Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxdF3lJ1zEWF7v8kM0BJZ42c9m8.roa
File: MxdF3lJ1zEWF7v8kM0BJZ42c9m8.roa (raw, json)
Hash identifier: nUzXjo8gEYQaHh6WluiJpEqJ3vvIpdMARm62ma1YMLY=
Subject key identifier: 33:17:45:DE:52:75:CC:45:85:EE:FF:24:33:40:49:67:8D:9C:F6:6F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0EFE75BCCC48692D6ADB471FD6536630
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxdF3lJ1zEWF7v8kM0BJZ42c9m8.roa
Signing time: Mon 27 Nov 2023 04:16:46 +0000
ROA not before: Mon 27 Nov 2023 04:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0e:fe:75:bc:cc:48:69:2d:6a:db:47:1f:d6:53:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 27 04:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=331745de5275cc4585eeff24334049678d9cf66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:f2:fb:7b:eb:97:5e:81:d1:20:21:5a:02:
5d:21:d4:b8:e6:65:cd:7d:0b:53:fa:5e:a6:f8:a2:
f4:25:fa:99:84:bd:f4:f1:12:7e:d2:41:8c:39:58:
16:00:b6:9a:b3:3b:44:68:60:d6:6b:2a:f6:06:c5:
7d:e9:63:39:a2:2e:af:7b:5f:5b:20:f4:36:8f:d3:
b4:b8:c0:2a:b2:9b:ff:e7:9a:f7:cb:2a:90:33:90:
c1:35:ac:f0:19:0a:b9:02:ec:06:76:2e:88:3d:61:
59:3e:37:9a:68:fb:45:3d:26:1d:f5:9e:96:14:44:
9b:8d:8d:f4:d2:03:7c:79:cc:0c:c3:a2:cf:41:16:
a3:11:08:8c:cd:51:61:e6:97:1b:a1:7c:38:28:b9:
be:c1:46:4b:48:8a:43:04:74:f8:1e:48:2d:a8:67:
3c:bb:a8:62:5f:b7:ce:1f:9c:fd:18:65:28:0b:42:
c0:ce:06:fe:1d:a9:31:19:a4:f5:21:61:4c:3b:4a:
17:af:8c:6b:0e:8e:32:e3:e7:f5:25:81:de:45:01:
cf:29:f9:17:1b:93:82:8e:a7:3f:18:74:8e:0c:14:
2e:41:46:3b:f9:36:80:77:0a:46:bd:39:d4:94:e9:
9c:4a:20:37:4d:51:cc:c2:4e:e7:03:44:1d:75:fe:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:45:DE:52:75:CC:45:85:EE:FF:24:33:40:49:67:8D:9C:F6:6F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxdF3lJ1zEWF7v8kM0BJZ42c9m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:ac:51:ba:63:87:a8:89:6c:bd:54:f3:21:0d:9a:c3:9b:99:
c5:32:bf:16:58:05:12:fa:15:6b:e6:0e:46:f3:ec:3e:98:79:
53:33:3f:e1:7c:8e:75:52:d3:d1:98:a6:fe:94:1b:98:25:67:
29:f3:aa:3f:1c:dc:70:fc:6d:61:53:4f:c9:c1:70:1f:b6:a7:
6d:f8:89:36:b1:74:e2:2b:12:28:c9:59:c2:2e:1a:36:da:b9:
7e:80:b0:7d:5b:3f:ee:12:ae:a5:09:c3:1a:76:91:49:b5:95:
7f:88:c2:4e:91:46:77:fc:79:26:e1:6f:25:de:3e:13:e3:83:
0d:91:15:80:49:cf:48:69:0f:df:1f:ba:2d:9b:13:30:0c:82:
06:b7:53:84:fe:7a:b3:db:d6:d0:58:aa:89:bc:62:98:3b:1c:
d0:3f:29:69:df:78:40:7d:d8:f6:33:09:a4:1c:6e:a2:1d:91:
64:dd:a0:a4:ed:42:4f:12:d1:e8:ab:ae:ef:c8:de:da:5a:65:
4b:68:53:1a:8d:81:e2:a5:aa:42:fd:60:70:8d:67:5e:06:95:
7d:74:27:f8:81:a4:5f:cd:0d:84:08:8f:57:15:a4:c6:4e:49:
91:29:95:01:2a:78:ef:c9:ce:f1:ed:a8:07:d9:f3:75:d1:2b:
15:71:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:10:27 2025 by rpki-client