Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mkfqX7VFRDgSOJr6T7IvTgDAW84.roa
File: mkfqX7VFRDgSOJr6T7IvTgDAW84.roa (raw, json)
Hash identifier: MxHEI/lXBPxEm1QtJcY6QQQu9PlN4DICSXeRBbzrO4E=
Subject key identifier: 9A:47:EA:5F:B5:45:44:38:12:38:9A:FA:4F:B2:2F:4E:00:C0:5B:CE
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CC3692A3F78E7BA7F9CC50298701AD7C8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mkfqX7VFRDgSOJr6T7IvTgDAW84.roa
Signing time: Mon 01 Jan 2024 05:04:58 +0000
ROA not before: Mon 01 Jan 2024 05:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:c368:cdf1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:69:2a:3f:78:e7:ba:7f:9c:c5:02:98:70:1a:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 1 05:04:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a47ea5fb545443812389afa4fb22f4e00c05bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:f8:2f:97:2c:f3:81:50:e9:d0:3c:8a:e4:
2e:94:e3:2a:72:05:9a:2c:82:74:bd:10:37:ef:c2:
a3:d1:fb:e6:97:a2:a8:66:fb:94:f3:31:4b:5a:14:
74:24:ea:95:73:23:b5:03:b5:4d:d7:c3:3a:fe:cb:
96:95:55:61:f1:44:65:16:c0:26:ee:97:2c:69:0c:
60:44:6e:4b:47:cf:52:86:be:f1:02:a2:34:7c:9d:
da:47:45:64:a0:88:d7:74:01:30:1e:dc:3e:c0:f6:
16:d0:ae:bb:9b:db:a2:1e:0d:b0:0d:73:5d:72:71:
61:77:82:06:9e:8e:00:30:1e:db:f1:a1:7a:a4:43:
a1:63:fa:c2:1a:01:f9:e6:f3:40:ad:0a:7a:02:ea:
d8:cd:5f:b5:a0:e8:ab:b5:c0:a9:de:35:23:f9:d9:
21:bc:93:1a:a7:53:a2:e6:26:41:e5:70:12:f6:4d:
e2:35:60:db:bb:3f:4c:68:74:68:e7:21:95:cf:4b:
6f:a6:24:34:71:20:9b:47:0d:d2:d4:c5:a0:01:ae:
01:ba:c4:65:98:14:f3:b1:43:e9:d7:36:29:93:08:
44:10:9f:a3:95:d8:6e:18:4a:83:ca:06:2f:19:a2:
fe:a6:b7:c5:ca:4a:33:f4:38:ac:f7:74:80:78:58:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:EA:5F:B5:45:44:38:12:38:9A:FA:4F:B2:2F:4E:00:C0:5B:CE
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mkfqX7VFRDgSOJr6T7IvTgDAW84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:7e:62:d8:62:07:37:b9:8d:89:91:b0:14:dd:4e:3d:0b:a8:
38:f1:f1:03:69:77:e0:94:78:63:41:2d:0e:68:73:82:f8:ad:
1f:11:1c:15:b5:90:a7:55:08:3e:a1:68:dd:15:10:c7:2b:79:
45:a7:60:5c:30:f1:b5:7d:0a:01:2d:f0:92:b4:6d:4e:16:6b:
0c:06:f8:d3:0e:ef:cb:8d:65:ff:cb:cc:55:34:8e:11:99:43:
38:58:9c:1a:2a:86:86:94:c2:62:a7:20:43:ac:04:29:31:b0:
49:42:8c:ec:b6:60:45:52:fc:14:c0:77:b4:9b:aa:44:5a:97:
61:17:ee:d9:23:6f:64:63:37:71:07:2a:f9:97:77:1c:d0:b7:
ba:44:79:7a:2d:f8:10:e9:1d:82:b5:a5:0f:bb:e2:5d:a7:ad:
76:a4:77:82:b4:a7:de:5c:bb:2a:ab:3b:36:dc:4b:86:d1:d8:
82:7f:f3:10:03:16:d0:f0:66:99:3a:df:3b:0b:55:b4:75:37:
0b:0d:2b:5b:7a:8c:70:c5:71:ed:0f:c0:62:41:8c:63:3a:ed:
a7:24:f6:f4:dd:8a:92:2a:78:2b:23:1b:82:58:c7:6b:97:1b:
5c:ba:34:e7:ce:92:6e:d2:43:1e:e3:cd:04:49:d3:b7:80:b6:
1d:0a:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:13:49 2025 by rpki-client