Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mPR4KQc3mGPIaIqQRs8-ZDRYL4Y.roa
File: mPR4KQc3mGPIaIqQRs8-ZDRYL4Y.roa (raw, json)
Hash identifier: y5+vRdTG1vyPV1XGLTAdgGgio3YuLKcv/1S5gNsaZLY=
Subject key identifier: 98:F4:78:29:07:37:98:63:C8:68:8A:90:46:CF:3E:64:34:58:2F:86
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6A9CB2344F8AFB0B4EE9A0A1B7B69FDC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mPR4KQc3mGPIaIqQRs8-ZDRYL4Y.roa
Signing time: Thu 26 Oct 2023 06:12:15 +0000
ROA not before: Thu 26 Oct 2023 06:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:9c:b2:34:4f:8a:fb:0b:4e:e9:a0:a1:b7:b6:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 06:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98f4782907379863c8688a9046cf3e6434582f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:63:08:b4:7e:98:1b:b7:d1:02:cb:46:7b:
4c:0d:39:25:3b:47:06:9a:b0:11:77:83:90:09:ee:
38:56:f4:49:36:4e:7d:3f:1a:2a:a6:c7:c0:d5:3c:
9f:9b:3f:5a:68:bc:92:c7:18:b5:b5:b0:5a:13:9a:
72:9a:06:79:19:07:74:50:29:26:c8:6c:ae:e4:6f:
a0:31:00:ca:e9:1e:9a:64:2d:0e:51:2d:1d:c0:3d:
77:6b:97:50:0c:c2:43:9b:41:4f:e0:d2:05:6d:65:
cc:5e:d9:f0:fa:b3:b8:e6:6c:df:8c:89:e3:f0:ef:
36:40:77:9e:15:c5:2c:68:f0:d2:28:c4:f4:a0:ff:
38:19:e9:71:9e:ee:6d:7a:7c:da:6f:4b:49:f8:45:
c8:d9:79:0e:35:7e:d0:40:a1:8a:e5:45:69:e5:9c:
a9:a2:5d:56:77:9b:c7:da:1d:f0:36:35:8e:27:36:
ab:36:57:27:53:77:b8:63:0a:95:f6:ea:02:9b:86:
ac:80:04:a5:11:11:83:3e:a0:53:8d:79:98:80:82:
5f:5d:2b:c5:85:d4:54:69:a1:34:52:e5:66:1e:20:
0f:5c:fd:1f:ba:d3:f9:26:61:bf:26:15:c0:6a:f0:
5e:f3:05:99:b2:39:e4:14:68:7e:f7:72:83:3b:28:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:78:29:07:37:98:63:C8:68:8A:90:46:CF:3E:64:34:58:2F:86
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mPR4KQc3mGPIaIqQRs8-ZDRYL4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:79:97:eb:ac:db:7a:ba:11:e9:e9:84:16:39:6a:a3:46:4a:
f7:98:6c:d3:4f:88:44:5d:ce:b5:27:4a:64:9a:61:8f:4d:f8:
ad:1e:a2:c7:03:91:e3:61:33:69:91:44:08:fb:f1:2e:80:93:
a1:79:c0:af:5a:91:b0:3b:1e:4d:88:32:1f:b5:69:56:a5:02:
b6:6e:6b:55:17:84:28:57:d5:09:32:2e:ff:60:1f:2a:eb:30:
6a:89:37:25:6d:57:ce:e0:72:e8:d6:97:f0:36:e1:de:58:63:
84:8c:20:f2:8b:49:9f:6b:8f:7d:a9:99:99:ab:cb:78:eb:fb:
f3:1b:76:ad:78:f0:c0:e3:83:82:30:45:13:15:60:36:92:ac:
15:59:18:26:d1:0c:f7:43:0e:25:2d:60:8d:75:94:f5:2f:f8:
bc:fc:96:22:e4:4a:6b:58:13:b3:62:2d:c7:df:0a:d0:0f:46:
f8:33:cd:ce:03:4e:34:45:07:4a:59:d2:10:b3:5c:dc:c8:5c:
19:6a:db:3c:44:93:31:4f:50:b3:26:f2:ba:9a:dc:58:87:26:
59:69:0b:56:56:7d:03:6b:3c:d3:7d:c1:0e:eb:96:da:5f:f3:
69:69:23:d3:d0:e4:7c:ac:ad:e9:a7:59:b2:3c:97:09:cf:e9:
d5:5d:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:50:51 2025 by rpki-client