Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MDd9W8X4ZmHCvjdNdfY4fYPv7j0.roa
File: MDd9W8X4ZmHCvjdNdfY4fYPv7j0.roa (raw, json)
Hash identifier: k8Q0tLSm8XiAOXRT0wMZdslYAEQHHVn5q0OhhckSWKE=
Subject key identifier: 30:37:7D:5B:C5:F8:66:61:C2:BE:37:4D:75:F6:38:7D:83:EF:EE:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0EFD4EFDAF0CC029149E082134D2D2A4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MDd9W8X4ZmHCvjdNdfY4fYPv7j0.roa
Signing time: Sun 08 Oct 2023 11:12:43 +0000
ROA not before: Sun 08 Oct 2023 11:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:fd:4e:fd:af:0c:c0:29:14:9e:08:21:34:d2:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 11:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30377d5bc5f86661c2be374d75f6387d83efee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e0:b9:36:b0:af:93:f9:42:fc:be:90:0c:e7:
0e:88:a5:1e:60:d8:78:a2:41:7f:53:fd:27:78:71:
58:e8:c0:65:91:5d:f4:19:93:50:7f:f0:5a:51:47:
a2:af:ff:41:25:85:98:f1:78:0d:aa:7d:47:8d:da:
b3:0e:4b:a0:07:e3:00:db:5b:cc:3b:64:fd:e6:74:
50:df:6b:b1:77:8d:5a:f7:6e:75:ce:a7:8f:b1:53:
52:f9:f4:a1:94:6a:65:81:5e:4c:b3:9b:7d:de:f3:
3e:ab:18:8a:44:53:f0:29:87:73:b2:5f:29:77:4d:
cb:9a:97:54:14:76:79:28:e7:e3:94:d2:fc:f2:b2:
5c:67:b5:11:29:d9:3b:10:75:70:f9:bd:21:1f:46:
d6:39:d1:d3:c1:af:1c:c8:7a:dc:b8:c6:24:cf:c8:
2b:d4:c9:a5:5b:15:cf:9b:18:14:6e:25:11:a9:b9:
a0:91:83:95:35:4a:95:1b:50:32:02:48:ed:c0:59:
8d:47:15:df:84:fd:20:34:f5:33:94:18:59:ad:55:
75:fc:28:2e:f6:f1:c4:5c:1b:b8:f9:64:f2:c1:d5:
f1:e8:fb:fd:d2:5d:97:cc:df:cc:8a:e7:60:1a:18:
95:88:7d:9c:68:aa:62:9a:88:49:9c:6d:4f:8a:77:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:37:7D:5B:C5:F8:66:61:C2:BE:37:4D:75:F6:38:7D:83:EF:EE:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MDd9W8X4ZmHCvjdNdfY4fYPv7j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bb:bf:8d:ce:9a:b2:6e:13:c3:ab:ce:86:93:25:ca:12:b3:16:
1d:b9:66:4f:6f:52:8e:57:9e:b1:c2:bb:59:16:f3:0b:db:27:
8b:00:4d:af:ed:66:87:e5:d6:62:5d:d0:bb:36:32:2a:d8:50:
29:5e:d2:4b:4f:9c:63:9d:f2:12:de:b6:4d:02:5b:4d:16:5e:
c4:76:9d:b4:fa:d9:76:11:05:54:81:da:de:ee:33:2e:2c:60:
7d:90:8e:9b:af:99:1b:c1:a0:57:3f:9b:07:40:4e:78:8d:4f:
3f:6e:ff:bc:ae:4b:f9:15:0c:f4:5c:e8:1e:24:38:ad:28:cb:
79:0b:22:8b:fd:b9:ba:12:73:16:9e:39:b5:e7:5d:8c:3b:49:
cc:c9:eb:34:07:9a:60:3a:0f:fd:d8:fd:b7:80:3c:9d:d8:5a:
ca:8e:a7:1f:73:df:09:b6:f5:20:ab:c5:d4:72:b1:63:ff:18:
a1:17:0b:63:30:04:cb:c6:7f:ce:52:c6:cd:c6:02:21:72:4e:
c4:f3:b9:88:04:6d:1a:83:54:f6:6a:06:1a:7d:fb:94:b0:a6:
6f:10:6d:51:f7:8e:84:19:7b:7d:e3:75:2a:a0:1e:5c:37:e1:
35:a4:e5:bc:93:4e:63:e2:1b:ff:99:54:5b:5f:9d:1e:16:9c:
77:77:71:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYsO/U79rwzAKRSeCCE00tKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDA4MTExMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDM3N2Q1YmM1Zjg2NjYxYzJiZTM3NGQ3NWY2Mzg3ZDgzZWZlZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOC5NrCvk/lC/L6QDOcOiKUeYNh4
okF/U/0neHFY6MBlkV30GZNQf/BaUUeir/9BJYWY8XgNqn1HjdqzDkugB+MA21vM
O2T95nRQ32uxd41a9251zqePsVNS+fShlGplgV5Ms5t93vM+qxiKRFPwKYdzsl8p
d03LmpdUFHZ5KOfjlNL88rJcZ7URKdk7EHVw+b0hH0bWOdHTwa8cyHrcuMYkz8gr
1MmlWxXPmxgUbiURqbmgkYOVNUqVG1AyAkjtwFmNRxXfhP0gNPUzlBhZrVV1/Cgu
9vHEXBu4+WTywdXx6Pv90l2XzN/MiudgGhiViH2caKpimohJnG1Pinf5dwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDA3fVvF+GZhwr43TXX2OH2D7+49MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTURkOVc4WDRabUhDdmpkTmRmWTRmWVB2N2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALu/jc6asm4Tw6vOhpMl
yhKzFh25Zk9vUo5XnrHCu1kW8wvbJ4sATa/tZofl1mJd0Ls2MirYUCle0ktPnGOd
8hLetk0CW00WXsR2nbT62XYRBVSB2t7uMy4sYH2QjpuvmRvBoFc/mwdATniNTz9u
/7yuS/kVDPRc6B4kOK0oy3kLIov9uboScxaeObXnXYw7SczJ6zQHmmA6D/3Y/beA
PJ3YWsqOpx9z3wm29SCrxdRysWP/GKEXC2MwBMvGf85Sxs3GAiFyTsTzuYgEbRqD
VPZqBhp9+5Swpm8QbVH3joQZe33jdSqgHlw34TWk5byTTmPiG/+ZVFtfnR4WnHd3
cWM=
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:59:17 2025 by rpki-client