Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6xFqHsTnxnCoOjvUJ3D-CjGQ1M.roa
File: M6xFqHsTnxnCoOjvUJ3D-CjGQ1M.roa (raw, json)
Hash identifier: FD0aVy45TPeNn4PvFmP0kJ6DfUnQ0grYiB+bq0H8W9E=
Subject key identifier: 33:AC:45:A8:7B:13:9F:19:C2:A0:E8:EF:50:9D:C3:F8:28:C6:43:53
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B597140123E9A1B40B8164BAB91D80ACA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6xFqHsTnxnCoOjvUJ3D-CjGQ1M.roa
Signing time: Sun 22 Oct 2023 22:11:16 +0000
ROA not before: Sun 22 Oct 2023 22:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:59:71:40:12:3e:9a:1b:40:b8:16:4b:ab:91:d8:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 22:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ac45a87b139f19c2a0e8ef509dc3f828c64353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:db:f2:3a:04:29:87:d9:92:6b:d5:d3:51:
ee:74:d5:88:58:e6:07:19:b9:44:ac:c9:bf:a1:80:
29:10:6a:37:e2:ed:25:01:1b:49:e7:2c:56:64:1c:
2d:67:94:4a:a6:f7:ca:cf:4d:62:21:8e:f2:7d:cd:
87:86:a4:4d:fb:9e:ef:c9:8f:8d:a9:ec:bd:1f:78:
11:e8:a5:93:14:53:a1:97:19:6c:28:46:03:3c:c1:
6a:09:22:09:2b:95:a0:6c:4e:39:5d:58:e6:42:66:
e9:ca:3d:b7:c3:95:d2:58:78:14:49:6a:44:b6:56:
ae:00:7f:f7:ce:f6:fd:29:69:12:4a:e4:d4:0a:54:
1e:8f:94:21:e9:3c:dd:4f:b3:10:11:fd:a7:ae:06:
65:40:51:ec:d6:0d:94:6c:b4:c9:84:e0:d6:2c:6d:
69:8e:34:f5:79:0d:e1:e5:f4:c5:c5:05:b5:1c:d2:
ae:20:79:fe:31:c0:d7:e8:16:09:f2:2a:49:28:b7:
f5:87:2f:71:3f:6c:0e:1d:f5:55:ed:c7:87:80:89:
22:7a:ac:1a:60:78:7a:59:e9:f0:c8:5a:81:57:10:
39:6e:65:a3:d5:6d:ce:ed:52:49:f0:da:2e:6f:12:
28:ca:19:1d:da:c5:50:4f:2c:8d:74:2a:45:f4:35:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:45:A8:7B:13:9F:19:C2:A0:E8:EF:50:9D:C3:F8:28:C6:43:53
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M6xFqHsTnxnCoOjvUJ3D-CjGQ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:47:5f:3b:6e:6d:63:82:ff:2a:a5:9b:eb:18:4a:79:e4:c2:
17:c3:32:4e:b5:28:33:aa:0f:c5:87:a8:54:e4:f1:e4:5a:89:
59:34:c1:35:0d:7c:2b:fd:e4:f4:3c:3f:33:5b:1c:d6:7b:26:
48:35:9e:39:c5:82:f3:70:f1:76:32:25:d3:8f:7c:6b:58:d3:
9b:3b:92:7b:0f:58:7f:ec:5f:bd:a8:23:c4:75:90:7f:d5:fd:
66:ba:a7:cc:55:b0:cb:c0:d6:8d:08:51:44:93:61:10:03:6b:
0e:5f:d0:c0:0b:df:4a:be:59:7a:8a:a0:88:be:4b:ee:72:6b:
39:58:eb:54:c7:b8:3b:d4:cd:7e:60:7e:bf:ae:f6:a3:1f:d6:
d5:e2:05:2f:b1:de:a2:e1:26:ac:3b:d0:23:8c:42:c4:c4:f8:
b4:4a:03:f4:73:f3:88:2a:f2:28:5a:4d:ef:6f:aa:54:58:56:
f6:98:ec:81:8e:02:a0:26:fd:25:66:76:4f:0b:1b:03:2f:8c:
85:14:51:eb:ef:7f:ff:c7:e0:19:ef:1a:f7:86:cc:bb:78:b4:
25:56:f9:e1:fc:af:6e:50:0a:c4:6d:12:0a:62:cf:8d:b9:08:
c3:e9:32:56:9a:43:9d:72:de:b9:2f:e2:04:3d:a0:1f:ae:a3:
b4:66:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:19 2025 by rpki-client