Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MpOxtjhbImUwMXlCKVIPd0CnOkg.roa
File: MpOxtjhbImUwMXlCKVIPd0CnOkg.roa (raw, json)
Hash identifier: 4lPgwTDb/RI0yJsp7IKCsL7U/CktB15HS5EGJc07Z6o=
Subject key identifier: 32:93:B1:B6:38:5B:22:65:30:31:79:42:29:52:0F:77:40:A7:3A:48
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BA61157F2451E938D38DC92B9F4176996
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MpOxtjhbImUwMXlCKVIPd0CnOkg.roa
Signing time: Mon 06 Nov 2023 19:17:16 +0000
ROA not before: Mon 06 Nov 2023 19:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:11:57:f2:45:1e:93:8d:38:dc:92:b9:f4:17:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 6 19:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3293b1b6385b22653031794229520f7740a73a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:da:47:75:d6:e0:c5:1d:97:75:37:5e:79:
a6:4d:c2:2e:38:b6:96:dc:2f:d4:f9:08:f3:37:63:
81:f7:ed:ee:c8:69:e7:b8:bd:8d:ea:f1:17:46:35:
d3:bb:47:a8:ba:f2:13:d0:c2:ee:31:32:dd:90:3d:
7e:f2:a5:06:b6:57:b7:76:3f:2a:97:97:27:51:e5:
05:e9:b0:e7:59:6d:9f:b5:93:b8:39:12:3d:b9:ff:
5d:7c:fb:4e:ab:49:0d:3b:b2:4c:bc:6d:b8:fb:76:
12:00:d7:f0:5c:95:07:46:02:75:48:6f:da:80:11:
f5:a9:08:a4:ab:d3:ec:a1:5e:8a:30:c4:b8:26:71:
9b:30:46:a9:fd:ed:3e:0a:b5:d7:f8:05:84:06:07:
af:55:11:dd:58:c7:60:6b:6f:22:5c:c9:ee:ad:54:
ae:2c:26:c2:fc:b5:8e:b4:be:70:98:25:c7:af:29:
f5:2a:a0:28:a9:35:88:c2:84:28:d4:87:08:22:f6:
78:a4:36:2c:97:f8:32:45:1b:99:d6:c5:9b:06:87:
fc:4f:ea:24:3a:d0:e3:63:6d:19:79:70:1e:19:5d:
59:1c:e6:fa:36:9f:dd:d9:99:57:64:cd:e4:02:1f:
35:d3:e9:af:28:8a:07:a1:ae:ef:b7:5f:00:b9:04:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:93:B1:B6:38:5B:22:65:30:31:79:42:29:52:0F:77:40:A7:3A:48
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MpOxtjhbImUwMXlCKVIPd0CnOkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:21:ae:74:3e:4b:8c:44:3b:16:d6:a8:e2:e5:a0:71:ca:19:
43:97:4a:29:5d:58:20:31:e3:dc:77:63:e2:55:30:85:f8:a9:
51:b3:cc:1c:c3:58:fa:4b:bd:a5:ae:f4:b3:67:88:dd:cf:47:
3c:09:a5:8b:c6:aa:26:a1:d6:e6:64:30:b4:58:27:10:e3:1d:
f3:8a:a1:fa:ed:0d:7a:57:9d:95:49:7b:98:3d:b4:75:aa:cd:
2e:df:f1:ce:25:1d:34:a9:81:a2:7f:6d:ef:60:87:f2:0a:19:
21:89:10:6a:9f:35:84:63:7c:a3:b2:ef:b6:41:ff:eb:4d:ae:
33:78:22:4f:d8:b7:a9:c9:40:4e:46:82:45:78:f5:6c:75:9b:
81:6d:a2:d1:c7:27:c6:1b:40:0b:0c:59:d7:66:ee:a0:81:2e:
a3:77:4d:30:d2:8c:9f:41:99:23:ac:d6:7f:26:dc:f2:c9:01:
61:c6:1f:11:4f:39:a1:5f:e0:55:b2:71:be:e4:57:f5:81:c3:
cb:48:f7:0e:d5:76:f7:be:e9:34:12:aa:c7:7e:26:cc:8c:51:
c8:3f:2f:1c:03:21:56:e5:f9:a0:74:19:a6:a7:98:cb:fb:cd:
01:6d:f8:be:bb:55:c5:6b:3c:ef:f0:bd:4e:6c:8b:7b:7e:22:
f1:f4:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:28:35 2025 by rpki-client