Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/msSogLBAu-ygAVNdWfxqvKKZkuc.roa
File: msSogLBAu-ygAVNdWfxqvKKZkuc.roa (raw, json)
Hash identifier: eshQccKMbjKsAKmEfoBrhCoGu0zUIfCn9bYik46uIX0=
Subject key identifier: 9A:C4:A8:80:B0:40:BB:EC:A0:01:53:5D:59:FC:6A:BC:A2:99:92:E7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC4B54C483C57ADE1656212450DBBFBE9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/msSogLBAu-ygAVNdWfxqvKKZkuc.roa
Signing time: Sun 12 Nov 2023 18:04:57 +0000
ROA not before: Sun 12 Nov 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:c4b4:f043/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c4:b5:4c:48:3c:57:ad:e1:65:62:12:45:0d:bb:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac4a880b040bbeca001535d59fc6abca29992e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:2c:47:7a:ca:f0:45:a6:eb:db:58:e0:01:
12:77:64:3d:34:bd:a4:18:f0:38:93:1c:ab:d8:d7:
fe:75:35:6d:9f:7c:fc:0f:80:f5:67:3d:da:32:0e:
94:99:48:96:08:41:cb:d5:67:cb:6f:09:d6:fd:f7:
ca:83:67:f8:05:ed:49:10:23:b1:08:ad:e0:82:a9:
e6:5e:9e:34:05:01:62:64:35:03:bd:b5:e3:5a:7b:
51:b2:91:81:6e:9b:7e:55:c9:29:d9:7a:d0:b3:77:
b1:85:75:2a:58:fd:d7:28:d2:b9:fb:f7:01:9f:b1:
bf:99:bd:12:12:20:0c:c4:c9:0d:5a:95:e0:87:1d:
80:4f:64:a5:04:f0:04:49:0b:6f:6c:b1:b1:aa:b0:
cf:ac:d7:d8:a6:c1:2d:28:b9:86:ff:75:13:4c:b9:
82:7a:39:9b:a1:21:7e:6a:ba:f6:71:88:2e:50:49:
4d:fd:bc:a6:f6:50:72:75:82:e4:b4:72:e1:a5:f8:
f4:e4:3d:ee:8d:6a:80:93:42:41:46:b9:aa:2f:4d:
4d:f9:59:6b:96:23:28:15:53:54:90:5c:b3:37:86:
bd:32:ed:82:10:a1:5d:93:94:41:29:50:4e:42:b6:
48:45:65:6b:bd:1f:21:38:30:c7:1d:89:72:50:c0:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:A8:80:B0:40:BB:EC:A0:01:53:5D:59:FC:6A:BC:A2:99:92:E7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/msSogLBAu-ygAVNdWfxqvKKZkuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:56:91:cf:17:6d:0c:16:fb:35:7b:a6:6b:2c:4f:f3:28:74:
ee:9d:68:54:a0:94:be:c0:a6:41:5b:4d:e3:91:40:50:e6:70:
96:3a:b3:f1:84:4b:e7:59:1e:e0:a0:f1:a2:fa:43:f7:d2:8b:
58:c1:31:cb:93:1b:6e:92:e7:62:29:59:5b:60:14:a4:d2:9b:
f8:02:44:b2:29:81:6a:eb:d7:30:56:c4:b7:9a:fd:a7:76:11:
e9:4c:d8:56:63:7e:51:10:0f:10:89:6b:a1:95:3b:e9:9d:89:
6c:cd:87:a3:46:b8:a0:19:70:b2:25:3f:ee:b1:72:d4:16:63:
03:bf:e1:4e:69:40:d3:9a:c5:e4:e2:97:ab:fb:54:d7:fe:54:
2c:e4:ce:cb:17:a6:6e:30:e9:55:a5:c6:52:ae:e2:32:d0:e8:
27:fb:c1:02:8f:4f:6d:88:02:18:b3:e1:cc:b9:0f:16:64:b7:
e6:c8:a0:42:6d:ed:6b:f3:09:ac:f5:ee:a3:a4:6c:36:17:c7:
53:2d:e2:f2:4b:f3:4c:72:63:a4:e3:4f:a8:45:60:d1:aa:cd:
ed:53:de:4b:5d:74:0d:aa:b8:cf:e2:b6:bf:7f:40:d3:c3:e8:
56:a5:fb:95:c3:af:5d:bf:a8:0e:b6:0b:4b:1f:fb:8a:e1:d4:
a1:1e:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:56:33 2025 by rpki-client