Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxKf4e8C4Geg21HPA2aELygdVmI.roa
File: MxKf4e8C4Geg21HPA2aELygdVmI.roa (raw, json)
Hash identifier: eFlP2fLmgYj4yTmgDacfHUg7n41LNaqClkDxllJ16EA=
Subject key identifier: 33:12:9F:E1:EF:02:E0:67:A0:DB:51:CF:03:66:84:2F:28:1D:56:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF07BB6FE073BE676B5FFD4B41CFCCA9A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxKf4e8C4Geg21HPA2aELygdVmI.roa
Signing time: Tue 21 Nov 2023 06:05:21 +0000
ROA not before: Tue 21 Nov 2023 06:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:f07b:690/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:7b:b6:fe:07:3b:e6:76:b5:ff:d4:b4:1c:fc:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 06:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33129fe1ef02e067a0db51cf0366842f281d5662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:ce:fd:87:8f:6f:08:a6:db:68:d6:70:74:
b5:59:f5:40:10:d9:1b:f3:64:5c:21:ce:af:65:ba:
48:62:f3:05:ff:a4:69:f6:6b:7a:6f:39:90:38:65:
50:c6:13:78:f8:60:ed:60:7e:1b:4b:36:de:7f:bf:
7c:d7:b4:67:95:a8:64:9d:ec:27:d9:dd:9b:9f:26:
a6:e0:36:34:cd:03:f1:33:6b:c3:ff:cb:b5:f9:fd:
08:99:38:87:98:4a:59:8f:0c:71:d1:57:ca:cb:6c:
fe:dd:4f:4e:ca:db:81:31:5a:83:47:94:53:8c:fe:
98:cd:99:92:83:fc:4a:3b:70:0f:34:58:99:0c:7a:
13:bb:a3:5a:ac:65:ef:47:4b:68:4e:bb:17:db:10:
66:46:f6:b0:bf:09:ca:47:31:fa:95:a1:b9:fb:50:
a5:5a:12:9e:34:d1:96:b1:e4:88:38:00:29:48:dc:
90:40:7c:89:9e:a2:ff:53:6b:98:e5:00:53:bd:8f:
13:bf:05:c4:53:89:bf:1b:b7:64:7c:f2:a3:35:8f:
d5:ad:99:ac:fd:df:b9:f3:e7:40:00:5c:81:39:06:
9c:0f:c6:ad:6b:9d:04:4b:f7:63:89:a5:d6:68:b4:
9c:32:a7:d6:f3:34:3b:24:96:73:f3:45:88:bf:e3:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:9F:E1:EF:02:E0:67:A0:DB:51:CF:03:66:84:2F:28:1D:56:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MxKf4e8C4Geg21HPA2aELygdVmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c6:70:92:47:40:90:94:b3:32:73:6d:84:0f:0d:6f:e0:5a:63:
14:29:54:f8:fc:33:3a:94:c2:37:c9:56:bc:c6:35:40:3a:98:
63:c4:f6:4a:76:93:72:a0:d4:f6:f7:20:69:2e:97:48:d6:70:
0d:6e:01:75:18:6b:4a:32:d0:67:2c:a6:d9:1c:4b:c2:f1:d0:
d9:30:22:9d:48:41:6a:59:72:78:a3:e2:07:1a:17:13:4a:fa:
e0:64:30:ec:43:10:82:e4:0b:f6:06:2c:e3:d1:09:7b:67:06:
ef:c9:a9:a8:df:d1:31:4f:99:d8:0f:0b:29:d9:63:41:16:1e:
9e:83:0b:94:5e:8b:88:fb:2e:8f:dd:98:fb:39:55:a5:d9:a2:
f3:a6:1d:32:66:51:d6:08:f6:05:97:be:8a:c3:ad:7c:21:87:
80:0b:b2:02:73:a1:d5:8a:61:72:0b:a3:46:8a:6c:42:84:af:
fc:88:75:cf:41:e5:f4:62:9b:35:fc:7d:62:80:1f:ab:32:37:
c1:b3:65:a7:5a:74:77:c0:2f:7f:57:c5:83:0c:b7:88:11:ff:
3c:f6:c6:64:a8:c0:3b:a6:d0:86:77:93:da:34:9d:97:ea:0e:
0b:6c:4d:97:ee:67:0a:79:d3:98:6a:4d:6a:40:6b:d7:14:7e:
1b:f7:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:34 2025 by rpki-client