Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xMnDcDrisCOF69HrY_4ZB6n56TI.roa
File: xMnDcDrisCOF69HrY_4ZB6n56TI.roa (raw, json)
Hash identifier: 7P+LvWuR5s1jqY8oCAZF63pyAy3oG6hH2H6gZrnQ/TM=
Subject key identifier: C4:C9:C3:70:3A:E2:B0:23:85:EB:D1:EB:63:FE:19:07:A9:F9:E9:32
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB5489FDB89F7D4F0D80ABF5958AEA0D5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xMnDcDrisCOF69HrY_4ZB6n56TI.roa
Signing time: Thu 09 Nov 2023 18:11:57 +0000
ROA not before: Thu 09 Nov 2023 18:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:48:9f:db:89:f7:d4:f0:d8:0a:bf:59:58:ae:a0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 9 18:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c9c3703ae2b02385ebd1eb63fe1907a9f9e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:4b:28:65:49:c7:f1:6b:fa:87:89:a1:cf:
61:e7:57:07:ee:4e:2f:8b:5e:59:56:5a:b3:7b:e0:
a7:79:34:d0:4b:a6:e8:0e:8e:8f:eb:92:76:70:3d:
1b:7d:76:f4:17:ca:30:43:8b:05:85:d4:19:3a:28:
5e:41:2c:40:ea:f8:7e:4f:ea:43:aa:22:1c:b4:33:
1c:7a:cd:7e:aa:96:d9:f9:cf:59:bf:67:47:c1:72:
14:e1:e0:2a:5b:ff:0c:29:91:2e:87:91:44:c6:c2:
0f:8d:d9:5f:9c:80:26:6a:5e:02:3f:f0:a5:64:80:
78:38:5d:6e:c2:fe:ee:a8:eb:62:ec:83:23:24:ac:
13:3e:d4:f4:12:e8:15:b2:58:1b:3b:fc:e5:da:15:
5e:48:b0:87:26:1c:55:bb:8a:1b:f1:bf:3e:8a:ce:
01:65:a3:4f:98:d8:3e:50:29:e4:c1:fb:b1:65:f2:
cb:47:5b:87:7a:42:50:27:96:93:8a:c5:0d:82:d6:
ef:33:23:81:e5:1a:61:29:7d:b7:27:45:34:23:29:
d9:37:af:e4:31:2a:d1:80:44:dd:82:38:f9:8d:5c:
23:bc:ef:aa:6b:75:9a:fa:7f:ad:43:ab:2a:5f:0b:
d0:93:44:16:74:1e:62:ea:87:bd:af:a9:c5:00:2a:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:C3:70:3A:E2:B0:23:85:EB:D1:EB:63:FE:19:07:A9:F9:E9:32
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/xMnDcDrisCOF69HrY_4ZB6n56TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:7c:83:4f:09:1c:1d:4c:f4:fb:b6:f6:e0:03:5a:a6:ea:72:
5d:cb:95:9b:d8:1a:7b:0a:6a:7b:8a:46:2b:41:bf:da:b8:f1:
03:2f:5f:e1:6d:74:c2:69:b2:2a:22:a4:65:e5:3e:a8:c6:08:
2b:7f:b1:36:e9:f1:de:95:4f:2c:ae:8f:c1:d3:cc:9e:2c:f6:
47:22:4f:4b:75:a0:fd:70:1b:9f:b4:bd:8e:30:69:28:21:ae:
87:8b:01:34:29:ed:91:38:2f:e3:1e:78:62:e6:5a:ac:46:fd:
40:5b:5b:d9:19:a2:ca:70:c9:f6:a6:fd:78:bc:4d:99:e4:c9:
6a:ff:52:1e:a6:ab:41:e6:f9:85:13:4a:d9:06:09:c5:91:2b:
5d:82:d7:ea:78:84:c6:8a:4f:53:85:d2:ef:46:e4:a7:35:c4:
d2:ac:9c:e3:80:dd:61:f1:5b:2f:0c:f3:e5:10:40:86:98:25:
38:e8:29:ea:09:3d:35:46:86:f0:f6:90:91:1d:83:64:60:98:
a9:0a:33:0c:15:c3:9e:0c:d9:ba:cf:c2:21:e1:7b:98:e1:ae:
67:39:c4:eb:f6:f1:1b:f9:c2:31:cf:b3:31:6b:de:35:a1:7b:
f8:50:cb:09:d5:47:56:a3:0b:98:90:7a:14:65:60:06:6f:a7:
e9:d1:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:22:14 2025 by rpki-client