Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MLKrNxkxsoVeVxMM-RCaemvKrvg.roa
File: MLKrNxkxsoVeVxMM-RCaemvKrvg.roa (raw, json)
Hash identifier: 9f6z4gYL78Hi9tygZ3perGeJvQdYk8n8DbqqNG4TnUo=
Subject key identifier: 30:B2:AB:37:19:31:B2:85:5E:57:13:0C:F9:10:9A:7A:6B:CA:AE:F8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BFD65ED6CF92B5454CA32337C05C416D0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MLKrNxkxsoVeVxMM-RCaemvKrvg.roa
Signing time: Thu 23 Nov 2023 18:16:37 +0000
ROA not before: Thu 23 Nov 2023 18:16:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:65:ed:6c:f9:2b:54:54:ca:32:33:7c:05:c4:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 23 18:16:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b2ab371931b2855e57130cf9109a7a6bcaaef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0d:dc:1f:40:9e:43:1c:c0:16:09:f7:dc:33:
bb:f7:5c:59:d3:32:51:b9:a8:76:e8:b2:da:de:fa:
cc:1e:5f:31:0b:a9:bb:5a:d0:a1:cc:a5:97:70:d0:
00:1b:06:76:e2:84:d6:3e:5e:2e:2b:00:6a:47:19:
38:86:93:2d:38:05:e2:12:ec:59:09:d4:2b:ec:70:
5e:f0:3e:a2:eb:f4:a2:f4:e5:27:82:a9:bb:b7:6a:
36:e4:9b:59:3b:8f:95:be:c6:d3:65:9f:9d:bb:d5:
a7:3f:22:67:cd:cf:a7:1d:dd:10:43:33:34:ba:49:
25:02:30:6e:5f:bf:b9:65:47:77:21:39:40:0d:3e:
82:d6:4e:cc:a2:1a:28:0e:1a:67:bf:3b:ad:39:72:
fe:47:3e:a3:99:97:36:ed:17:a3:a1:9f:ad:49:b1:
db:75:6c:ea:28:ad:d9:3f:fc:2d:27:1c:c6:5d:c0:
6f:16:23:21:20:d4:e6:0f:28:7d:32:be:9e:f6:9b:
14:7f:da:f7:a2:e3:84:6e:8b:aa:44:45:f2:ea:97:
31:78:ca:65:b5:43:a0:7f:fa:1b:d2:d9:dc:82:4b:
9e:7d:01:16:0a:45:ab:f7:9a:b4:4d:11:cb:80:2f:
ca:b8:ff:aa:52:c3:2a:7c:cc:07:6b:ef:f9:f2:28:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:AB:37:19:31:B2:85:5E:57:13:0C:F9:10:9A:7A:6B:CA:AE:F8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MLKrNxkxsoVeVxMM-RCaemvKrvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:d9:08:21:d2:c1:99:65:e5:35:e5:a1:0c:3f:a7:2e:79:8a:
ba:95:d7:72:c4:e8:d0:bc:5f:74:78:3b:20:10:06:de:92:4d:
79:bf:1c:58:ed:0b:7a:7a:0d:07:8d:c1:1e:74:ec:2a:be:35:
c9:85:3c:74:b7:5f:72:a0:f8:f3:d8:f9:d2:b8:58:6c:f3:5a:
1b:78:a0:ce:1c:7e:bb:8c:ca:35:2c:66:ec:bb:7e:54:7f:b1:
29:d2:2c:4b:78:76:2f:34:74:48:e8:c5:b1:7a:31:d8:a4:28:
be:5b:aa:22:50:ab:38:ac:c7:d0:1b:40:ad:2e:3c:1b:a9:1d:
94:fb:46:a9:e0:83:2c:db:f7:5d:29:56:08:7e:40:b5:e4:54:
c7:78:a1:41:89:24:ba:75:c8:a2:98:20:2c:7b:2b:f3:e9:7b:
ad:5e:35:b6:56:9b:83:81:1b:50:ee:a8:bd:e0:74:61:33:d5:
cd:7e:84:ce:a7:76:d5:72:c5:65:3f:0e:24:a5:9c:99:8e:0e:
b2:b3:7d:28:5a:88:d0:43:54:06:1d:b0:89:5a:3f:d4:b7:89:
97:60:1b:db:a5:f3:64:a7:37:cd:3e:12:da:74:aa:0f:2f:af:
ec:83:df:fc:9f:fd:39:95:3e:76:2d:a5:ab:28:07:40:1e:2e:
c8:16:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:17 2025 by rpki-client