Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3mgK-8sxShNyjpnD_mNpkjP0uEA.roa
File: 3mgK-8sxShNyjpnD_mNpkjP0uEA.roa (raw, json)
Hash identifier: uoWBDAhUlfgwXY4JDcwlQORJsu0kYPYV+B8V+pDLu1U=
Subject key identifier: DE:68:0A:FB:CB:31:4A:13:72:8E:99:C3:FE:63:69:92:33:F4:B8:40
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7BC5669088E94887FF5E7887544B995E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3mgK-8sxShNyjpnD_mNpkjP0uEA.roa
Signing time: Sun 29 Oct 2023 14:10:16 +0000
ROA not before: Sun 29 Oct 2023 14:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7b:c5:66:90:88:e9:48:87:ff:5e:78:87:54:4b:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 14:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de680afbcb314a13728e99c3fe63699233f4b840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:47:ba:1f:68:c2:08:f0:de:a9:5e:ed:76:
c0:9a:bd:b1:6d:22:c1:46:8e:68:44:1f:55:b1:6f:
cc:0b:c5:ea:1a:6a:4e:05:43:61:75:ec:f4:c6:98:
06:e3:23:f1:0a:d2:79:89:48:83:51:dc:4b:d1:20:
71:dd:44:c1:0e:99:ed:f7:12:d2:ef:85:ef:ae:bf:
55:c7:a2:3f:2e:0f:8b:cd:dc:06:31:3b:4a:0d:e8:
70:2f:56:a4:fc:2d:7b:59:db:06:ac:62:6d:3d:85:
07:e6:24:ba:41:04:d8:fa:b2:f3:0b:41:6b:6a:90:
6e:6e:85:31:9a:0a:1b:7d:33:86:ad:15:97:ee:c4:
23:d2:ae:da:db:da:f7:de:ab:ed:03:08:38:25:5c:
f4:60:23:18:dd:54:7b:34:1b:f2:88:13:0e:11:cd:
0c:0e:19:fc:ec:4b:e9:a6:f8:e0:ec:8a:ad:76:0d:
ab:74:04:79:38:69:31:2f:44:bb:4f:7c:57:2e:2f:
22:f6:68:10:78:4e:e4:64:48:5a:c0:e2:72:d6:7c:
04:51:45:6c:81:62:20:93:df:bc:4e:6a:4b:88:71:
90:e3:cb:1d:cb:77:0c:00:25:f7:d1:3e:60:45:6d:
10:23:14:f1:0d:06:9b:62:2c:15:51:2c:77:52:f8:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:0A:FB:CB:31:4A:13:72:8E:99:C3:FE:63:69:92:33:F4:B8:40
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3mgK-8sxShNyjpnD_mNpkjP0uEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:dc:0e:c5:e0:78:8c:d5:a5:e2:77:e1:c3:c5:7d:66:95:2f:
b3:c3:f9:a0:ec:f9:b4:b6:99:5b:1c:da:5c:00:12:e1:a8:48:
60:0c:c8:31:32:fd:75:2c:85:51:7b:fe:a5:d7:aa:d8:4d:7a:
0a:c9:e6:8a:02:c8:00:b4:07:11:97:15:a3:41:0a:3a:8e:c2:
29:3a:94:e5:eb:3d:46:81:45:0e:74:de:6a:4f:09:84:50:03:
a2:f8:75:cc:4b:bb:a4:c1:54:d6:50:07:f7:48:0e:78:36:a8:
cb:f8:ad:1f:59:36:c9:ab:f7:5b:22:f9:a9:b3:55:2c:68:59:
6c:06:23:38:db:dd:c3:62:b2:bc:d2:8d:b9:12:aa:aa:f3:41:
58:79:5c:71:0e:19:83:53:90:2b:30:bd:af:49:d4:66:82:7a:
3e:30:37:55:19:c1:6e:a4:0e:95:b4:5c:56:d2:1d:b3:66:a3:
d6:ae:4b:6c:7a:bc:63:93:ce:f2:56:9f:32:17:d2:53:49:b6:
d1:52:8b:d5:4a:4a:6e:4c:08:5f:9a:20:4c:a5:a5:3e:0b:4c:
6c:9d:55:9c:b8:da:b4:92:76:a1:ba:eb:85:e7:dd:3d:b8:4e:
6a:10:7c:32:cd:27:0d:58:ea:03:b2:ad:f2:49:2c:96:dd:c1:
24:ea:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:00 2025 by rpki-client