Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moNmBtAAD4uscrzxlQ8NCEeY4pg.roa
File: moNmBtAAD4uscrzxlQ8NCEeY4pg.roa (raw, json)
Hash identifier: NYZrGjdgUPeqiMA6W9ukaAoEAM5J7O3H2pAhJJUjpC8=
Subject key identifier: 9A:83:66:06:D0:00:0F:8B:AC:72:BC:F1:95:0F:0D:08:47:98:E2:98
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0A0AFDA41A18ED9948D08B550FB6759E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moNmBtAAD4uscrzxlQ8NCEeY4pg.roa
Signing time: Sun 26 Nov 2023 05:12:21 +0000
ROA not before: Sun 26 Nov 2023 05:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:0a:fd:a4:1a:18:ed:99:48:d0:8b:55:0f:b6:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 05:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a836606d0000f8bac72bcf1950f0d084798e298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:99:c3:e0:4f:08:e5:0c:a1:be:53:0b:ba:
3c:72:ed:ae:4c:5b:c8:b9:f0:16:9e:8a:e5:c8:8b:
99:06:6d:21:cf:fb:34:98:c8:4b:1d:ec:08:47:20:
52:9b:f0:af:6d:ee:22:7f:9d:f2:47:17:a7:18:03:
08:65:1e:63:65:b9:52:0f:d8:65:27:17:19:51:bd:
5f:57:ba:2e:b4:23:71:a3:51:d6:44:53:50:75:f0:
0f:0a:1c:52:cf:97:c3:32:2a:68:18:e1:b4:3e:67:
96:2e:b0:7b:44:46:d7:e1:14:90:d1:9b:23:e7:b0:
c6:82:e7:42:65:b7:4a:d7:5c:b2:fe:3e:93:05:49:
d2:62:e0:a1:0e:92:ce:a3:06:ed:09:0a:7f:06:f3:
3e:ce:2c:6a:03:6a:94:22:ea:08:cf:9a:6e:c0:71:
b2:31:08:dc:3a:83:f3:c6:91:8a:f0:f9:19:2a:67:
b9:86:98:25:02:53:f3:ee:39:00:bf:68:2c:d5:b1:
31:ad:f9:94:18:cc:b6:f3:a5:df:55:f1:65:3e:62:
20:af:13:85:fa:43:ba:43:93:31:f5:c0:6e:3d:9b:
69:97:38:89:3c:b6:55:cf:07:15:6d:02:b3:93:d2:
cd:51:65:f0:30:15:a1:40:3a:24:da:a4:98:58:47:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:66:06:D0:00:0F:8B:AC:72:BC:F1:95:0F:0D:08:47:98:E2:98
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moNmBtAAD4uscrzxlQ8NCEeY4pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:33:eb:09:80:1d:26:89:0c:1d:ca:4e:cf:b8:cb:a5:38:de:
0e:da:f0:94:41:2e:58:7d:d9:b6:53:e7:83:0a:34:51:d0:29:
f9:1b:97:d0:b6:13:fd:6d:ee:e0:42:38:b3:9c:de:5c:d2:8e:
ef:ad:56:2f:0a:f9:d1:a6:1e:90:79:f6:bf:d5:bc:f0:34:1f:
e1:69:65:46:0f:71:91:09:bb:26:50:90:1c:d4:d6:75:56:05:
82:b3:f1:1e:0e:0d:f5:03:3e:41:5e:29:87:d5:1e:ac:a7:a4:
33:84:3c:da:bd:7c:8a:9e:74:a1:5f:77:e2:b7:9a:b0:7c:e5:
d9:4b:49:5e:47:fe:0f:fc:95:3b:b9:01:82:74:7b:da:ef:8e:
d4:c6:cc:d6:1e:2a:ae:af:88:ae:8b:9a:8f:be:e2:c9:7e:33:
c1:ff:f6:22:bf:93:d9:b4:b3:09:fd:28:36:79:f3:1a:4c:17:
91:81:17:d1:5c:d3:6f:66:98:86:2a:3b:61:f2:b8:05:26:95:
5e:2b:97:68:8c:25:07:4b:4b:2b:7e:46:47:56:00:c2:27:fa:
0f:09:3e:5d:e8:94:12:8d:2b:15:7a:06:2e:a8:cd:59:08:1a:
2b:cf:1c:e8:21:09:e7:b2:4c:29:53:4b:67:e1:3a:88:d7:41:
19:7a:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:12:58 2025 by rpki-client