Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cMonJicJJJqhn6QWQTXeS78rM8M.roa
File: cMonJicJJJqhn6QWQTXeS78rM8M.roa (raw, json)
Hash identifier: REnK+qQGKs5AGkmj9P08Az9eJj6H81FBjehoflRckzs=
Subject key identifier: 70:CA:27:26:27:09:24:9A:A1:9F:A4:16:41:35:DE:4B:BF:2B:33:C3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C577A482DA1D3C3067C749570F6C33383
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cMonJicJJJqhn6QWQTXeS78rM8M.roa
Signing time: Mon 11 Dec 2023 06:04:40 +0000
ROA not before: Mon 11 Dec 2023 06:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:577a:37b0/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:7a:48:2d:a1:d3:c3:06:7c:74:95:70:f6:c3:33:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 11 06:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70ca27262709249aa19fa4164135de4bbf2b33c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:e5:63:50:24:03:68:e2:29:0c:8f:ac:d8:
52:18:c4:01:a1:63:47:10:97:7b:8f:20:6e:8b:89:
9a:34:82:fb:39:68:05:42:8c:34:b1:61:6e:bd:87:
9d:55:00:a8:62:42:9e:ef:6e:27:db:40:d6:50:ff:
27:ac:47:02:ca:a9:6c:63:d8:ef:a2:0e:fb:02:1b:
42:6c:6c:4d:e4:4c:c3:92:21:75:2a:19:02:5c:d3:
e0:98:94:75:fd:ba:39:7d:37:12:57:d0:5b:b7:7e:
25:6e:bb:be:4f:fc:ae:bc:60:7d:fe:8d:fd:1b:8b:
3a:34:0d:bf:09:32:87:db:80:c0:d9:c6:f3:00:54:
01:b2:d5:74:b3:2e:2e:b1:75:8e:68:01:57:cf:22:
0f:c3:11:b2:7a:00:93:ca:34:14:a0:45:3a:ee:1d:
ab:be:de:03:32:ad:19:fd:93:2b:8a:44:5d:c2:7f:
c6:ac:06:46:c7:51:43:6d:62:ff:8b:92:a0:21:e6:
81:f5:49:c9:bb:04:c4:73:d2:e3:7b:30:ac:e6:27:
b6:36:31:41:3d:0e:ad:c2:43:30:90:39:3f:c8:b8:
cd:b6:88:06:e7:a5:d5:74:e0:e3:0e:8d:67:b7:4e:
d9:1d:64:a3:ca:a4:55:c1:a7:c2:90:a8:17:ae:24:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:27:26:27:09:24:9A:A1:9F:A4:16:41:35:DE:4B:BF:2B:33:C3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/cMonJicJJJqhn6QWQTXeS78rM8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:8f:20:3e:3c:ad:9c:ed:9d:0c:d1:1f:2c:db:ae:5c:df:4e:
ff:b1:7c:77:25:44:de:11:19:45:ef:e1:5d:b1:15:1d:03:f8:
83:56:ae:b2:b0:ae:cb:00:6a:e7:fb:1a:47:9c:89:de:70:3a:
4a:23:1d:80:ea:08:0b:e0:c2:5c:db:ee:25:8e:2c:08:14:21:
c6:39:55:8c:e5:b3:c3:15:8b:25:03:59:96:f4:b4:c3:45:d3:
11:68:f6:f5:31:42:73:fa:ac:d0:96:4e:19:02:ec:08:60:09:
ec:1c:15:71:c7:05:14:89:2b:ae:42:a4:16:ed:37:37:c8:46:
29:98:a4:6c:4a:57:28:ca:e5:2f:c1:20:7d:81:df:7b:86:53:
53:a5:51:c6:b8:fb:70:06:5b:bf:ce:15:19:4b:e4:1b:62:ed:
e9:dd:b9:b2:ad:11:8e:9b:ed:3c:a8:68:52:93:a9:bc:3d:e5:
15:b9:9f:ea:d2:7f:06:99:a0:01:cd:0c:ba:a0:34:5e:5b:b5:
40:44:18:3d:16:bc:57:bc:f3:4c:c9:f2:d0:b5:4a:7b:23:3a:
e2:ed:44:f8:f6:c3:f7:dd:f8:85:28:da:ae:b4:6d:38:8b:9f:
05:c4:d0:70:65:98:8c:d0:22:59:0a:8c:b9:85:5d:ad:78:63:
41:8a:e1:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxXekgtodPDBnx0lXD2wzODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjExMDYwNDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGNhMjcyNjI3MDkyNDlhYTE5ZmE0MTY0MTM1ZGU0YmJmMmIzM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpDlY1AkA2jiKQyPrNhSGMQBoWNH
EJd7jyBui4maNIL7OWgFQow0sWFuvYedVQCoYkKe724n20DWUP8nrEcCyqlsY9jv
og77AhtCbGxN5EzDkiF1KhkCXNPgmJR1/bo5fTcSV9Bbt34lbru+T/yuvGB9/o39
G4s6NA2/CTKH24DA2cbzAFQBstV0sy4usXWOaAFXzyIPwxGyegCTyjQUoEU67h2r
vt4DMq0Z/ZMrikRdwn/GrAZGx1FDbWL/i5KgIeaB9UnJuwTEc9LjezCs5ie2NjFB
PQ6twkMwkDk/yLjNtogG56XVdODjDo1nt07ZHWSjyqRVwafCkKgXriQB3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHDKJyYnCSSaoZ+kFkE13ku/KzPDMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvY01vbkppY0pKSnFobjZRV1FUWGVTNzhyTThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABuPID48rZztnQzRHyzb
rlzfTv+xfHclRN4RGUXv4V2xFR0D+INWrrKwrssAauf7Gkecid5wOkojHYDqCAvg
wlzb7iWOLAgUIcY5VYzls8MViyUDWZb0tMNF0xFo9vUxQnP6rNCWThkC7AhgCewc
FXHHBRSJK65CpBbtNzfIRimYpGxKVyjK5S/BIH2B33uGU1OlUca4+3AGW7/OFRlL
5Bti7endubKtEY6b7TyoaFKTqbw95RW5n+rSfwaZoAHNDLqgNF5btUBEGD0WvFe8
80zJ8tC1SnsjOuLtRPj2w/fd+IUo2q60bTiLnwXE0HBlmIzQIlkKjLmFXa14Y0GK
4Yw=
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:07:45 2025 by rpki-client