Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MSZ0Q8RRX0OeC_k3UNqDtfNrBpA.roa
File: MSZ0Q8RRX0OeC_k3UNqDtfNrBpA.roa (raw, json)
Hash identifier: I7zDRR7Z/pDSCeTuwRyp1uTCVjA/ovN1mjHVfi7axrQ=
Subject key identifier: 31:26:74:43:C4:51:5F:43:9E:0B:F9:37:50:DA:83:B5:F3:6B:06:90
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C024A208675E816290712AD5518E0FF16
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MSZ0Q8RRX0OeC_k3UNqDtfNrBpA.roa
Signing time: Fri 24 Nov 2023 17:04:21 +0000
ROA not before: Fri 24 Nov 2023 17:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:24a:12d6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:4a:20:86:75:e8:16:29:07:12:ad:55:18:e0:ff:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 24 17:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31267443c4515f439e0bf93750da83b5f36b0690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:e1:af:11:a0:00:8b:d7:a5:08:ec:d2:3a:
f8:c8:1a:c1:b7:78:ed:93:18:80:8f:44:6a:da:11:
69:74:a9:c8:b6:80:04:87:67:27:1b:4c:d2:b9:65:
53:e2:31:45:09:9c:cc:a3:9d:cc:42:e4:fa:2b:45:
25:44:77:5c:b5:3b:88:a3:ab:c4:4e:9e:a5:f3:ba:
d6:c4:3e:83:5c:7e:57:f1:cb:8e:a6:ba:e9:02:1f:
b5:a5:29:da:24:9d:54:ad:2b:0a:f7:6b:0d:c4:6e:
d6:ec:a2:a6:5a:b7:84:cf:f8:c3:03:1c:a9:64:46:
e3:33:e2:06:9e:d4:68:e1:da:20:df:b6:22:d0:2e:
2d:27:21:2d:91:32:34:16:0e:dc:c6:3b:88:09:f2:
ed:c3:ae:ce:c5:d4:5e:be:18:0c:56:ac:98:59:46:
d0:28:c6:f1:8c:73:bb:e7:80:52:ab:cc:c2:5a:2e:
56:c6:1f:00:d8:d8:52:b7:a8:c3:0c:d5:9e:8f:22:
f1:c3:5b:04:d3:ca:19:8f:af:2e:d4:9d:44:48:7a:
fc:f3:3a:da:9a:93:04:b2:9f:dd:42:b5:d8:34:67:
95:f7:d8:f5:0a:0b:eb:20:8b:a1:df:0b:96:5f:40:
cf:e6:68:84:aa:d4:5e:ec:62:e1:7b:ce:65:72:5e:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:74:43:C4:51:5F:43:9E:0B:F9:37:50:DA:83:B5:F3:6B:06:90
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MSZ0Q8RRX0OeC_k3UNqDtfNrBpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4f:3d:e0:1b:da:c0:61:86:c8:e6:23:d2:84:9a:f9:06:87:
ff:2d:ba:7d:10:dc:a7:32:2a:c1:cc:88:97:0c:09:e4:a2:c1:
09:28:2d:46:ec:b5:4d:ec:9a:d7:5f:86:50:66:a3:92:71:54:
27:98:cc:01:bd:93:b2:e3:5f:31:bb:c3:0f:44:1b:ef:f1:64:
f3:c5:9f:ff:59:99:61:72:78:83:85:e9:43:3b:16:c7:d3:2f:
60:90:a6:b4:cd:59:ce:d5:83:b3:69:fd:25:60:18:cf:8b:95:
bb:85:c3:96:e3:3a:6f:3c:f1:c5:fc:aa:6f:b5:10:79:b6:66:
99:e9:47:11:79:c0:f2:8a:ba:99:4c:ca:83:5d:a0:54:ea:f3:
c9:31:f9:8a:3f:bb:7f:e5:88:53:ab:bb:de:37:82:cb:b5:c7:
d6:5c:d6:93:d8:32:20:7e:f4:66:c0:2d:bc:a5:e9:2d:56:9d:
fe:77:7f:8c:84:67:04:a9:de:ff:50:40:ed:3a:16:ce:97:4b:
0e:55:6d:62:cc:52:3c:e7:df:39:9f:12:0b:f7:e0:cb:0e:b6:
46:b2:b5:a9:a7:5b:65:b9:59:25:e2:ec:40:08:95:5c:11:c2:
a8:fb:f0:c4:ef:84:f6:5f:d1:d1:74:fe:51:b8:53:74:52:da:
a5:83:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:11:18 2025 by rpki-client