Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mCbkF53eBPYeBdcLAFLK-FDTnO0.roa
File: mCbkF53eBPYeBdcLAFLK-FDTnO0.roa (raw, json)
Hash identifier: dSOiPdWjdbryCIvk2YU0j8D7u5LjQ5/fqhS7kkfrYUM=
Subject key identifier: 98:26:E4:17:9D:DE:04:F6:1E:05:D7:0B:00:52:CA:F8:50:D3:9C:ED
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C04E760870005626DCEA70EB4B69EB11D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mCbkF53eBPYeBdcLAFLK-FDTnO0.roa
Signing time: Sat 25 Nov 2023 05:15:21 +0000
ROA not before: Sat 25 Nov 2023 05:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:04:e7:60:87:00:05:62:6d:ce:a7:0e:b4:b6:9e:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 05:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9826e4179dde04f61e05d70b0052caf850d39ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:25:a9:19:b6:f8:e7:82:af:15:74:92:c5:
d7:f8:e3:d5:ce:32:2a:43:83:0f:69:4e:c2:ad:91:
3d:34:05:e4:cd:61:7b:6c:42:b9:c1:90:39:1f:9b:
10:cf:e8:a0:e5:b8:aa:9a:ff:91:ed:fa:9f:ec:cc:
be:3d:27:6d:d4:86:15:7c:87:14:67:4c:09:a7:11:
f2:31:14:7d:68:35:9a:b1:e7:d6:bd:07:1b:b6:14:
84:fc:9e:73:d9:2e:56:e9:a1:18:45:c7:ee:30:cb:
23:ee:49:05:f9:66:8b:9e:3a:da:fa:bd:48:82:df:
6d:b5:b8:29:26:8d:52:84:bd:3f:09:6f:30:d9:98:
e3:dd:26:36:15:27:46:41:90:45:9a:c5:66:45:d7:
57:d6:c8:1c:47:37:cd:f6:01:4f:bd:68:fe:87:44:
64:89:60:76:5a:c0:0e:fc:54:b9:24:0d:64:c5:d5:
18:1d:79:91:e5:d8:5a:bd:a1:2a:39:c6:cd:43:2d:
65:ca:37:9b:00:d3:b1:ef:91:53:03:0e:6b:4e:b7:
fc:65:56:31:1d:cf:d8:d1:48:7b:10:1a:11:4c:4d:
ea:bd:89:f2:7a:d2:ba:f5:92:a0:7f:ee:20:0b:ea:
44:7a:d8:20:a7:90:ce:f0:e2:ee:fb:1f:46:9e:23:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:E4:17:9D:DE:04:F6:1E:05:D7:0B:00:52:CA:F8:50:D3:9C:ED
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mCbkF53eBPYeBdcLAFLK-FDTnO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:26:b3:e5:ff:0b:7c:ec:68:11:d1:c5:20:94:18:a0:de:70:
93:7f:25:40:c3:de:55:b4:8d:5c:8d:f8:0f:30:3c:ea:df:0f:
cd:8c:fe:68:4f:f1:82:7c:9b:71:99:d0:f6:47:5e:a2:4a:3d:
28:71:ed:69:33:e0:3d:29:e2:1c:a8:e4:0a:ab:52:3d:81:be:
ea:0b:c0:e9:9d:1b:34:24:d1:8f:cb:c7:0b:32:fc:39:5f:c6:
5f:20:f5:e0:89:29:96:ad:cc:81:32:93:f1:55:d9:2c:6f:48:
cf:46:66:94:c4:f0:16:1b:aa:76:4c:40:7e:80:13:f1:e3:94:
a6:09:55:01:1b:3a:4b:5d:7b:ff:e4:8a:2a:d0:dc:b9:36:68:
45:ff:38:29:c7:02:7c:c5:da:93:dd:92:6b:0d:7e:67:dc:4e:
5c:a1:6b:7f:94:b6:c5:28:65:34:84:21:e5:3c:43:d6:bf:fb:
a8:59:24:5b:c8:14:d9:9e:08:47:a5:3f:31:59:36:80:ab:b3:
21:fa:03:cc:01:c8:3a:6d:82:6e:ac:ae:81:fc:51:13:fc:c2:
c1:6a:d3:c7:d5:c3:55:7f:b2:19:27:50:d1:57:20:92:97:b5:
83:a0:b4:5c:df:bc:ab:87:72:fe:c4:cf:d1:a3:72:df:a5:95:
f0:2c:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:59 2025 by rpki-client