Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mMtCuSb7TOCG4hiCoXDwEi3FkXA.roa
File: mMtCuSb7TOCG4hiCoXDwEi3FkXA.roa (raw, json)
Hash identifier: emsKE/HjEPh2pMNMb4uA1OajdwTVrzYZUWuOvDHsrys=
Subject key identifier: 98:CB:42:B9:26:FB:4C:E0:86:E2:18:82:A1:70:F0:12:2D:C5:91:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDC50244F5DF097CCF20F8540182B2819
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mMtCuSb7TOCG4hiCoXDwEi3FkXA.roa
Signing time: Fri 17 Nov 2023 08:05:21 +0000
ROA not before: Fri 17 Nov 2023 08:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:dc4f:4df8/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:50:24:4f:5d:f0:97:cc:f2:0f:85:40:18:2b:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 08:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98cb42b926fb4ce086e21882a170f0122dc59170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:a2:f1:14:f3:7c:97:e7:22:c7:f0:8d:05:
3a:fc:33:b7:67:ff:d0:df:86:48:44:21:74:53:9b:
0a:ce:46:21:c8:36:4b:66:fd:a0:9e:13:af:ca:3d:
1c:4a:56:09:9a:16:f4:dd:f6:6b:ff:05:3d:af:d9:
f8:27:35:39:48:ad:fb:18:24:99:cf:55:2a:ff:85:
d2:ca:a1:40:a9:3a:ca:e8:a0:ea:0a:0b:1e:96:c1:
e9:56:a2:b7:2c:58:e3:7c:72:fa:ab:6e:e5:c6:e8:
df:7b:39:04:6f:c4:3d:ad:4e:8b:2b:9a:f0:8e:54:
1d:af:c4:9e:58:f0:ba:93:d5:ac:32:21:bc:e4:15:
b3:46:51:6b:4a:c6:5f:de:bc:55:aa:65:04:0f:3e:
af:44:6d:0b:f5:dd:7a:76:63:d3:ee:54:e8:ec:ba:
bc:28:d2:72:a2:f9:25:4f:9a:2e:89:b0:00:42:d7:
4f:5d:13:3f:02:14:a1:ab:05:8d:79:b8:57:51:ca:
96:8d:71:1d:a5:96:02:26:5c:73:b0:89:75:e4:3e:
7e:7d:10:07:31:29:fd:8b:39:7a:e9:05:b4:b4:65:
b0:e7:46:dd:cb:02:5b:95:52:6b:8b:6b:fd:84:82:
30:17:4f:f9:7c:2d:b8:4c:57:86:b0:0a:d2:06:c9:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:42:B9:26:FB:4C:E0:86:E2:18:82:A1:70:F0:12:2D:C5:91:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mMtCuSb7TOCG4hiCoXDwEi3FkXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:a3:12:aa:41:9b:76:c7:23:db:7d:d7:e0:04:24:d2:4f:b1:
47:d5:07:6d:fb:b7:2e:fd:e9:4f:0d:8a:b6:04:b1:e5:03:40:
cd:c5:09:5e:96:fe:3f:50:f3:ac:36:cd:0e:9a:fd:64:c4:03:
f0:8e:b9:91:9d:6a:3c:bb:51:af:56:d9:77:72:88:61:0e:5c:
73:77:08:fe:49:d6:0f:42:6b:76:c1:28:19:c4:38:a4:c8:6e:
37:77:fe:da:4e:c9:8b:e8:97:73:cb:a3:81:66:6c:81:1e:fb:
fa:f5:7c:93:11:b5:00:96:55:18:e5:82:08:d0:33:3f:55:19:
7c:49:60:e7:fb:49:9e:d2:a7:03:62:7d:13:5b:a7:a1:a6:96:
06:78:29:4f:67:d1:84:b8:17:3d:92:03:c0:65:f4:3a:9e:8a:
33:97:71:fa:9c:d5:40:28:8b:aa:81:c4:32:99:6f:62:04:12:
a2:37:ca:6b:67:2e:d2:51:d5:18:5b:17:7e:3b:07:fb:7a:c6:
8b:b7:5a:94:b8:da:9b:29:f7:fc:01:c1:e6:d5:1d:81:dd:66:
a8:3c:e9:3c:11:d2:8e:f4:da:25:18:ab:02:1e:9d:8d:b2:6d:
38:54:0a:48:47:57:8f:c8:c1:3c:f9:7a:1d:ae:33:8b:28:02:
84:05:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:34 2025 by rpki-client