Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moo0zAuNXa2-7ImiBQ25aSUV1ms.roa
File: moo0zAuNXa2-7ImiBQ25aSUV1ms.roa (raw, json)
Hash identifier: rzpEio2EN7VyQYbs2o9wYqBPnjBYUze+Sh3VFa+oFxA=
Subject key identifier: 9A:8A:34:CC:0B:8D:5D:AD:BE:EC:89:A2:05:0D:B9:69:25:15:D6:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C02C1261CE8153C762AFAF65EA5E40CCE
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moo0zAuNXa2-7ImiBQ25aSUV1ms.roa
Signing time: Fri 24 Nov 2023 19:14:21 +0000
ROA not before: Fri 24 Nov 2023 19:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:c1:26:1c:e8:15:3c:76:2a:fa:f6:5e:a5:e4:0c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 19:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a8a34cc0b8d5dadbeec89a2050db9692515d66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:aa:58:2a:7a:a1:d2:20:75:e2:ff:57:8d:
b2:18:86:a1:07:cb:a5:3f:cc:53:ce:81:b4:6d:d1:
fc:ea:95:8f:ff:94:d7:8a:ce:38:20:de:28:1e:0d:
97:7f:dd:4a:c3:9b:b5:ec:29:1e:4e:38:d8:e0:ed:
83:c2:04:53:2e:2e:00:c2:0b:7b:62:d3:5e:d0:a8:
ed:42:28:42:c0:15:77:c0:5e:bc:01:d8:4f:72:d7:
2f:50:c6:38:9a:74:d2:23:ed:c6:45:e3:b1:16:f6:
e6:65:30:d0:bc:02:02:b4:b0:7a:c2:5b:cf:17:ec:
65:8b:01:46:f8:81:81:fc:c7:e0:df:fe:86:d2:17:
03:0f:be:8e:a7:f2:27:4b:8f:1e:49:a9:ca:ca:37:
80:a9:2d:00:37:70:0f:d6:60:ff:11:89:63:51:20:
ed:cd:0e:b7:51:0e:a7:61:90:f2:2a:9d:b3:0a:1b:
07:ce:52:09:c4:17:54:48:88:28:b8:6b:7b:c0:ee:
f6:92:69:08:69:db:72:aa:b5:57:22:18:1c:91:35:
2d:a2:a8:61:f8:f8:41:6d:39:16:3a:08:1f:2d:6c:
29:0b:d8:f4:85:37:1d:b1:1a:32:0a:cd:34:9b:04:
a8:c9:07:4a:ec:0a:45:ce:c4:c1:71:da:20:59:de:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:34:CC:0B:8D:5D:AD:BE:EC:89:A2:05:0D:B9:69:25:15:D6:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/moo0zAuNXa2-7ImiBQ25aSUV1ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d2:13:0f:aa:53:5c:83:16:d7:fb:7c:e9:89:e1:cd:9a:20:
d7:97:dd:c8:3c:a1:33:1b:ac:bf:26:12:65:76:17:a6:2b:a3:
b7:3e:53:7f:f0:5e:e3:35:16:4e:63:43:e9:f7:85:6f:db:2e:
3c:d1:64:e4:e4:a9:33:f7:d0:4a:85:26:24:b7:d0:b2:2b:02:
71:1b:21:6c:73:a6:4a:fe:a8:88:13:7e:84:4e:c3:68:16:49:
ca:ba:24:69:7b:9b:46:e9:4c:0e:eb:3e:97:f0:c6:0b:a9:7a:
aa:21:0a:e9:25:7e:7a:6e:24:b4:e4:3a:ba:18:f6:d8:06:e9:
c9:be:33:ed:48:dd:22:c9:6a:2f:ba:98:cf:b9:8b:19:80:19:
14:42:5d:2d:c3:5b:ff:65:0a:91:3b:05:de:e6:53:9a:fc:5e:
77:b8:80:26:b7:a0:d2:64:81:40:04:96:94:41:32:d9:07:f9:
56:26:af:37:14:62:85:85:a3:4c:d4:5d:f0:c9:05:24:10:aa:
f0:7f:84:04:a5:03:29:80:43:86:f4:c7:ad:da:9f:a2:f2:31:
71:cd:1b:44:7d:af:35:31:8d:a8:3d:10:c0:7c:53:db:45:eb:
d7:9c:9e:25:3e:0c:5a:65:11:c1:d7:7c:86:63:c6:e4:ac:ac:
2f:13:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:27:10 2025 by rpki-client