Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNXeVgCsyIi-md8asf9GQ1HKCpU.roa
File: MNXeVgCsyIi-md8asf9GQ1HKCpU.roa (raw, json)
Hash identifier: fdzvzxl9m97YC1zoIwx2c1/h6HswkezNAxMr5LUi2qM=
Subject key identifier: 30:D5:DE:56:00:AC:C8:88:BE:99:DF:1A:B1:FF:46:43:51:CA:0A:95
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3A20BEB282257B67CC912146A508ECAD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNXeVgCsyIi-md8asf9GQ1HKCpU.roa
Signing time: Mon 16 Oct 2023 20:15:06 +0000
ROA not before: Mon 16 Oct 2023 20:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:20:be:b2:82:25:7b:67:cc:91:21:46:a5:08:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 16 20:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30d5de5600acc888be99df1ab1ff464351ca0a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:fe:af:87:ba:97:26:92:11:9a:b2:fa:b6:
1c:73:65:6c:26:f5:63:7d:be:96:6e:4c:b7:09:7a:
c8:a6:48:a1:34:36:a5:1b:3b:63:43:bf:26:e1:ee:
08:5c:1b:d1:3e:a1:17:ff:4e:a3:05:fd:f5:ae:f9:
44:11:34:a5:55:5d:04:bb:82:58:35:21:1a:7f:29:
d1:e3:be:9d:15:50:8d:32:f6:2e:e7:e2:26:32:ba:
f7:f7:4f:06:dc:54:be:cd:94:bf:0f:a1:8a:d5:3e:
7e:98:c6:57:25:95:3a:64:ad:bf:91:5c:7e:f4:78:
d0:45:50:7b:d5:99:a0:7d:35:dd:a4:3c:3c:e0:46:
17:82:68:16:e8:42:91:e0:36:fe:7d:a7:ea:b9:76:
a9:60:e9:4b:62:18:2e:8c:ce:de:59:d5:8a:cc:d0:
1e:f7:06:bb:2e:45:54:9f:10:7b:98:3f:cc:c4:83:
7c:d7:d6:64:6b:5f:24:99:ef:e0:53:b6:68:7c:1a:
c7:f6:8d:78:24:f7:d7:61:8e:d1:32:58:d4:02:96:
27:da:0a:c9:87:15:a7:2d:fe:7b:7a:c3:5e:86:69:
d8:2e:d4:a7:ef:e1:4d:a1:34:f3:e4:da:04:e9:86:
e2:3b:6b:b0:74:a4:d3:33:7c:85:7c:df:6b:be:d8:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:DE:56:00:AC:C8:88:BE:99:DF:1A:B1:FF:46:43:51:CA:0A:95
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MNXeVgCsyIi-md8asf9GQ1HKCpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:98:cd:6d:ed:b7:1b:18:49:a0:86:59:d2:d3:2f:89:61:b3:
16:50:1a:d7:12:92:06:cb:a8:4b:85:cf:ef:5a:a0:d4:72:48:
4c:5e:4e:57:5f:4f:db:af:fe:f6:a9:5c:01:e2:90:4a:df:bf:
0d:72:17:bc:3f:77:07:e5:af:24:12:0b:40:e8:a1:a3:0a:78:
57:b4:5b:80:e0:4d:cf:03:c9:a4:23:af:32:b3:40:92:1d:40:
28:dd:18:da:be:ee:60:99:07:97:70:9a:95:83:75:91:95:44:
60:d0:17:36:0b:c4:74:05:5d:01:6c:8a:28:a1:41:34:6a:9c:
4b:72:e7:0e:de:fb:75:31:0d:ca:c0:aa:ee:1a:19:98:b2:e2:
bc:a7:8b:ef:c4:cc:a4:f8:e0:82:11:62:6a:b5:d6:0e:64:76:
5a:0b:57:8f:29:03:0f:ad:64:7b:2a:1f:16:35:62:4c:10:d8:
26:cd:5a:53:fa:a4:4d:51:ca:48:64:73:00:ca:d1:8d:ca:ce:
6f:16:3b:68:aa:20:b0:5c:5b:1a:c8:84:19:cd:48:ce:4b:7c:
db:af:ec:7d:13:a9:9b:cb:d4:77:1b:eb:d5:c7:c3:7b:60:74:
b3:dd:dc:5e:74:17:2a:5f:44:fa:cd:a6:16:d4:c3:23:11:88:
8c:a5:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:07:12 2025 by rpki-client