Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MRVk1iCZtJmaTBwZpadRRaFmi2s.roa
File: MRVk1iCZtJmaTBwZpadRRaFmi2s.roa (raw, json)
Hash identifier: aEBJHFB0mF3LZsrVvNl8A8PjWXVJAo3NoOp4cbcQrvk=
Subject key identifier: 31:15:64:D6:20:99:B4:99:9A:4C:1C:19:A5:A7:51:45:A1:66:8B:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0393B7164F4053B33C18F0A6C2E0DA7C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MRVk1iCZtJmaTBwZpadRRaFmi2s.roa
Signing time: Fri 24 Nov 2023 23:04:21 +0000
ROA not before: Fri 24 Nov 2023 23:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:393:692e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:03:93:b7:16:4f:40:53:b3:3c:18:f0:a6:c2:e0:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 23:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=311564d62099b4999a4c1c19a5a75145a1668b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:7e:c7:5b:5e:43:42:18:5c:56:70:e2:a3:
93:28:63:09:1d:07:17:d3:a8:57:f4:f1:b2:77:8b:
5b:27:b1:97:a6:2b:28:5a:28:b3:1b:48:2d:03:5c:
6f:72:64:a4:46:0b:d9:fc:d8:c7:9f:0a:4b:18:e2:
69:bc:e2:ca:04:66:0a:62:b6:e1:48:7e:5c:1a:93:
88:2d:cd:92:da:6d:d0:b7:93:70:54:91:9d:79:da:
c1:0b:c7:1e:85:1d:f9:f3:45:00:35:06:e1:05:6b:
20:0a:60:cd:ca:d1:82:41:23:38:07:53:cd:da:a7:
98:d7:0a:3c:85:4d:2a:ed:ac:51:00:a8:86:93:5b:
65:04:3c:f4:08:48:1d:b8:83:c3:e2:ff:52:f5:45:
ce:97:a1:2f:b2:03:4c:bb:55:67:71:9d:d0:d5:3e:
e9:e6:51:93:d7:87:09:9e:00:17:3e:d5:ee:f9:a0:
0f:b5:85:45:a0:e1:6f:2a:9c:72:64:97:c5:4e:ad:
7e:1d:66:1d:3d:4e:3f:4f:f1:3b:cb:db:ee:58:fd:
4e:46:70:38:25:e8:8b:11:9f:f4:92:10:e4:7f:1a:
97:1d:d5:24:68:a1:95:81:ac:7e:d4:3e:18:7c:12:
6e:a0:b2:77:54:1f:aa:4a:26:2d:1a:72:59:e9:53:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:15:64:D6:20:99:B4:99:9A:4C:1C:19:A5:A7:51:45:A1:66:8B:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MRVk1iCZtJmaTBwZpadRRaFmi2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:39:b6:82:d1:c3:2c:16:a8:f7:d7:17:05:c4:e2:c8:50:12:
1e:0a:7b:f3:1e:76:55:21:37:d5:02:b6:68:54:de:93:73:40:
24:a6:37:e5:5f:e3:07:69:d2:77:9c:52:77:6c:70:4c:df:ce:
6d:82:51:a7:44:1a:32:53:b2:05:3d:ac:3c:88:b9:e8:26:40:
1c:80:bc:8d:0e:48:2e:41:96:7c:4a:88:9c:64:b7:c8:4d:02:
0e:85:9d:7c:b8:49:16:c3:65:e8:58:a1:d0:5a:3c:a6:3f:f6:
3a:05:0d:ce:9a:59:9d:9d:41:63:32:86:c4:f6:e7:89:2a:2c:
b7:1c:c4:18:d8:eb:0b:93:10:e6:03:a7:aa:19:ae:45:3d:8b:
ae:65:76:34:26:cb:60:e9:65:ce:dc:76:fd:48:13:a6:ab:f7:
74:40:7b:00:51:07:61:32:3a:a4:d8:b8:45:27:f0:bb:03:ca:
5d:6a:70:bd:a3:7e:b5:85:f2:3d:17:2a:dd:91:38:92:a2:02:
84:ce:5d:b0:b6:66:0a:75:af:81:6f:41:3e:d0:cb:e2:a3:88:
8a:df:c6:93:31:97:a7:e8:7b:5e:56:12:e2:cc:d4:77:c1:08:
26:ba:5d:3c:85:ff:f3:52:a2:32:84:6a:9c:32:34:0e:03:82:
eb:e6:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:38:47 2025 by rpki-client