Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLUuQwX6AA2yK0yo8o3QO6qQjWo.roa
File: mLUuQwX6AA2yK0yo8o3QO6qQjWo.roa (raw, json)
Hash identifier: Yy7GGyjTV0snHKrqsXa6hOjtUzUnCagkBDZhF/wthhA=
Subject key identifier: 98:B5:2E:43:05:FA:00:0D:B2:2B:4C:A8:F2:8D:D0:3B:AA:90:8D:6A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C837EFABBEB2C6C46F4628EE386461063
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLUuQwX6AA2yK0yo8o3QO6qQjWo.roa
Signing time: Tue 19 Dec 2023 19:13:06 +0000
ROA not before: Tue 19 Dec 2023 19:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:7e:fa:bb:eb:2c:6c:46:f4:62:8e:e3:86:46:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 19 19:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98b52e4305fa000db22b4ca8f28dd03baa908d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:de:96:91:ef:73:89:ef:26:3a:d9:86:fd:
a6:90:f5:07:15:6b:9b:15:53:90:4b:97:17:bb:8c:
8f:9f:be:58:a3:d1:7f:ac:05:d9:fd:7a:af:6d:ff:
02:aa:53:78:ef:70:77:e0:63:0f:2d:c5:78:41:98:
9f:9f:31:79:da:bd:8f:99:5e:70:b6:21:45:72:3c:
01:41:d7:19:47:cc:ea:82:06:7e:fe:bd:be:0a:f9:
8f:09:b8:94:72:46:6f:51:4f:65:cb:83:c7:47:d3:
76:4c:71:b5:55:cc:e6:5e:de:bc:33:2b:fd:91:00:
fb:5e:80:8b:ed:92:7f:14:15:53:51:23:c0:88:ab:
a2:32:01:60:d9:b3:5e:0e:fb:ad:19:9d:2f:0c:e2:
4e:7c:70:d3:ca:e6:6f:a6:61:91:67:cf:ba:ba:a3:
84:7f:28:e9:c8:d1:c0:60:d5:ea:91:ce:be:cf:7a:
68:d3:27:dc:7a:1e:ef:ba:f5:41:7b:18:e4:65:4b:
58:83:b1:42:93:35:21:b8:90:eb:1f:bd:fb:24:5f:
a8:20:d3:3b:15:7d:e5:09:b7:19:59:f3:9d:1c:26:
75:ba:6e:c7:29:cf:c6:e0:54:08:90:7a:88:2f:d5:
63:8a:02:c7:c2:a3:16:dd:9d:86:8a:69:91:01:43:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:2E:43:05:FA:00:0D:B2:2B:4C:A8:F2:8D:D0:3B:AA:90:8D:6A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLUuQwX6AA2yK0yo8o3QO6qQjWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:b0:c3:87:94:fc:ee:12:5b:8d:43:84:c3:0c:4c:05:b6:64:
8f:b4:80:e7:3d:24:63:17:f4:5e:e2:be:54:c1:ca:be:4b:ca:
33:80:2f:af:70:9b:d4:57:76:2a:45:d1:c5:db:56:6d:60:1f:
b2:1e:f1:8d:05:75:c0:2c:64:6a:c2:20:fa:84:68:20:f7:7d:
9b:e9:67:95:80:0c:c9:25:de:5d:49:56:46:f1:57:eb:00:4b:
30:35:3c:55:3d:be:2a:c5:26:c9:9f:0a:35:ed:bb:48:a0:d0:
cb:6d:97:f5:71:fb:08:2d:98:a5:d2:70:ce:b2:64:4d:e6:95:
33:21:6c:9e:d7:71:10:d3:e0:92:cf:49:9a:58:8d:19:05:c4:
16:ad:b6:24:c7:0c:f6:a0:d1:87:d5:ee:94:7b:8e:de:88:ad:
46:7c:95:21:f1:6c:13:64:4c:5c:6d:34:74:7a:d6:ac:6d:e8:
a4:bf:5f:aa:66:14:c1:2a:31:3e:b8:a6:9f:0d:78:81:85:21:
36:1d:38:39:a3:41:c7:17:21:52:36:76:8e:8e:7c:56:56:38:
ea:18:be:7f:4a:59:57:49:45:b0:f3:e9:b5:c9:aa:07:c2:3b:
c4:36:69:1f:3a:54:79:89:41:5e:4d:6e:cb:d5:0a:29:0f:d6:
13:e8:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:23:05 2025 by rpki-client