Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MUmG9ZlNR7Yd-7SnbmtjT8tIixE.roa
File: MUmG9ZlNR7Yd-7SnbmtjT8tIixE.roa (raw, json)
Hash identifier: Exgh+tmNBsdHcARzZwJeUjJKj5uEKLcgj7Epd6wHy/Y=
Subject key identifier: 31:49:86:F5:99:4D:47:B6:1D:FB:B4:A7:6E:6B:63:4F:CB:48:8B:11
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BBD382C68899D83661B3972AA34AC6E29
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MUmG9ZlNR7Yd-7SnbmtjT8tIixE.roa
Signing time: Sat 11 Nov 2023 07:10:57 +0000
ROA not before: Sat 11 Nov 2023 07:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:38:2c:68:89:9d:83:66:1b:39:72:aa:34:ac:6e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 11 07:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=314986f5994d47b61dfbb4a76e6b634fcb488b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:d3:69:cf:52:7c:52:d7:be:cd:3e:a0:69:
35:dc:9e:cd:68:e7:24:8e:25:21:c6:8c:99:56:c5:
a9:c2:03:ef:77:14:11:61:89:fc:c7:b1:8f:bd:9a:
4a:b6:81:1c:73:a8:ef:51:d2:fb:ab:44:0a:8f:22:
1e:62:c6:02:db:35:3f:86:f3:04:7a:18:7a:9d:bb:
a0:0e:51:3b:ed:60:06:a2:96:d5:9f:bc:7a:af:9b:
23:f1:86:99:c2:ca:e1:55:3c:5c:27:3e:31:e8:43:
ac:85:a2:76:e2:83:e1:0f:c9:37:0b:2d:41:11:d9:
c2:17:0b:0d:a2:4b:f4:93:6f:52:71:bb:22:88:29:
ec:ac:4c:b6:15:13:ff:db:1d:1c:0a:fe:4c:87:7e:
37:83:8e:8a:27:93:c0:df:f8:ab:9b:93:2f:82:f0:
97:c0:98:1a:97:38:71:41:f1:76:fe:50:b5:55:e0:
17:97:7a:44:be:8c:77:d7:b0:6c:a4:1f:a0:6f:35:
83:37:44:09:ed:3f:ae:69:1c:72:59:66:62:ec:14:
e5:34:09:1f:da:5a:a9:c0:32:5f:18:36:e8:3d:f5:
97:f5:5e:f0:89:a0:2c:e4:65:88:57:67:f5:e6:d3:
b2:45:e4:e6:ed:d2:ed:e6:a9:2f:ac:9f:b0:7f:5f:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:86:F5:99:4D:47:B6:1D:FB:B4:A7:6E:6B:63:4F:CB:48:8B:11
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MUmG9ZlNR7Yd-7SnbmtjT8tIixE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:6b:d0:31:20:45:9e:35:01:93:ce:1a:51:15:5c:66:8d:cd:
08:ad:5c:5e:a2:db:7f:9e:b0:ec:bb:7a:5a:e7:b2:41:3a:ec:
46:32:a1:30:71:62:03:43:fd:20:54:26:b0:f9:69:49:60:c9:
be:c1:ea:0c:ae:00:ee:b2:b9:cf:79:97:b7:55:22:ea:79:a1:
05:9b:f9:4c:32:83:94:e3:41:f5:92:d5:b1:87:cf:eb:0e:de:
ec:91:d3:5b:5f:f0:d6:d0:65:71:22:35:f9:db:5a:12:f0:ca:
98:24:71:c0:64:f0:31:c1:bf:06:aa:24:84:39:bd:fe:6a:1e:
df:a2:f1:88:9c:b7:66:24:1e:8a:71:20:40:85:0f:08:bb:14:
16:aa:9c:03:d3:1e:07:de:df:a5:a2:11:de:a2:c5:c8:7c:aa:
23:e6:50:75:fb:bc:01:5d:ab:16:49:07:89:6a:5c:60:7c:61:
1a:85:17:f6:69:82:35:75:a7:0e:c6:80:e5:85:22:72:f4:e4:
5e:99:46:ed:78:2c:98:6f:92:46:41:35:6c:84:9e:80:b9:f3:
a8:25:e9:4d:5f:d4:3b:8a:a8:dc:36:b9:08:39:a1:18:6e:29:
26:88:63:83:b0:23:37:4b:7d:2c:d5:03:ed:f6:e6:ec:3e:4a:
ca:6e:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:32:28 2025 by rpki-client