Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MwpcRRiFvZRPVDRG1Q71qgC-SUs.roa
File: MwpcRRiFvZRPVDRG1Q71qgC-SUs.roa (raw, json)
Hash identifier: ymbEzwFMmuz//xNDvq8PT/1uRsekw6933zc78vxyoug=
Subject key identifier: 33:0A:5C:45:18:85:BD:94:4F:54:34:46:D5:0E:F5:AA:00:BE:49:4B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACA54E9FD291EE8267C803D67AB1FEA15
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MwpcRRiFvZRPVDRG1Q71qgC-SUs.roa
Signing time: Mon 25 Sep 2023 03:14:37 +0000
ROA not before: Mon 25 Sep 2023 03:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:54:e9:fd:29:1e:e8:26:7c:80:3d:67:ab:1f:ea:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 25 03:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=330a5c451885bd944f543446d50ef5aa00be494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:de:3e:d4:74:49:c8:f7:67:fa:d3:a3:bf:
ea:3e:b4:4a:57:db:02:b1:da:ac:49:cd:f4:17:9b:
83:5f:09:ac:0e:97:77:fa:d4:bf:85:75:cd:32:27:
02:ce:dd:0c:67:ca:2b:b5:1b:f3:38:84:4f:b0:a9:
c1:10:bf:b3:f6:91:dc:77:c3:de:8f:29:88:16:da:
a8:1b:00:2b:a9:14:98:86:0f:10:16:00:2b:2e:31:
5e:3b:f7:d6:77:b8:9d:3d:56:0b:4d:16:92:3f:2c:
b8:ad:a4:29:03:a9:96:9b:e8:ca:cd:ef:c2:7e:7f:
ac:ca:e8:9b:b2:7a:61:e4:73:0f:8a:a7:72:eb:b3:
e2:9a:40:dd:b6:32:94:27:a6:c9:6c:06:12:01:8f:
e7:89:dc:55:3b:e7:fd:fa:79:c6:a9:6e:e4:bd:f6:
ba:a2:22:94:c2:c6:49:be:23:fa:a9:df:43:d2:88:
bf:07:9c:4d:09:dc:46:ab:08:de:59:0a:83:55:43:
1d:7c:75:6c:3a:d8:54:f3:7e:f4:07:cf:46:c4:9b:
c6:50:0a:6f:da:db:c6:be:13:d2:97:a9:fd:e8:9f:
64:76:64:a9:96:d5:b7:c8:f4:4d:82:66:31:7d:de:
db:64:84:3f:44:76:fa:2b:69:58:c8:59:77:f4:92:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:5C:45:18:85:BD:94:4F:54:34:46:D5:0E:F5:AA:00:BE:49:4B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MwpcRRiFvZRPVDRG1Q71qgC-SUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:21:47:92:57:78:5b:95:ca:d9:ec:f9:2c:dd:39:1f:1d:57:
8a:19:7a:4e:ad:05:60:97:61:fb:48:41:2f:bc:45:ec:18:52:
3a:3d:53:d7:4f:74:d0:df:b5:3d:23:9e:c6:ea:3e:99:a6:fd:
85:e5:88:7f:d0:21:c3:99:74:5d:45:0d:f2:e9:61:6a:51:f1:
ae:38:dc:f9:d9:d9:d7:ee:26:85:0c:df:40:00:87:19:ec:e3:
87:52:1b:b5:64:0a:42:68:b0:2b:e0:1c:05:0e:da:bc:3b:90:
6b:46:56:b1:75:30:e2:32:00:7b:d7:33:60:c7:7d:7e:a7:b4:
ab:18:95:70:cb:87:9d:7b:99:d0:42:04:aa:4a:3e:fe:bd:52:
51:77:0a:17:7e:da:21:25:1a:6e:fb:4d:7e:d1:4f:76:49:0c:
45:a1:f8:b7:41:28:5d:9d:e4:01:46:83:7b:6b:a2:72:9c:01:
51:d1:b5:87:83:d7:38:eb:72:9f:6d:77:c6:a4:ad:07:79:18:
48:9f:db:86:e8:37:81:c9:ea:89:73:04:ea:e9:5a:f1:40:e4:
cf:6e:33:e5:39:27:74:65:a2:2a:20:6b:a8:5d:df:9b:ed:86:
31:17:b8:4b:ae:93:e9:29:10:7f:a6:d5:87:a6:e5:df:6e:9c:
c3:a5:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:59 2025 by rpki-client