Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLzRXM17FFlzPn5kz8K3wLbarzY.roa
File: mLzRXM17FFlzPn5kz8K3wLbarzY.roa (raw, json)
Hash identifier: ZtShd1BVf+nOr9AjoMQSgLV/gAh1Lpk4VgC/IOHocOc=
Subject key identifier: 98:BC:D1:5C:CD:7B:14:59:73:3E:7E:64:CF:C2:B7:C0:B6:DA:AF:36
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8E39848897AFE6233251A05FC8834402
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLzRXM17FFlzPn5kz8K3wLbarzY.roa
Signing time: Thu 02 Nov 2023 04:10:16 +0000
ROA not before: Thu 02 Nov 2023 04:10:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:39:84:88:97:af:e6:23:32:51:a0:5f:c8:83:44:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 2 04:10:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98bcd15ccd7b1459733e7e64cfc2b7c0b6daaf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:9b:fc:bd:43:6e:ac:d0:56:69:1d:c6:f7:
b6:48:40:05:0d:ff:33:42:49:b9:91:34:74:cf:32:
9b:6b:1c:05:38:df:8e:4c:cd:3c:21:7d:b1:59:b0:
3f:33:5d:67:20:21:a1:ae:10:0b:0f:67:7d:b5:99:
97:3d:ce:c3:90:19:43:91:7f:e4:4a:b1:67:24:a7:
48:d1:f5:64:5d:93:a8:7b:7a:f9:eb:8b:ab:98:96:
12:d8:c6:67:3a:74:a7:73:e9:d5:84:a7:0f:ae:2f:
b4:8b:b0:31:99:28:32:85:04:a3:86:4a:e7:08:b5:
44:62:be:38:01:d7:e2:9b:5e:00:36:f5:68:11:bd:
7c:41:f0:ae:1d:77:3f:80:ff:7b:d1:97:72:55:f3:
aa:91:7a:d5:00:f7:34:33:8e:d7:0c:8b:8c:76:24:
19:23:2c:18:ce:ff:20:6c:9f:b7:f1:c3:dc:42:98:
25:53:db:2f:39:fd:93:27:13:0a:24:83:c2:ac:94:
e1:a8:1d:25:7e:af:29:7f:03:cf:4f:eb:fa:75:d3:
fe:84:48:01:1b:e0:a0:d3:f1:f7:e1:1a:cf:f8:7f:
fe:ea:ef:bf:0c:42:4f:71:dc:0c:e1:c3:b7:bf:6c:
50:84:1b:ac:b8:60:f6:72:c6:f5:32:d1:cd:96:98:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:D1:5C:CD:7B:14:59:73:3E:7E:64:CF:C2:B7:C0:B6:DA:AF:36
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mLzRXM17FFlzPn5kz8K3wLbarzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:76:b6:29:0e:d6:a8:26:d4:7b:ee:5f:8f:f0:6c:10:60:72:
ec:1f:eb:12:77:e3:6c:5d:b2:25:53:f2:4a:15:98:c8:d7:2a:
7c:6b:5d:ee:50:11:88:fb:20:0c:75:1e:57:22:a2:47:6e:f1:
40:8a:c2:fd:59:73:26:0f:84:87:ee:19:7b:db:df:63:76:cf:
ab:52:e1:f8:e2:12:7b:ea:e5:a8:02:c1:21:19:b1:e6:82:01:
06:44:c4:e4:dc:af:73:50:f5:26:b3:ff:51:db:58:3b:2d:1b:
e6:8f:ad:cc:6f:4d:7a:3f:0c:9b:03:6b:8b:60:a5:f0:9c:94:
3c:19:44:d1:56:50:84:63:d4:44:45:23:01:80:55:4a:f9:09:
76:71:02:ac:71:cf:fe:2e:11:8e:96:37:7e:f0:d9:b3:1f:3e:
b6:71:ae:46:54:6c:6c:01:24:75:3d:24:3d:fc:7a:d5:61:58:
60:b1:72:2d:21:e8:d9:91:9e:6a:48:d6:78:49:6d:70:63:f5:
ac:c4:14:17:5a:0c:a2:b1:d0:eb:c6:e3:51:19:02:ee:bd:ee:
58:28:3c:03:32:8f:ef:b7:8a:7f:9e:a2:4f:40:fe:b4:6b:ab:
61:f3:a1:0b:2a:d7:a3:32:88:4c:0a:21:44:28:93:3a:b7:3e:
5c:55:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:07:16 2025 by rpki-client