Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mueyvXAdOsD7zDINI37ZkCA0k8M.roa
File: mueyvXAdOsD7zDINI37ZkCA0k8M.roa (raw, json)
Hash identifier: nF9OGT3Q+t0VtkurnFdqLmhDEwZ+dVxyNi+wk8aDS64=
Subject key identifier: 9A:E7:B2:BD:70:1D:3A:C0:FB:CC:32:0D:23:7E:D9:90:20:34:93:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF53762197EBA591664676A8C1DD3E553
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mueyvXAdOsD7zDINI37ZkCA0k8M.roa
Signing time: Tue 03 Oct 2023 11:06:02 +0000
ROA not before: Tue 03 Oct 2023 11:06:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:f536:4dbe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:37:62:19:7e:ba:59:16:64:67:6a:8c:1d:d3:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 3 11:06:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae7b2bd701d3ac0fbcc320d237ed990203493c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:3d:0d:9c:9a:eb:73:2a:7b:c2:d6:a4:38:
a3:2c:47:2b:73:b3:69:b1:e8:bc:98:12:f0:02:24:
cd:e6:49:20:a0:a8:eb:42:54:7f:8d:f9:38:25:78:
e1:f3:99:b4:56:2d:ec:60:c2:c4:5d:26:fc:27:cd:
ff:b2:8b:a5:cd:3d:e2:08:96:c5:33:6a:6d:63:07:
83:a2:d8:c6:b0:2f:7a:bf:1e:7a:75:2c:a5:fa:90:
39:e6:52:eb:07:6c:4c:02:0e:ca:3d:4c:d6:bc:1f:
5f:4b:78:a4:10:e6:d4:d5:cc:cf:0e:88:e4:3b:c6:
1d:d9:e8:18:98:84:ac:be:04:77:df:f2:40:98:ac:
8f:15:82:6f:7e:1a:db:91:eb:1b:00:b9:21:ce:5b:
3e:66:b0:b8:ce:bc:3d:d7:b8:a2:16:56:70:b3:eb:
69:9d:80:e0:06:c3:39:93:57:16:f1:ab:6f:4a:44:
74:5f:f6:ae:fe:56:f3:f5:c3:22:d9:24:4d:84:cd:
18:0d:b4:dc:56:f2:be:74:65:d8:a4:18:df:2e:45:
af:c3:af:61:c5:ff:41:07:0b:42:37:ac:85:ba:d3:
27:da:13:34:a0:ff:2b:4c:9e:d9:49:05:a6:d0:c5:
38:ab:25:11:a8:b1:f0:c0:27:97:95:0e:71:3b:b9:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:B2:BD:70:1D:3A:C0:FB:CC:32:0D:23:7E:D9:90:20:34:93:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mueyvXAdOsD7zDINI37ZkCA0k8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bd:af:f6:bc:05:c0:0e:a8:90:f4:43:4c:9a:95:82:fc:16:41:
f7:e5:97:42:b3:8e:0d:23:53:8a:8b:51:06:48:1d:13:5c:61:
ed:a3:3c:6e:da:d4:14:7e:14:37:8e:66:67:83:70:50:66:b5:
d9:6a:99:55:b9:95:2f:01:fc:3d:d3:29:d5:87:5a:47:3c:9d:
af:b7:bd:ba:1c:97:a6:89:b6:3e:42:18:c0:2e:b2:f0:87:15:
ad:1e:58:a6:ad:30:42:b8:79:ff:af:da:94:11:f2:57:04:d3:
4c:09:7f:1e:4a:b3:5f:1f:12:c5:70:4e:3b:c7:93:7b:4d:92:
09:77:ef:e3:55:35:a6:ec:52:80:47:2c:33:3e:35:3a:7f:c5:
5d:57:95:24:42:67:f9:49:43:c1:08:5a:c9:ab:83:39:f1:e0:
7a:0a:3e:6a:c6:96:e4:ab:77:b5:52:8f:fb:70:b1:08:66:be:
d0:84:43:00:de:75:21:0d:6a:86:af:07:61:a4:ff:da:98:ce:
b7:e3:66:c2:0d:6b:5a:e4:cd:24:1e:99:f3:2c:12:7d:a7:2c:
2f:5a:b1:bd:19:ce:7b:e0:36:3f:25:5d:c9:23:52:b4:d5:81:
23:46:6e:5d:2f:20:3e:71:7a:f4:2e:01:e5:e3:ab:20:3f:6f:
bf:1d:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:03:01 2025 by rpki-client