Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLpMfGkXwGOrugrc07cB6Vvqcp8.roa
File: mLpMfGkXwGOrugrc07cB6Vvqcp8.roa (raw, json)
Hash identifier: 3I0Is1XQ9uZmQWQ0rWTtTIqxAPYSUh0YMWycQHqxQGA=
Subject key identifier: 98:BA:4C:7C:69:17:C0:63:AB:BA:0A:DC:D3:B7:01:E9:5B:EA:72:9F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF8E4E0201C3BB43FD796532075F73440
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLpMfGkXwGOrugrc07cB6Vvqcp8.roa
Signing time: Wed 04 Oct 2023 04:14:23 +0000
ROA not before: Wed 04 Oct 2023 04:14:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:e4:e0:20:1c:3b:b4:3f:d7:96:53:20:75:f7:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 4 04:14:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98ba4c7c6917c063abba0adcd3b701e95bea729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:11:dd:e6:b7:50:bb:c9:e8:1b:94:f2:41:
7a:b2:ae:e1:19:61:19:ae:b2:2b:ad:28:e3:d6:1f:
c2:93:98:0b:a9:ef:84:01:2a:9f:2a:4c:e1:f1:6d:
b6:c0:70:3b:cf:96:4f:47:31:cb:a1:5a:d9:b5:cb:
28:ae:17:ca:90:75:dd:19:96:1e:06:c8:17:9b:09:
8b:b4:a6:3f:46:3c:1a:28:6f:fe:c3:9f:3f:8a:ca:
27:f0:49:7f:63:a3:c7:11:8f:8c:f4:c0:e4:56:74:
ca:d5:a9:db:e4:36:7d:48:3a:ed:06:53:82:03:6d:
16:e0:1e:af:ce:86:88:6d:81:81:28:e6:b4:b3:6a:
51:a1:d9:ba:6d:8b:3d:18:55:28:aa:f3:8b:95:b4:
b3:f3:b5:b1:b1:0c:e4:fa:80:e8:aa:c1:dd:95:17:
7d:c8:ee:80:04:ed:a8:1e:31:84:15:74:55:a0:8c:
9a:33:9c:7c:de:f3:58:56:78:4e:0f:c9:78:24:e8:
a9:53:51:96:8f:9e:56:3f:e4:1c:26:c5:51:a9:8d:
0c:e9:7e:19:89:22:11:bf:aa:84:13:8e:dd:8c:3f:
79:f9:4e:a0:02:f1:85:27:47:8c:5b:4e:5a:2d:04:
11:54:fe:10:a3:29:47:bb:bd:2b:f6:3d:56:56:fa:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:4C:7C:69:17:C0:63:AB:BA:0A:DC:D3:B7:01:E9:5B:EA:72:9F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLpMfGkXwGOrugrc07cB6Vvqcp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:91:6c:bf:92:20:75:17:aa:2a:ef:3e:3a:a0:6d:71:22:2b:
51:e1:31:2c:c2:fe:5a:64:ff:5b:9f:13:dd:30:16:6e:b8:30:
e2:00:0a:0b:cd:04:eb:c7:a2:24:27:90:46:dc:83:d1:f6:ba:
af:00:22:a7:79:9b:6d:1f:ba:c6:d4:16:fa:41:6f:c1:b8:eb:
10:f8:6a:a9:60:cc:ca:bd:d1:76:bc:ec:10:f1:e9:0d:9c:f2:
f7:bb:a6:94:7b:70:92:95:18:8e:b7:26:cd:5b:9a:ab:9b:f3:
85:59:90:7c:33:6f:72:14:2d:7a:b3:79:88:e2:fa:9c:a5:93:
37:fc:77:b2:6d:d5:83:ba:4c:ff:49:a3:64:40:dc:c6:82:93:
ca:5c:f8:ba:06:c9:c1:35:b2:c7:29:f0:1e:42:53:4f:a4:89:
48:9e:fc:f8:76:aa:b1:9b:8f:ec:cc:92:2c:5e:73:ab:8e:cc:
c2:89:84:6b:50:3a:36:8c:80:0a:99:51:07:56:8c:6a:05:0f:
32:18:60:cb:fb:6e:63:64:50:64:ba:fd:51:95:64:f0:51:21:
11:d4:ca:8e:a0:08:4c:7c:c8:68:fb:34:aa:38:47:68:e0:fd:
c2:63:25:80:00:5b:65:b1:91:4a:55:d2:f3:c0:4c:16:1a:ec:
4a:34:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:58 2025 by rpki-client