Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ML9X80yWiRHRxP0GDNgq6_CmLus.roa
File: ML9X80yWiRHRxP0GDNgq6_CmLus.roa (raw, json)
Hash identifier: ggRbvWqIIwiByHRkn1qUARuMnh3+KuZ4TvZFkEmt+Gg=
Subject key identifier: 30:BF:57:F3:4C:96:89:11:D1:C4:FD:06:0C:D8:2A:EB:F0:A6:2E:EB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE6A730371B2BDAEE6C903F3D0F9D2E86
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ML9X80yWiRHRxP0GDNgq6_CmLus.roa
Signing time: Sun 19 Nov 2023 08:16:38 +0000
ROA not before: Sun 19 Nov 2023 08:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:a7:30:37:1b:2b:da:ee:6c:90:3f:3d:0f:9d:2e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 08:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30bf57f34c968911d1c4fd060cd82aebf0a62eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:95:fd:d7:4e:ae:b6:dd:a7:6a:fe:9b:7d:
06:ba:73:1f:63:d4:1b:7b:57:d3:6d:b0:ff:58:c9:
c5:90:67:e5:3b:69:d2:39:bb:a4:18:93:f1:46:27:
04:20:05:36:63:db:53:87:41:b3:fb:5a:5c:1d:a4:
ef:6a:2d:29:00:1c:9b:84:e3:6e:b0:b2:97:9d:79:
42:c3:4e:58:ce:65:ce:76:76:d8:e5:c3:82:69:0b:
8f:c4:04:96:cd:a6:14:32:69:66:c7:84:83:6f:e8:
d6:8a:48:66:fd:29:3e:f1:08:09:d3:1c:58:d5:52:
53:64:83:da:9e:00:ce:9a:61:fa:92:63:7c:5a:a4:
08:08:7f:06:e4:f2:db:69:42:b5:72:2a:fb:e0:d2:
88:d5:ad:29:1c:55:3a:69:1d:20:a2:cb:ea:09:88:
bf:7d:32:fb:d8:80:74:a5:4a:90:24:d5:5b:04:e0:
b7:98:be:28:03:64:05:c7:94:05:1c:48:73:e6:f5:
ee:42:9d:76:b4:33:fc:81:c8:f0:c9:21:19:5b:a0:
a1:a7:8a:92:de:28:e5:76:ea:ce:6e:9c:9d:15:ee:
1d:cd:b0:21:bf:f6:14:84:98:b5:39:a7:ce:37:10:
c8:71:fe:a7:cd:f4:5d:42:87:3c:40:b2:3a:08:e1:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:57:F3:4C:96:89:11:D1:C4:FD:06:0C:D8:2A:EB:F0:A6:2E:EB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ML9X80yWiRHRxP0GDNgq6_CmLus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:24:6d:d4:99:27:eb:63:90:a5:33:c7:e7:65:2a:f0:8c:c2:
f7:95:70:b2:46:83:a5:db:73:13:b0:eb:2a:d2:88:78:43:c8:
94:50:68:15:6d:2e:ea:b4:8e:74:11:38:1d:f9:f9:a6:75:d6:
6e:0e:fd:fd:89:9d:95:f3:88:4a:d7:60:d6:9b:72:f1:ad:c0:
2e:a9:9c:f0:9a:ae:44:98:75:cd:37:fc:8d:c4:02:08:22:ac:
a4:4f:0c:5e:7d:99:29:28:a7:e6:aa:c3:20:52:80:24:3a:c5:
f6:0f:c3:e6:12:c9:c8:4c:f0:6c:3c:8d:41:28:5b:f9:50:c6:
99:69:96:c7:bb:47:63:50:3b:45:f3:5e:9b:35:4b:94:d9:8b:
8a:62:67:b6:87:9d:4b:1e:8c:65:e4:f8:df:e7:6f:b0:ab:ab:
92:fa:f5:e2:bf:f8:75:f5:4d:4a:af:23:4c:06:46:7a:52:44:
10:6f:a0:b7:93:0e:96:b1:7a:57:d1:d8:e8:ca:36:b6:15:25:
8a:79:b4:20:91:13:de:f8:df:50:2f:7b:ce:96:46:7e:4e:ba:
0a:18:05:e5:2f:2d:23:51:52:01:ec:9c:9d:75:bd:19:7e:ae:
07:4d:45:80:be:85:ac:21:d1:76:20:22:42:c8:aa:ee:5b:9e:
70:5e:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:11:16 2025 by rpki-client