0000
ROA not before: Thu 21 Sep 2023 20:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:62:11:2f:d8:15:29:8a:d7:81:e7:ae:3d:6e:ac:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 20:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d7bc4647ea6413cba0b23b833c8145fda35a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:4e:23:b5:1e:85:f6:e6:50:d2:27:29:bf:
98:37:07:c4:9f:1a:da:1b:1c:a5:79:2c:0a:23:d8:
bd:33:2a:a5:a1:35:a3:cc:cb:8e:f9:d1:4d:d9:95:
9f:93:df:d8:b6:32:3f:e8:3d:ce:ca:6d:36:01:35:
1f:1c:66:e5:70:88:1f:38:f7:3a:07:f6:57:7d:e0:
17:e3:9a:eb:6b:4a:8a:8d:48:1f:73:4c:8c:30:01:
ba:aa:4f:7f:56:5b:bc:f6:f4:08:a4:1c:13:4e:78:
05:29:9b:73:95:d8:b6:55:59:57:d6:b6:96:44:bd:
81:4a:e7:1f:ca:86:74:98:e0:57:60:61:74:00:97:
c9:cc:ea:3c:2e:2a:f9:d5:9a:fd:87:22:5a:5d:b2:
a8:3a:18:f3:1c:db:ff:17:61:53:34:43:c5:f7:3d:
c9:67:e5:b7:0a:38:f9:24:6a:d9:c2:2e:53:ad:7a:
c6:42:79:0a:f4:bf:97:dd:e9:6e:5b:68:01:e6:1b:
91:b8:24:47:bd:c4:c9:4c:d8:7a:0b:a5:2b:4a:fc:
0e:cf:74:90:34:a2:36:3d:3f:74:49:68:82:6d:68:
1d:95:58:9b:c4:97:88:b5:0d:ac:78:72:79:99:17:
eb:e7:b8:86:cc:3c:c8:e2:de:a4:41:b5:2b:d9:08:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:BC:46:47:EA:64:13:CB:A0:B2:3B:83:3C:81:45:FD:A3:5A:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNe8RkfqZBPLoLI7gzyBRf2jWgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:61:8d:f9:82:4e:3d:f0:a0:9a:b5:45:ff:7f:a7:74:86:0e:
c6:d5:a4:84:56:f6:fc:29:4c:9d:00:c9:74:cd:2c:59:8d:03:
7c:79:12:0d:8f:79:17:f1:09:ee:01:27:c2:05:e2:19:32:8d:
48:28:cb:d5:79:7d:68:e8:cd:be:7f:63:fe:e6:3c:3c:a7:ae:
e6:ce:2d:8e:d9:e3:86:b6:6a:a2:0c:2d:46:32:d1:25:14:dd:
9e:07:0c:45:93:b9:64:fd:fd:e1:12:2f:8b:21:2d:73:0d:e0:
c1:5a:b4:b3:ac:88:c3:0a:59:4d:e8:a9:fc:59:54:7d:87:33:
c3:e6:88:c0:ee:aa:03:04:e2:b9:52:6f:d8:c1:79:21:dd:9f:
51:a5:9a:f5:a3:af:01:6d:ba:11:cf:5e:92:53:6d:45:19:4f:
eb:ec:49:61:fa:17:9f:9d:25:13:94:ae:c0:c5:9c:91:f0:60:
46:8c:61:d2:60:4b:40:61:54:92:7b:26:0b:6f:8b:81:c8:7d:
c7:5a:86:0d:35:95:6f:81:24:79:55:fa:37:ef:9e:af:59:50:
f6:f1:ca:5c:4f:f5:0f:79:92:40:ee:dd:df:4d:d2:40:ac:14:
67:0f:e6:1d:36:3c:5d:4d:c5:ef:fd:4f:ab:44:8a:96:61:b3:
45:59:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:11 2025 by rpki-client