Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MpnKwbUXvfylQ3M1jB7kxbcMI0.roa
File: 7MpnKwbUXvfylQ3M1jB7kxbcMI0.roa (raw, json)
Hash identifier: vB/p7aWxxf2LcZ3DZBI8y8f8pxFiIO3y30j8d7Z7coY=
Subject key identifier: EC:CA:67:2B:06:D4:5E:F7:F2:95:0D:CC:D6:30:7B:93:16:DC:30:8D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8236439352CF926422B9760931B95D44
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MpnKwbUXvfylQ3M1jB7kxbcMI0.roa
Signing time: Mon 30 Oct 2023 20:11:16 +0000
ROA not before: Mon 30 Oct 2023 20:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:82:36:43:93:52:cf:92:64:22:b9:76:09:31:b9:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 30 20:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecca672b06d45ef7f2950dccd6307b9316dc308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:6b:2f:55:a9:22:c7:8b:58:ed:10:cf:80:
f7:97:41:49:ed:c2:66:84:32:0b:0d:73:ff:e0:62:
fb:e1:49:1c:3b:02:a9:83:6a:2f:2c:6d:82:5c:4e:
98:83:3d:33:7f:bc:93:38:1e:9a:64:1e:d5:18:a5:
b4:69:7b:13:09:e0:fc:0f:e9:dc:27:e5:a6:4e:56:
f4:ec:dd:7c:64:17:7e:2d:75:f0:4a:c2:0c:a7:1a:
4c:dc:b4:57:2b:1d:de:6c:b7:7e:95:6d:7f:96:0c:
23:d5:7c:4d:62:4d:53:7d:1c:78:11:c2:69:ca:e2:
22:d4:1f:05:60:b8:e3:2a:63:b4:85:df:2c:49:8f:
b2:5a:37:5f:b0:ed:24:83:4a:9d:c6:2b:4c:c5:9e:
ad:8c:08:14:07:60:4c:32:38:b2:4a:48:71:fe:eb:
d6:cb:c1:29:52:fe:32:1c:8a:6a:40:55:90:0f:c7:
4b:b3:7d:2c:97:02:ca:4b:18:41:ab:7f:4f:03:fc:
74:32:1f:39:8f:fb:60:8b:a4:95:5d:b5:b4:84:65:
4f:87:9a:2b:aa:60:d4:8d:14:4f:ca:cc:aa:56:c8:
d5:c5:24:c3:51:8a:65:db:9a:80:3f:27:06:73:ac:
a9:a3:61:c6:26:28:70:3b:3d:ee:59:e8:45:a1:1d:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:67:2B:06:D4:5E:F7:F2:95:0D:CC:D6:30:7B:93:16:DC:30:8D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/7MpnKwbUXvfylQ3M1jB7kxbcMI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:7c:56:ee:c5:ff:09:46:80:09:db:49:a2:75:92:00:5a:d2:
06:2d:9d:b5:c7:6a:44:6d:18:6e:74:3f:b8:f7:c9:04:9c:a2:
69:fd:3b:c5:75:8b:dc:cf:9b:73:3d:2f:c6:46:e3:dd:04:24:
53:46:5f:c3:47:36:cc:45:25:79:1a:4c:9b:f1:fd:3e:ba:bb:
10:e9:79:f2:8c:07:b8:04:86:8f:04:d7:1b:ba:d4:c8:16:31:
e5:fc:d5:33:e6:cb:b5:30:23:a4:32:50:fe:41:a6:c8:c0:9a:
c7:d9:81:2e:56:3f:ab:0a:f4:ad:61:94:75:c8:c5:2c:33:db:
bc:68:4e:a9:7e:60:41:d5:a7:ea:25:52:c4:b0:3f:86:38:5c:
9d:41:26:f2:02:ed:e5:92:ba:55:b5:ff:0d:6d:e6:b0:a4:f3:
c7:26:e7:2b:87:86:83:af:6d:36:e2:03:fc:bf:b6:74:ae:bf:
84:0a:2b:1e:40:76:4a:c4:41:0b:8a:40:cf:09:19:24:2d:7a:
88:f0:da:15:19:b6:a7:c5:5e:a0:39:c4:70:67:d5:6f:cf:68:
72:ca:30:bd:10:3e:fa:99:57:35:2a:21:6d:0d:69:2e:14:47:
9d:f1:2f:95:0b:94:b6:76:c3:e4:0d:69:28:53:82:1f:f9:be:
1a:ca:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:13 2025 by rpki-client