Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M-MtDHoPo8ckwVZxo9Q436DoSAo.roa
File: M-MtDHoPo8ckwVZxo9Q436DoSAo.roa (raw, json)
Hash identifier: hcQQcBL3ANxR1El/pP59etVy47vIwcaKzoNAk8SjvoI=
Subject key identifier: 33:E3:2D:0C:7A:0F:A3:C7:24:C1:56:71:A3:D4:38:DF:A0:E8:48:0A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B935B4C3C1D97B701C1511ADF9C4074DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M-MtDHoPo8ckwVZxo9Q436DoSAo.roa
Signing time: Fri 03 Nov 2023 04:05:15 +0000
ROA not before: Fri 03 Nov 2023 04:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:935a:a7cc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:5b:4c:3c:1d:97:b7:01:c1:51:1a:df:9c:40:74:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 04:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e32d0c7a0fa3c724c15671a3d438dfa0e8480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0e:00:b1:a9:da:c5:a7:a9:f1:5a:89:1d:0f:
fd:88:4c:e7:28:95:ef:32:e3:18:5f:9b:67:f3:2c:
1d:ee:b4:79:3f:da:2e:09:7a:8e:27:f3:6e:ff:ae:
bd:5f:02:fb:01:a6:bf:5f:04:5c:ce:34:66:38:05:
ad:6c:98:95:0b:ed:51:a4:8a:80:11:90:e8:72:67:
f0:57:52:52:80:2b:87:77:cf:fa:2d:7a:af:39:41:
f5:74:a3:f8:a9:1f:eb:fc:21:92:36:5b:17:28:c8:
83:32:e9:32:f4:05:cd:46:5a:fe:6e:57:a9:ba:11:
8a:9d:21:8d:83:99:c6:be:04:67:ca:6e:d9:16:ff:
04:db:19:57:95:44:6b:68:32:de:bb:09:4e:2e:4b:
7e:6d:90:01:ec:c6:a1:25:94:22:23:5e:aa:1b:3b:
85:b4:d8:81:57:30:78:5b:aa:c2:d6:81:03:7c:86:
cb:77:65:37:28:df:74:88:07:66:96:fa:86:64:e9:
ed:8a:f3:e4:16:94:af:82:07:83:93:2c:cf:50:61:
74:6c:60:5f:00:fe:ca:08:cc:a6:f3:28:85:45:20:
11:4f:da:ef:b4:aa:db:a3:c3:5c:1b:d7:86:8e:24:
4a:1b:b3:c3:ed:04:10:c3:61:4d:9f:9e:e0:fa:81:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:2D:0C:7A:0F:A3:C7:24:C1:56:71:A3:D4:38:DF:A0:E8:48:0A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/M-MtDHoPo8ckwVZxo9Q436DoSAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:84:58:5e:8d:07:4b:5e:98:49:da:a7:fa:65:11:db:82:85:
90:78:54:8d:cb:a3:67:06:33:0f:48:9b:32:0c:28:97:30:1b:
98:c8:3b:b1:9e:ba:33:e1:c9:4e:c9:3f:c3:0c:c0:b4:4f:cf:
3e:80:99:0a:e6:60:9a:9a:28:f8:48:d0:f2:e4:81:ef:8c:1d:
5f:93:5f:31:e1:e4:b3:b4:8d:52:22:ce:79:f3:48:8d:a5:a7:
48:69:8f:db:20:c1:71:f8:d3:bb:f3:22:7c:4d:0b:be:f2:ae:
76:1b:b2:cc:85:ea:bc:17:fe:21:f9:b0:61:62:e0:e9:31:e9:
03:10:a9:63:ce:bd:45:bb:15:22:23:f2:6c:a8:a1:3f:b8:a1:
b2:d3:d4:c3:2e:9a:2b:2c:33:d9:45:4c:92:e1:9a:e7:de:c8:
c0:ec:9c:f6:89:d5:cc:50:ca:e4:82:ff:17:0d:cc:eb:6b:10:
9a:b6:6d:45:69:93:11:80:cb:97:dd:b1:b3:95:fb:b6:72:75:
3d:5b:57:be:e8:0c:d1:6d:d0:1f:b5:f0:b6:ff:be:de:62:18:
ef:e6:6d:62:9d:af:0e:69:5b:2d:b4:98:08:7c:4a:d2:01:7d:
cc:e0:de:77:fb:6b:4c:84:e7:d7:2a:40:86:c3:7f:82:1c:47:
78:20:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:56:32 2025 by rpki-client