Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfYlPn0tAgVEDkbuTFUHNfAO38s.roa
File: MfYlPn0tAgVEDkbuTFUHNfAO38s.roa (raw, json)
Hash identifier: vi3MJkt3JiCmt2DbkTh2kN7g5PL2yVeRTbH3VSrUjEk=
Subject key identifier: 31:F6:25:3E:7D:2D:02:05:44:0E:46:EE:4C:55:07:35:F0:0E:DF:CB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B05556290B3E0F604C0A8E9F082FEF030
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfYlPn0tAgVEDkbuTFUHNfAO38s.roa
Signing time: Fri 06 Oct 2023 14:12:43 +0000
ROA not before: Fri 06 Oct 2023 14:12:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:55:62:90:b3:e0:f6:04:c0:a8:e9:f0:82:fe:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 14:12:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f6253e7d2d0205440e46ee4c550735f00edfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:63:7e:97:41:17:0d:65:2c:2f:e6:3e:a1:
07:1f:20:bb:bf:12:95:b1:7e:db:37:25:67:1b:d6:
1a:04:63:3b:75:64:55:90:91:ab:47:9e:be:72:73:
7e:90:ed:90:c3:ab:0e:ac:9a:41:21:3b:16:08:f0:
09:e0:29:19:98:e7:44:7d:b9:7b:fe:b4:8d:ae:7e:
4a:6d:e9:2c:c9:c3:ff:c8:52:ec:e9:db:a8:97:97:
36:ed:24:0b:a9:bd:fc:9e:c0:ee:a1:7d:95:4b:13:
5b:38:ad:68:e9:23:63:66:a1:4e:05:a1:84:4b:bf:
be:6d:a2:ed:44:c1:b0:6e:20:08:9e:49:37:14:b6:
93:df:29:51:3b:36:6a:08:61:16:0a:60:6a:f3:83:
f6:47:4c:88:26:fb:56:63:a1:ab:2e:5a:8b:22:f2:
58:6e:76:37:14:83:05:70:67:ea:04:a4:4a:2d:01:
db:c8:db:91:42:1c:25:a7:c1:29:4a:d5:0f:af:c1:
61:b7:52:54:1e:d9:46:42:66:95:bc:ce:2a:1b:de:
0a:35:58:98:20:b4:fc:d2:d0:35:11:02:7f:a5:6c:
e9:32:ba:f0:79:b3:51:29:89:df:06:e7:49:df:f3:
bb:5a:4d:54:f8:6a:85:9d:b6:d3:be:d3:c9:1f:8b:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:25:3E:7D:2D:02:05:44:0E:46:EE:4C:55:07:35:F0:0E:DF:CB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfYlPn0tAgVEDkbuTFUHNfAO38s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:0c:1a:8f:80:87:2c:0a:b1:bb:29:f1:8e:0a:43:30:f9:bc:
fc:c4:76:66:42:d5:9c:02:3e:c9:b8:0b:a6:d7:de:8c:72:f2:
71:39:43:69:f1:89:2a:8e:ad:81:1d:0b:fb:c7:85:ba:78:cb:
7b:45:ee:7a:78:32:4e:b3:56:40:17:4c:bc:f2:eb:ac:ea:a5:
a0:99:4e:ef:33:5b:b9:45:cd:43:59:18:f6:44:b1:a3:0a:10:
0d:19:1b:83:cf:6d:6a:98:0c:ce:94:3e:ee:c8:02:9e:07:69:
94:92:c2:6c:b6:94:77:f8:4c:9e:15:50:9f:ea:99:2b:fa:f9:
ae:ca:c1:e2:b9:3b:cb:27:be:cc:51:59:a5:df:fe:9e:01:99:
e0:a6:3b:cf:6b:59:d6:c7:2c:90:a3:9d:09:48:90:6b:10:18:
30:7b:a8:6b:01:ba:0a:c7:ae:28:c6:ce:d4:d6:c6:3e:d7:48:
06:d0:c6:bf:3a:5c:a6:ae:2a:f9:ac:ea:a7:fa:4c:d9:11:f9:
50:67:c9:0c:27:0d:cb:d7:76:4c:1c:e8:3a:95:13:79:71:92:
26:9f:44:58:51:2b:f9:7c:3c:ac:e2:0a:bc:ff:6d:60:75:3e:
83:50:bc:3f:6c:b9:63:7e:16:a4:92:13:08:cb:c3:22:71:80:
bb:62:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:52 2025 by rpki-client