Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mw2hiGBnh8jb-H-J7RJeVD7FjOI.roa
File: mw2hiGBnh8jb-H-J7RJeVD7FjOI.roa (raw, json)
Hash identifier: +sVmLUSVlXkWJKOht4YibHNflxrWE4pO1rgioifGb5o=
Subject key identifier: 9B:0D:A1:88:60:67:87:C8:DB:F8:7F:89:ED:12:5E:54:3E:C5:8C:E2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B394504D5B77E456B2CCDB9A15036EC2B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mw2hiGBnh8jb-H-J7RJeVD7FjOI.roa
Signing time: Mon 16 Oct 2023 16:15:06 +0000
ROA not before: Mon 16 Oct 2023 16:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:45:04:d5:b7:7e:45:6b:2c:cd:b9:a1:50:36:ec:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 16:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b0da188606787c8dbf87f89ed125e543ec58ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:0e:45:d7:e0:a4:5e:b4:40:4c:22:3a:d4:
e2:56:1c:02:65:18:09:40:fd:94:58:9b:a9:f6:e5:
a2:8d:79:b1:28:97:c7:16:f5:67:84:09:7e:73:60:
f5:c3:9d:af:f4:97:7c:7a:c8:43:11:6d:f6:4f:26:
23:79:e1:43:cd:b4:67:7b:cf:8c:bb:83:6a:00:4d:
00:ab:e5:b4:c5:58:45:c0:37:5f:60:d1:cf:4b:8a:
f4:6f:f4:99:1a:8a:90:0c:f2:54:f6:49:d6:ab:a7:
b3:4b:b6:0e:e0:3c:0b:fa:2d:28:41:e0:98:26:12:
7a:a2:45:69:14:84:db:89:f9:11:1c:38:31:d0:0b:
5c:7f:9b:3f:eb:81:20:e6:d5:76:58:1e:aa:54:4e:
eb:93:21:30:48:5f:a9:86:16:c6:28:25:8f:50:8c:
53:d3:ab:81:c4:33:e3:b8:59:30:12:b1:7d:52:ec:
5e:12:57:72:74:ff:b6:60:a8:7d:2b:ec:9d:9f:46:
1b:2a:18:95:02:89:c3:60:d3:f4:ac:34:f7:cc:d2:
4a:ed:e0:fa:99:55:52:4d:0d:5c:85:9f:c2:35:b8:
bb:08:7b:98:87:18:a9:74:b8:d1:de:dd:18:26:68:
74:d4:e9:76:21:de:74:13:b7:73:0b:d3:de:2f:d3:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:A1:88:60:67:87:C8:DB:F8:7F:89:ED:12:5E:54:3E:C5:8C:E2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mw2hiGBnh8jb-H-J7RJeVD7FjOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:a3:ee:bc:c8:ad:a2:13:66:b6:f0:3d:ef:ad:5e:c4:3b:a9:
61:10:50:42:a2:93:86:c1:bc:d6:0a:6b:16:55:76:b1:a9:fc:
67:85:c5:c8:c6:c8:41:21:4e:1a:b0:25:74:1d:df:fd:98:56:
ac:2a:b2:d5:ba:b9:69:a8:f5:8a:34:49:ca:c7:53:0f:19:62:
ee:17:ae:5d:65:72:96:b7:43:11:ee:7f:75:22:72:63:c3:48:
78:ca:3a:78:ac:f0:50:03:f9:e2:85:fd:6f:31:5b:d3:57:5e:
a4:5e:e3:31:7c:4a:22:bf:80:77:2a:c7:aa:2b:83:a3:b4:e8:
ca:57:72:57:86:4b:1e:60:b0:fe:4e:2a:4c:25:70:0e:7c:38:
ac:3d:e7:66:b2:35:0a:34:a6:d7:6e:59:35:0a:c3:b9:6b:63:
fd:12:88:94:6c:38:e8:53:99:76:70:fb:8b:a9:7b:21:da:bb:
43:8a:fa:71:34:c4:32:07:00:5c:6f:e7:f7:a3:fb:c7:f0:3c:
0c:6d:70:4c:41:bd:6b:5c:54:65:91:67:ff:f6:c9:31:3c:a7:
f5:f2:a1:1a:93:2a:0b:3e:3b:98:9b:62:5d:4d:6e:83:29:0e:
21:b0:bf:28:a5:d8:04:5b:34:7d:b9:b8:7c:1d:62:68:12:1a:
e2:cb:ab:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:18:20 2025 by rpki-client