Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MvpLBknEbldyGiPoKl5YETYkEQg.roa
File: MvpLBknEbldyGiPoKl5YETYkEQg.roa (raw, json)
Hash identifier: zK87g1hAsbpqC3uAr8RrfqHoceZREBBOK9PfjrAi9Lo=
Subject key identifier: 32:FA:4B:06:49:C4:6E:57:72:1A:23:E8:2A:5E:58:11:36:24:11:08
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB16AEF7DF3F66805CD597ACAC1344D62
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MvpLBknEbldyGiPoKl5YETYkEQg.roa
Signing time: Thu 09 Nov 2023 00:10:57 +0000
ROA not before: Thu 09 Nov 2023 00:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:6a:ef:7d:f3:f6:68:05:cd:59:7a:ca:c1:34:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 00:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32fa4b0649c46e57721a23e82a5e581136241108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:74:43:ec:c2:4e:26:25:09:36:af:c9:4a:
05:e2:b4:f7:8b:2e:9f:fe:69:f8:7e:cd:01:e6:25:
f6:a6:f8:a5:35:07:7b:55:9d:5b:a6:d3:91:a1:04:
47:8e:3b:54:19:2f:1e:ff:ad:8e:d0:e4:b9:ad:ef:
0a:d7:b1:2b:c4:21:fc:3e:1b:fb:23:c0:db:ae:53:
ab:2d:a9:b4:1b:fa:28:36:b6:5c:57:d3:8b:b6:a9:
4a:53:4d:84:98:b0:20:b6:c1:15:bc:9b:cc:1f:16:
37:5d:b9:49:27:15:ca:e0:3e:d7:d2:45:e8:e6:d0:
52:3c:56:57:0f:2e:88:27:d6:00:35:72:8f:29:ff:
d7:a3:eb:60:3a:4b:9e:88:6d:0f:af:64:87:49:30:
38:b1:fe:d4:6e:d9:3c:8c:e0:23:85:bb:7d:91:6e:
0f:4c:ee:8e:2d:d1:4d:a3:05:37:8d:d9:8d:86:6e:
9b:33:d9:bb:35:fd:a9:fa:3e:25:14:9f:33:3c:4e:
3b:38:c2:de:b7:0b:d8:0d:83:2d:81:21:ea:95:11:
95:13:18:81:c5:f6:9c:5e:b3:4f:db:0a:4a:71:43:
cd:f4:33:d4:9e:fe:70:ca:95:35:c1:90:ef:4c:ae:
d9:28:28:22:bb:8e:fb:d1:dc:5a:f2:a3:8c:fc:8b:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:4B:06:49:C4:6E:57:72:1A:23:E8:2A:5E:58:11:36:24:11:08
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MvpLBknEbldyGiPoKl5YETYkEQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:4d:50:c1:48:75:aa:46:4c:5f:b6:4c:8d:26:00:b5:a5:57:
16:26:ab:25:a3:7a:3d:8e:15:9c:09:5a:85:06:0d:45:95:ee:
99:a2:2a:23:c4:7a:51:c0:73:e3:b0:e1:c5:bd:87:9e:d8:62:
3b:76:07:36:41:f0:84:4d:a5:ed:d0:9b:ce:6d:f5:e7:60:3b:
07:bb:3e:82:88:ee:e9:af:be:39:98:c2:2e:bf:51:3b:12:e7:
3c:d5:d2:f6:83:ef:49:15:98:21:7e:25:68:89:a4:97:03:c3:
c2:47:8e:d3:78:a5:74:0c:7d:74:a3:ee:bd:be:db:99:1d:b8:
a7:c1:ec:4e:f2:20:1c:42:28:8b:cd:4b:95:82:ff:31:d4:37:
a0:e5:fa:2f:d4:bf:20:fc:c1:52:63:55:33:c4:a1:92:42:78:
f3:2f:df:d6:01:39:0c:c4:b5:48:34:a4:63:fe:c2:f7:92:95:
f6:a7:52:b2:75:ce:61:9f:a9:05:cd:40:71:24:e6:09:c2:f1:
e6:eb:66:11:ce:98:17:e4:cb:36:20:7e:19:70:5e:13:5f:d2:
a3:16:32:98:a3:32:8f:03:06:67:41:82:f9:a8:2d:c4:88:72:
78:32:b8:47:b0:5d:a2:8a:62:7e:af:b4:c4:73:40:22:aa:b7:
e6:02:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:43 2025 by rpki-client