Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mwxCxI0RNF-iyaG1viQqFAEm7Hw.roa
File: mwxCxI0RNF-iyaG1viQqFAEm7Hw.roa (raw, json)
Hash identifier: g+xwI0x0uyoW+pTEW3/gCrtGFNYCoysTU3s+X6aQ9Z4=
Subject key identifier: 9B:0C:42:C4:8D:11:34:5F:A2:C9:A1:B5:BE:24:2A:14:01:26:EC:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1C41C5B0404E0B6EDB91F9D366AE76CE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mwxCxI0RNF-iyaG1viQqFAEm7Hw.roa
Signing time: Wed 29 Nov 2023 18:05:21 +0000
ROA not before: Wed 29 Nov 2023 18:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1c40:e6b8/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1c:41:c5:b0:40:4e:0b:6e:db:91:f9:d3:66:ae:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 18:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b0c42c48d11345fa2c9a1b5be242a140126ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:02:b9:63:c3:22:b4:f0:bd:35:c0:a4:88:
94:7e:8d:d9:79:1c:e0:74:ce:7b:3f:4e:a1:e2:d8:
ba:f8:94:a4:20:d7:88:ac:41:75:26:f3:ad:76:46:
75:d8:27:07:91:b5:a2:2a:bc:dc:4c:da:51:6f:ae:
53:77:54:51:8c:bf:97:25:2c:2c:ae:cb:f2:22:df:
17:32:8f:6a:a0:90:c7:a1:8b:5d:20:a9:12:24:95:
49:f3:aa:74:10:61:92:4c:d7:8b:9c:29:81:42:f8:
b7:c9:2e:1a:e5:04:5b:08:c1:c5:2f:8c:06:66:33:
97:9a:9b:eb:0f:94:ca:75:3b:83:35:3c:ad:33:66:
21:24:34:31:ca:4d:fa:b0:d4:87:e4:88:1f:5b:ff:
84:73:4d:8e:8d:6a:94:b2:fc:6a:04:a2:cb:36:62:
2d:2c:6b:63:12:7e:03:a3:c6:d8:20:c6:ff:d1:08:
bd:75:6b:22:d7:cb:73:23:76:7a:17:59:c7:27:bf:
fa:4c:c1:17:d9:f4:73:5a:1b:a9:ee:17:33:e1:7b:
3f:0e:0e:e8:87:84:b5:29:b1:1d:87:b3:62:03:d6:
ce:7b:a7:d5:90:ba:2a:27:43:ae:63:ae:fc:a7:73:
05:bb:01:85:89:03:c2:5a:bb:a0:8b:8b:88:9e:66:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:42:C4:8D:11:34:5F:A2:C9:A1:B5:BE:24:2A:14:01:26:EC:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mwxCxI0RNF-iyaG1viQqFAEm7Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c6:33:e8:2d:7a:43:5c:ac:49:9b:d5:8f:10:f2:40:0d:60:a5:
5e:ea:13:02:17:59:5e:87:eb:b9:d8:a6:f6:bf:62:bf:f0:68:
05:60:ee:0d:38:a0:f4:51:d8:64:9a:22:37:a8:0c:f3:ca:96:
a7:b4:f6:da:f3:56:61:e0:98:df:96:b1:f1:c7:75:6a:cc:09:
79:36:17:e6:4d:d9:eb:d9:03:92:d5:71:e1:9c:40:c7:e3:ee:
18:cd:2c:86:24:00:32:c2:e8:1c:19:db:33:46:93:ea:1a:eb:
33:82:82:70:2f:2d:8d:ca:fa:0a:d5:3a:e6:9b:b7:01:91:b7:
79:70:27:8d:33:54:32:87:e6:a0:4d:bd:61:56:87:e9:ad:84:
8f:ba:25:22:a0:23:6b:1b:c1:b5:45:ec:dc:ac:ef:fc:78:e2:
24:52:e4:03:85:b4:a9:36:83:f1:91:f9:d7:da:45:0e:30:2f:
6b:33:10:bd:8d:ff:ed:4d:65:0f:d8:94:14:a5:d2:98:62:23:
68:ca:62:84:a2:b2:d4:19:77:b5:11:63:44:eb:cd:0a:02:9b:
7b:24:7f:95:32:1b:59:30:f1:da:22:35:38:70:e0:68:40:ce:
96:82:7c:9a:9f:20:6b:ea:32:a5:29:4e:17:8a:c5:17:6f:c3:
33:d7:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 21:24:27 2025 by rpki-client