Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mV9YR-sbbXdcB9JGu3ubGGmHGjM.roa
File: mV9YR-sbbXdcB9JGu3ubGGmHGjM.roa (raw, json)
Hash identifier: zVL3CICFM2XJV7SCPDhSyYL1gJHkAyoN7IMfiGNbJkk=
Subject key identifier: 99:5F:58:47:EB:1B:6D:77:5C:07:D2:46:BB:7B:9B:18:69:87:1A:33
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B3C452610EC8B0556D4F47A752E2ED1EF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mV9YR-sbbXdcB9JGu3ubGGmHGjM.roa
Signing time: Tue 17 Oct 2023 06:14:06 +0000
ROA not before: Tue 17 Oct 2023 06:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:45:26:10:ec:8b:05:56:d4:f4:7a:75:2e:2e:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 17 06:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995f5847eb1b6d775c07d246bb7b9b1869871a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:25:50:4a:76:dd:97:90:d0:4d:80:31:a7:
b4:bc:2b:15:e5:27:ee:bf:91:8a:2a:63:c5:3e:90:
83:b9:a3:ce:64:c7:71:d5:0b:e1:98:5b:98:34:26:
76:c3:f9:a5:f6:ef:0a:bf:02:30:dc:03:37:55:8f:
57:83:5e:8c:98:8b:a6:8e:7f:52:de:76:b3:76:cd:
0b:0d:61:44:56:ce:9a:fd:68:f9:46:a4:f9:59:ea:
92:9b:c8:3a:ee:d8:06:ed:9f:a4:f9:e5:38:23:04:
dc:1f:b2:a6:84:2a:37:3c:2b:f9:ee:27:42:16:9c:
93:8d:ef:16:5e:f0:9e:76:93:30:a8:8a:59:d3:03:
5f:bf:48:b6:e9:98:ed:d6:25:8c:3d:bb:d5:ed:a2:
00:b7:4c:68:30:39:8a:08:d6:51:f1:2d:3d:b2:d5:
39:36:30:ba:ae:9e:51:82:8e:e5:6f:57:98:b9:20:
aa:38:c5:29:b2:55:b2:c4:b5:fb:85:87:21:14:a5:
32:15:57:97:79:de:ec:a5:3a:6c:c2:1a:ee:06:21:
5a:85:c2:1d:28:10:e8:02:1b:38:7b:97:54:29:c9:
d5:26:0b:5e:c0:83:53:49:c3:9f:13:e0:33:98:63:
92:7b:74:44:39:9d:de:d2:5c:03:bc:4c:00:1b:b6:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:58:47:EB:1B:6D:77:5C:07:D2:46:BB:7B:9B:18:69:87:1A:33
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mV9YR-sbbXdcB9JGu3ubGGmHGjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:ca:29:5b:00:a0:5e:73:d7:6e:6e:b1:2d:ea:9b:65:29:8d:
43:33:bc:16:49:9c:fe:e9:c8:02:a8:bc:bb:77:7c:72:d9:06:
aa:60:f4:0a:3d:44:9d:bf:b9:60:73:63:c4:d8:d3:ed:64:c8:
6a:b6:ae:55:8f:90:3a:f5:fd:08:80:d8:b7:2f:72:6f:72:38:
c3:ab:2d:a0:c9:6a:99:cc:d8:27:1b:40:ea:84:a6:ce:0d:90:
df:26:62:9f:9f:48:89:db:6f:a1:39:b8:4c:68:30:4c:a1:19:
ef:91:5d:99:0f:a5:d8:67:45:a2:91:1a:01:72:85:d2:de:a6:
e8:c9:5e:24:5e:cc:8e:09:27:d6:7d:5a:ac:47:f3:7d:58:82:
08:c7:61:7e:8a:f2:a2:a9:a1:40:20:5f:ac:26:a0:28:b7:67:
6c:02:97:50:29:bc:69:57:66:5c:42:5f:58:e5:00:a8:1f:1b:
5f:c8:3d:e7:fe:b9:44:42:40:59:a5:f6:f9:48:35:84:b5:49:
7b:06:04:76:1c:11:31:7d:a3:d5:09:32:43:4d:60:9a:81:27:
0b:f8:f2:6a:74:f0:11:54:85:5d:c6:fe:f6:d1:ac:3c:14:3e:
7b:e3:c9:5e:1a:2f:53:63:6d:d7:e6:a1:08:06:40:25:f3:e3:
3e:4a:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:34 2025 by rpki-client