Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M77t51-a3MTkfMNQDCIqikHiYDg.roa
File: M77t51-a3MTkfMNQDCIqikHiYDg.roa (raw, json)
Hash identifier: o9aB3It8mWTptQIlJFpakycZGcwTWeeah/FlU29+rB4=
Subject key identifier: 33:BE:ED:E7:5F:9A:DC:C4:E4:7C:C3:50:0C:22:2A:8A:41:E2:60:38
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B25F32DB7C0C38BC5DC0A3D6489AEDE15
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M77t51-a3MTkfMNQDCIqikHiYDg.roa
Signing time: Thu 12 Oct 2023 22:12:55 +0000
ROA not before: Thu 12 Oct 2023 22:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:f3:2d:b7:c0:c3:8b:c5:dc:0a:3d:64:89:ae:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 22:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33beede75f9adcc4e47cc3500c222a8a41e26038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:7f:0d:7b:d1:c0:69:b7:fb:ff:7c:5e:6c:
6f:a1:6b:3f:2f:a1:f9:0c:45:b4:08:8e:eb:d4:3c:
1f:0f:ff:d1:19:5e:4b:9d:c3:09:0a:3f:0b:93:f9:
cb:7f:31:9f:ea:7a:5b:73:18:05:2c:34:e5:b1:6c:
28:48:b0:a8:61:e4:cc:92:e1:49:41:3d:d2:0d:33:
88:80:98:76:80:ce:1f:1f:e2:57:72:75:13:62:8e:
89:00:9d:8a:45:8c:be:09:b7:48:2d:0f:98:8e:44:
86:74:09:cb:f6:73:a3:8a:f6:f9:3e:76:3d:5a:4c:
ff:75:4a:26:5d:ad:0b:a5:5e:8b:e4:c0:09:2e:57:
b0:bc:37:24:8b:f6:d1:e1:a9:11:12:d5:75:5c:4f:
91:4a:fe:d7:4a:42:c3:68:55:95:7a:34:d0:69:cc:
38:e8:e3:4b:70:25:b6:5e:a5:54:65:1c:2a:79:49:
93:7f:58:01:8b:86:81:f0:0f:68:3f:74:60:86:4b:
fd:e6:5c:96:39:c0:1b:d7:39:cb:28:6e:ce:22:0a:
3d:51:4c:51:86:71:ff:47:65:01:43:31:5d:f1:3f:
08:54:0b:36:ba:b7:c1:a6:8b:f4:c4:b4:da:03:e5:
21:fb:a0:9d:db:4a:74:da:ee:63:61:a4:1a:b5:98:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BE:ED:E7:5F:9A:DC:C4:E4:7C:C3:50:0C:22:2A:8A:41:E2:60:38
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M77t51-a3MTkfMNQDCIqikHiYDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:15:87:46:d1:b9:f7:59:e4:fc:2f:db:48:ef:fb:78:f5:88:
1f:a2:f4:c9:70:5f:96:32:a2:ab:c6:5f:ed:ab:86:02:6e:50:
87:3a:22:81:1d:ec:03:ba:c3:61:a4:0e:31:68:df:6a:ab:65:
57:bf:4e:52:56:cb:5c:b2:57:9f:dd:58:67:db:d0:ce:23:6d:
86:14:6e:5c:48:c2:14:31:c2:fc:cb:f2:c8:20:d6:04:32:05:
b5:b0:0d:1e:f6:2d:c4:a9:57:ab:29:5d:d1:fb:8a:58:4f:35:
a7:3e:36:54:91:d1:de:4c:db:f5:25:6d:64:5a:9e:43:67:fe:
48:dd:0d:3b:a1:6f:78:f1:ea:53:3b:a1:47:fb:ee:b0:3e:d4:
25:4d:0f:a4:0f:4a:5e:45:ae:8f:f8:aa:0a:5d:0f:1f:d7:8c:
9a:2e:13:d0:22:16:dc:20:50:69:60:a1:f0:bd:3f:cf:72:55:
19:f5:a0:5e:87:06:b9:b2:b3:51:b4:8c:48:6c:38:c9:32:6b:
cf:ae:62:51:83:11:e9:a5:ac:f5:35:e1:4c:31:4d:ae:00:30:
fd:5a:93:3b:d5:96:92:b2:29:4f:b9:f7:40:0c:20:58:54:b0:
32:47:ab:c6:5b:f1:26:c4:34:23:51:dd:b2:ab:79:94:2c:ee:
9f:d8:50:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:52:33 2025 by rpki-client