Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MQa7tf4MOqbc6W_pHV7hXTS634Q.roa
File: MQa7tf4MOqbc6W_pHV7hXTS634Q.roa (raw, json)
Hash identifier: CQKvXHSfjIYLgMz5M3drTfGFQDsPAj6DfZZGjbhagUI=
Subject key identifier: 31:06:BB:B5:FE:0C:3A:A6:DC:E9:6F:E9:1D:5E:E1:5D:34:BA:DF:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC74DF6BEE798AA522F478FB5274A1F39
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MQa7tf4MOqbc6W_pHV7hXTS634Q.roa
Signing time: Mon 13 Nov 2023 06:10:57 +0000
ROA not before: Mon 13 Nov 2023 06:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:4d:f6:be:e7:98:aa:52:2f:47:8f:b5:27:4a:1f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 13 06:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3106bbb5fe0c3aa6dce96fe91d5ee15d34badf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:88:44:92:8d:c4:0a:65:e8:9c:02:dc:ae:
17:40:33:13:0d:18:06:4f:a9:8a:b8:2b:53:6f:bc:
9a:38:d0:39:d0:48:48:39:0d:e2:af:66:3c:b0:bc:
43:27:74:82:3e:af:54:55:84:6b:38:6e:91:84:b5:
65:dd:19:80:a4:fa:7e:96:a7:ba:df:7c:08:a5:03:
a5:aa:ae:ca:f2:3a:b5:5b:2f:4e:1c:7e:e7:9b:2e:
89:eb:a0:27:00:14:60:51:69:6a:1c:d8:ee:d1:33:
db:16:e3:e7:a6:7c:99:db:d4:75:46:1c:b0:63:bb:
0c:49:ff:d8:8f:ff:b1:fb:86:8d:de:ea:ab:a3:ee:
18:f4:56:45:63:72:46:da:d5:fb:13:46:0f:82:69:
c3:9a:5c:84:81:be:d1:c1:cd:e6:b2:d4:f8:f5:aa:
50:2b:d0:6c:ac:af:b5:74:e5:38:a8:ce:63:4b:24:
eb:75:bf:49:33:e1:cb:ce:b4:70:d1:0e:f6:39:a5:
7f:13:fe:13:83:aa:15:b4:3b:a3:8f:c2:3f:c0:e9:
43:8b:0c:51:0e:2a:8b:6a:cc:13:2e:2a:5a:fc:18:
e0:f6:88:47:1d:a8:4d:4e:18:45:e3:d1:92:e1:47:
d7:3e:af:2b:f4:0d:3a:c5:d5:b3:62:17:9f:7c:67:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:BB:B5:FE:0C:3A:A6:DC:E9:6F:E9:1D:5E:E1:5D:34:BA:DF:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MQa7tf4MOqbc6W_pHV7hXTS634Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:c5:4e:1f:72:c4:02:39:00:f0:78:d0:3b:72:79:3f:3e:c2:
a3:72:ec:44:a0:e8:59:07:34:8c:28:90:4e:14:00:6f:f0:92:
bd:72:22:9b:91:43:bd:3e:c5:40:b9:f4:b7:e3:fa:bd:66:d4:
ee:cc:f2:41:dc:a4:5a:52:42:00:75:48:01:ca:74:67:10:26:
39:f7:1a:76:76:00:f5:4e:a2:ae:2b:23:14:f7:5b:87:3e:04:
4d:b9:9d:67:03:c3:03:0f:37:73:61:6b:05:15:64:d3:8d:13:
4d:88:3a:e8:08:6c:23:0b:1e:95:7a:52:3c:d8:c1:ad:55:51:
24:fd:0b:8c:df:dc:0c:05:00:ae:ba:3d:69:b0:de:f5:97:09:
3d:3f:91:8d:88:85:70:6b:37:f6:61:59:69:95:54:8e:fb:07:
f6:7f:61:e8:16:4a:cf:4d:12:cc:09:5d:80:78:8e:1f:31:6c:
d4:0b:df:99:9e:9b:59:2f:11:d8:cc:22:4d:ec:7e:83:47:0c:
2f:4f:17:d3:d7:ae:06:1f:60:db:55:9b:79:2c:0d:13:02:bf:
cc:0c:43:2e:30:71:27:91:58:ff:99:15:33:96:e6:7c:d9:9d:
34:18:b8:c6:3f:6d:fa:7b:12:03:0f:17:55:b8:89:e1:fb:df:
24:f3:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:53 2025 by rpki-client