Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mRGKkcB3ttQL-Ah3X04XdLXc-io.roa
File: mRGKkcB3ttQL-Ah3X04XdLXc-io.roa (raw, json)
Hash identifier: cjc+8kAjc1TohYByQUbMClp55fnQgkPTHWDjXYsO8b8=
Subject key identifier: 99:11:8A:91:C0:77:B6:D4:0B:F8:08:77:5F:4E:17:74:B5:DC:FA:2A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0D11ABD60A4680DC3464EEA964101712
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mRGKkcB3ttQL-Ah3X04XdLXc-io.roa
Signing time: Sun 08 Oct 2023 02:15:43 +0000
ROA not before: Sun 08 Oct 2023 02:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0d:11:ab:d6:0a:46:80:dc:34:64:ee:a9:64:10:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 02:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99118a91c077b6d40bf808775f4e1774b5dcfa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:28:ff:cc:79:2d:be:4f:33:11:85:67:0b:
fd:bb:17:bc:90:10:85:a8:c5:c9:bd:94:b0:82:2a:
b3:70:64:40:10:b1:24:b4:b9:4d:e7:22:ed:b9:5f:
70:eb:ce:a9:ca:47:f2:43:be:a8:98:76:a3:d9:3a:
34:74:5c:e3:2a:81:22:e4:42:1c:4a:18:0a:2c:75:
97:0f:67:20:47:22:97:f4:91:9b:c4:81:8c:1a:85:
5d:60:5f:d1:06:a2:40:46:72:06:e6:87:68:bf:ea:
80:45:7d:f8:a8:33:4c:43:cf:07:e7:3b:c6:9d:ca:
72:e3:d7:2a:db:71:e1:6a:02:7e:db:ea:ef:e8:f6:
5f:b4:e9:fc:3a:0f:a8:9c:6c:cf:06:12:18:de:35:
a4:d0:35:e4:3e:fe:33:17:83:77:2a:6f:43:02:0d:
51:a4:a9:f7:c2:7e:dd:db:ae:e2:e8:62:09:a2:15:
5a:a7:33:4f:54:d1:1d:99:94:25:85:2d:4e:ff:18:
fa:6e:0e:3f:38:6f:38:65:19:fb:95:27:2d:9b:da:
71:7b:a0:c7:f5:a5:79:b1:e0:f1:28:db:8c:d6:ea:
e7:11:19:3a:f3:72:d4:23:8a:5c:db:70:01:4a:a6:
d6:78:66:e7:51:fd:3a:7f:d4:bb:4f:cc:8a:9e:6d:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:8A:91:C0:77:B6:D4:0B:F8:08:77:5F:4E:17:74:B5:DC:FA:2A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mRGKkcB3ttQL-Ah3X04XdLXc-io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:41:f4:ad:ea:0a:96:67:89:a1:ed:f8:7c:f8:24:3c:48:30:
f4:1d:2b:33:38:af:54:34:b5:ab:a6:25:92:e4:be:f6:df:08:
5a:a9:22:a4:a7:44:d1:8d:cd:a2:ea:05:2e:0e:ed:a5:51:7a:
68:9d:f1:3c:4b:43:2b:80:93:1f:56:73:28:ce:15:50:0d:67:
ac:7f:48:cd:a6:b5:32:ae:72:59:6d:75:50:f9:be:03:ad:ae:
fe:16:70:70:b4:0e:5d:56:34:fc:38:64:6d:ed:aa:90:50:02:
96:c9:55:03:a0:ca:8c:7b:fc:a4:c5:84:3b:c3:08:c1:79:cd:
30:d2:0d:a3:63:24:3b:44:2e:7b:6d:f1:b0:81:27:8b:83:f7:
34:e1:ec:96:8f:b9:63:23:17:de:78:c4:e8:45:92:2d:e3:40:
bc:89:07:36:40:d8:7d:e1:b3:6f:80:8b:aa:ef:cd:e2:a5:d9:
8c:2e:3a:fb:79:ab:7d:ce:01:d5:b2:0e:30:73:b1:b2:32:c5:
27:42:10:13:6d:ec:8e:b4:a9:cf:b0:6d:b9:69:b0:1a:c5:40:
b4:f0:aa:ff:6d:59:01:f5:4c:6d:1a:c6:6b:35:34:89:5f:bd:
d3:84:0e:1f:a1:a8:72:0f:8a:2e:4c:5a:ab:3d:ac:a9:d4:7a:
fe:1b:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:25:14 2025 by rpki-client