Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5DR_ObC-wydzzwb2My3o9E3Gm0.roa
File: M5DR_ObC-wydzzwb2My3o9E3Gm0.roa (raw, json)
Hash identifier: cPgWXgmcPVq2KfE+/26NKh21DfkBNQ2RcfQzOCYJmm4=
Subject key identifier: 33:90:D1:FC:E6:C2:FB:0C:9D:CF:3C:1B:D8:CC:B7:A3:D1:37:1A:6D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B61D5133A813F7BCBDD0E0FE41E4F0058
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5DR_ObC-wydzzwb2My3o9E3Gm0.roa
Signing time: Tue 24 Oct 2023 13:17:15 +0000
ROA not before: Tue 24 Oct 2023 13:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:d5:13:3a:81:3f:7b:cb:dd:0e:0f:e4:1e:4f:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 13:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3390d1fce6c2fb0c9dcf3c1bd8ccb7a3d1371a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:f0:87:41:7f:1e:f6:c4:a2:d1:23:12:3a:
91:0d:ed:19:80:77:18:d0:f0:b7:80:a6:c1:6f:e7:
a9:58:25:82:b7:5a:b1:21:90:ec:3c:30:98:b1:46:
5d:7b:76:ff:b1:86:dd:4f:5c:c5:16:a6:b5:d4:09:
d9:6b:9c:b6:5f:cd:4f:60:24:6f:df:c4:97:e3:16:
21:d8:b4:9b:bf:cb:6b:35:98:9e:31:01:84:46:84:
16:e0:f5:d4:98:a1:6d:b2:9a:73:bf:0c:18:14:78:
36:c1:48:2f:17:5f:f3:99:f6:1f:66:ce:4e:6d:8f:
ad:5e:dc:29:e4:c5:e7:cd:6a:cc:e9:f3:eb:cc:01:
fc:bb:df:0b:aa:ea:6f:36:cc:00:14:c4:e8:66:97:
80:b8:0d:9e:ed:4c:fd:c7:a1:a2:85:f0:2f:a1:13:
b8:7e:93:0c:3b:0d:a5:22:a4:98:68:56:19:e7:05:
4c:d1:3c:66:80:80:a1:ce:96:3a:42:2c:a9:d8:04:
9e:90:06:d4:4b:2a:ad:8f:db:e0:4d:e6:4a:43:52:
ef:c8:95:d7:4f:43:11:a9:f1:ca:19:ad:9f:87:cc:
46:ab:34:41:b4:b3:13:9c:75:6d:1c:77:d6:f1:34:
64:93:9a:4e:ec:9b:77:1c:1b:5e:3d:cb:22:99:75:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:D1:FC:E6:C2:FB:0C:9D:CF:3C:1B:D8:CC:B7:A3:D1:37:1A:6D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M5DR_ObC-wydzzwb2My3o9E3Gm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:44:bc:5b:74:36:cf:6a:fd:98:80:e6:3a:75:4c:0a:df:9c:
73:6c:de:6a:f0:86:8c:d0:51:e5:1f:78:f5:27:ac:13:ec:d8:
57:ac:2f:87:97:7f:a7:66:d9:40:1a:65:8f:ed:7b:89:e3:93:
71:61:44:d0:1e:79:22:69:5e:7b:51:2b:c7:3b:7c:a0:8b:4b:
cc:fe:22:32:0c:94:4b:b9:31:81:5b:f5:a9:f6:3c:86:b3:c5:
a7:77:a0:82:8a:31:63:db:c5:08:63:c4:00:c8:8c:04:f2:a4:
66:ac:51:a2:f9:d9:fd:74:4e:d2:53:4b:c5:e0:a5:15:b7:dc:
7f:ec:83:1c:8e:ba:7e:1e:61:37:07:05:42:b6:25:53:98:12:
38:09:77:f8:ec:a2:27:f2:8c:b2:a2:49:5d:0e:18:ff:1f:02:
57:c1:f8:15:2a:99:52:25:c1:ed:59:f4:38:2e:89:c2:ca:06:
82:0b:2b:6d:d2:af:e5:53:b2:6e:c0:30:9f:f0:7f:76:ad:e6:
0a:c7:15:ba:9e:30:d4:3c:8f:90:ec:15:b8:0b:b8:43:c7:2c:
51:05:68:9c:65:4c:e9:7e:27:c8:24:fe:4c:c7:03:ef:fb:9f:
e6:8a:6d:25:87:6c:e8:05:d9:4c:d4:0f:f4:05:82:e9:84:43:
6e:a9:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:09 2025 by rpki-client