Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MmDaM0FpW9BnHupiRQmTUbQ_fEU.roa
File: MmDaM0FpW9BnHupiRQmTUbQ_fEU.roa (raw, json)
Hash identifier: 2VEpWyr4ymmB//OKNA95Ce9sujGiiIadu2NzU/QHorw=
Subject key identifier: 32:60:DA:33:41:69:5B:D0:67:1E:EA:62:45:09:93:51:B4:3F:7C:45
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C419FB5A2665C9D173586B5232242AE1D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MmDaM0FpW9BnHupiRQmTUbQ_fEU.roa
Signing time: Thu 07 Dec 2023 00:13:54 +0000
ROA not before: Thu 07 Dec 2023 00:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:9f:b5:a2:66:5c:9d:17:35:86:b5:23:22:42:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 7 00:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3260da3341695bd0671eea6245099351b43f7c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:c1:d8:b9:69:68:65:bf:79:4c:43:c6:4d:
4b:36:09:8e:6d:72:05:92:9f:6e:6e:3b:d6:f7:1c:
00:76:ef:be:07:ad:da:84:f8:c4:14:f7:35:56:06:
a3:56:77:c8:20:6f:dc:a5:e4:94:19:b4:ef:d1:4e:
53:5f:22:42:74:7c:b2:55:b8:6f:00:e5:9a:bf:05:
6b:82:e0:ef:64:cf:bc:89:6c:53:80:db:45:22:ef:
d5:a8:68:01:d0:63:dc:3b:84:97:7d:2c:93:c4:a5:
e5:ca:87:2b:7c:8f:31:e9:1e:57:1f:a4:33:38:37:
ef:6d:6b:9f:c9:57:f2:a5:52:5f:67:ed:32:2b:61:
27:81:ba:7a:d7:9f:27:3f:f2:1a:f6:2e:dc:55:03:
8d:c4:f3:dc:37:16:67:be:d2:b2:7a:6e:b3:a7:96:
8e:e8:af:83:56:e8:44:72:e5:4f:4c:ae:0d:b5:d3:
5c:2a:62:a6:f3:fc:21:97:f3:5b:d4:9d:bb:c5:a2:
f8:07:ef:d7:43:a8:f0:6d:b4:fe:a1:00:a7:49:c5:
d9:17:ae:3a:29:92:15:1b:11:97:90:89:e8:b3:a4:
2b:f7:e1:7e:32:92:a1:4c:b0:66:0f:b4:68:31:c7:
f8:ac:93:27:38:f4:64:0b:a9:51:3f:16:04:e2:bf:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:DA:33:41:69:5B:D0:67:1E:EA:62:45:09:93:51:B4:3F:7C:45
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MmDaM0FpW9BnHupiRQmTUbQ_fEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:88:24:3b:c9:8c:ab:53:e5:ed:6e:13:61:57:8b:59:c4:bd:
f6:15:df:54:1c:02:be:53:5d:4e:ec:49:0b:fd:d3:fe:a2:eb:
14:fb:50:d4:41:73:68:fd:aa:c4:58:2e:c6:8b:2f:f2:12:5a:
61:ff:61:82:dc:e9:7c:7c:8f:b8:0e:e8:88:6b:a0:5f:84:24:
ef:92:63:89:03:d0:6d:06:93:c9:19:56:35:1f:eb:48:45:46:
bb:a2:ce:72:a4:03:30:e4:e3:e6:ee:18:d9:f5:c8:e0:90:6d:
af:08:b1:fc:b0:a4:2b:4d:fa:9b:40:d9:d0:8c:79:36:71:dd:
e3:00:2c:08:6d:6f:db:79:ce:fe:ac:29:b0:1e:22:7e:dd:64:
58:2b:81:68:49:2d:ae:09:d0:5b:2d:e1:b5:6e:30:55:cb:cd:
45:ba:2f:35:a4:c1:bc:5f:37:b8:8f:39:c6:9b:f4:41:dc:a1:
03:aa:29:5d:56:3a:2a:ff:ca:ee:c8:1d:1d:3f:13:eb:5b:71:
0e:78:87:b3:d8:ad:f6:7f:34:40:97:1f:a8:5d:08:c4:e7:9e:
eb:8b:db:9b:e4:44:30:a8:1e:74:52:5d:23:9b:68:27:f4:0e:
68:31:76:62:57:ae:13:19:e8:21:b2:d1:5d:f2:bd:23:50:59:
53:7b:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:02:32 2025 by rpki-client