Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MTWjJGYOLWF-Ztu7GqHZ-h2DZn8.roa
File: MTWjJGYOLWF-Ztu7GqHZ-h2DZn8.roa (raw, json)
Hash identifier: jtG3qq+0CxmwaHoA3UpLoH9Kjj5l69mOpnWKsJbjrN0=
Subject key identifier: 31:35:A3:24:66:0E:2D:61:7E:66:DB:BB:1A:A1:D9:FA:1D:83:66:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1940BAB4C43BDA3C8395D873A1BE657E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MTWjJGYOLWF-Ztu7GqHZ-h2DZn8.roa
Signing time: Wed 29 Nov 2023 04:05:21 +0000
ROA not before: Wed 29 Nov 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:1940:7558/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:40:ba:b4:c4:3b:da:3c:83:95:d8:73:a1:be:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3135a324660e2d617e66dbbb1aa1d9fa1d83667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:3a:41:20:b5:bb:63:cd:8e:d5:95:71:9e:
c5:74:41:55:8f:67:6f:ca:51:db:13:57:c6:3a:47:
8e:01:68:53:4f:98:23:23:4c:d4:ed:11:46:f7:80:
26:7a:c7:8a:b7:24:8a:3f:77:d4:07:88:a0:b7:d8:
b9:64:0a:73:61:5f:17:04:72:45:12:9a:4a:ec:fe:
0e:fa:c3:33:3c:03:88:4b:23:48:56:44:a9:bb:25:
81:cf:78:17:9d:c0:af:72:d3:6f:7c:1d:ad:8f:90:
97:a9:8d:73:a9:57:11:e7:4c:a4:2e:be:d7:68:8c:
20:e2:cc:d3:76:3c:da:8c:9c:60:8b:6a:7f:c2:54:
0e:49:45:9e:aa:41:74:fd:30:ef:7b:ac:42:55:53:
60:cd:51:9a:53:6b:f0:16:cf:c2:6e:21:f4:db:8f:
77:a3:c8:d7:1c:67:1c:d5:50:be:9e:3e:fe:de:31:
09:0b:ad:b5:8c:3c:1d:51:e1:99:90:d1:e0:69:77:
3d:d0:7d:6b:f6:c9:56:34:9d:7d:91:95:7c:e6:3c:
3b:5e:ee:28:27:7c:4f:61:e2:12:d8:24:c1:d2:d7:
fc:ae:e7:68:54:74:03:96:41:6e:75:ba:48:43:b6:
e9:cd:78:a3:29:dc:2f:82:0e:ed:b9:85:ec:d0:f1:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:A3:24:66:0E:2D:61:7E:66:DB:BB:1A:A1:D9:FA:1D:83:66:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MTWjJGYOLWF-Ztu7GqHZ-h2DZn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:bd:b8:08:d4:06:e2:56:a7:4f:d4:84:12:2c:02:88:95:a9:
90:dd:92:75:eb:1c:a3:4d:30:7d:cd:8d:af:b2:c0:36:7a:c2:
07:33:a4:1a:e5:dc:4a:b7:ed:33:57:bd:18:6c:d3:2a:72:97:
1c:83:6e:25:79:e6:b1:7e:c0:0d:22:20:c1:46:c2:3a:13:3c:
22:4e:80:5b:e1:41:17:ee:c5:0d:72:e7:00:41:21:29:9b:fa:
29:73:a3:ba:da:49:c1:16:75:bc:32:77:8c:cc:a9:7b:b9:83:
47:42:0c:66:85:2e:a6:6e:8e:66:3f:04:5e:68:17:8c:8f:94:
ea:0b:ce:ec:6f:4a:11:64:b7:7c:46:d5:f9:a9:b4:af:d8:2a:
85:7e:26:9e:bf:e4:82:d7:55:e5:43:26:95:06:df:a2:ba:7b:
9b:73:e1:24:35:34:c6:f7:48:bf:9b:d4:9b:2b:85:ce:42:5d:
71:2c:3c:35:1c:fa:4f:d4:f2:ea:0a:29:ec:62:af:c3:50:a2:
55:8c:6b:6c:61:f3:68:23:99:fc:93:fa:ce:fb:ea:76:34:1e:
00:45:0e:ab:5c:89:a2:25:5c:50:4c:90:45:6d:85:ed:2f:17:
0f:d4:3d:ca:08:6b:86:a8:74:9a:d9:1a:77:db:ae:5c:bb:87:
e9:f6:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:05:46 2025 by rpki-client