Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfXZGE8CeyBBuOFmev3QMQu8XoQ.roa
File: MfXZGE8CeyBBuOFmev3QMQu8XoQ.roa (raw, json)
Hash identifier: M8Z/oM8dVHuQObOPgrEZR2F1PG89UvZBD3DWOS/C4N8=
Subject key identifier: 31:F5:D9:18:4F:02:7B:20:41:B8:E1:66:7A:FD:D0:31:0B:BC:5E:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2AA1462600BA4DD68B2EBA34098346DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfXZGE8CeyBBuOFmev3QMQu8XoQ.roa
Signing time: Sat 02 Dec 2023 13:04:21 +0000
ROA not before: Sat 02 Dec 2023 13:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:2aa1:3f40/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2a:a1:46:26:00:ba:4d:d6:8b:2e:ba:34:09:83:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 13:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31f5d9184f027b2041b8e1667afdd0310bbc5e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:d9:bf:be:92:cd:3a:b9:f8:34:eb:ce:07:
4f:20:c2:b2:18:50:67:8b:94:52:52:2d:46:5c:ce:
29:e6:ed:96:23:11:f8:d2:3c:28:cb:4e:e5:7e:83:
0a:2a:b3:c2:97:0b:da:ca:ff:72:16:b2:a4:07:82:
30:f3:09:70:6f:e9:ad:b8:a4:f3:4e:63:cf:f1:2a:
8e:e5:c2:92:ff:d2:c2:f8:26:39:cb:22:9c:fd:e8:
e9:8c:7b:5a:75:c2:ff:dd:38:ed:12:27:a3:e7:1e:
85:4b:59:ae:82:9d:78:93:21:31:0b:d1:c5:35:92:
dd:b5:ad:a1:5c:01:eb:50:ed:85:7b:4d:b6:69:af:
f4:0c:0c:c9:3a:9f:0c:b8:39:7d:a9:96:c1:31:74:
58:9d:d4:ed:3b:c4:60:3a:45:87:db:69:e8:a1:d1:
b7:3f:18:67:dd:df:aa:50:de:2b:59:b4:89:d4:a4:
26:04:36:17:74:2a:06:71:ca:29:27:ef:72:e6:aa:
7d:30:07:54:4b:97:1e:b8:9e:6f:1f:54:21:cf:6f:
1b:44:c0:a8:d6:f8:17:c8:0d:3f:83:e7:ad:cc:9d:
ea:21:c6:a8:0e:15:e6:e2:a9:8b:49:bd:99:ad:61:
b7:b8:11:7b:16:71:e6:01:81:13:65:fb:73:30:3b:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F5:D9:18:4F:02:7B:20:41:B8:E1:66:7A:FD:D0:31:0B:BC:5E:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/MfXZGE8CeyBBuOFmev3QMQu8XoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:25:56:e9:1f:44:86:b9:73:87:3b:a8:80:95:dc:3e:96:e1:
2c:35:47:88:39:8a:77:61:9a:30:20:9f:2a:7f:ca:36:c2:46:
5c:d4:86:94:6e:98:fc:93:00:56:7e:51:cd:4e:ef:81:4c:f4:
e4:3f:57:55:83:a0:be:59:a1:68:f9:e4:f9:a2:c4:ac:fc:f6:
73:f8:da:cb:f1:fd:30:06:51:87:2b:54:83:d1:90:92:c7:8f:
0f:ba:b2:db:08:d0:c2:63:94:9c:c4:20:56:e9:f7:45:eb:71:
2b:1a:71:90:64:ac:1f:be:75:f4:aa:ca:db:ca:e6:3c:e6:a1:
91:87:7e:79:63:c5:e4:ec:e1:03:aa:83:1b:42:f3:2e:3a:a2:
4d:ef:a5:69:4f:64:22:ba:60:f9:31:e9:a0:77:ac:f5:a5:6a:
93:6d:d7:44:ba:f7:61:37:10:9e:89:db:60:dc:24:5e:5e:9e:
d1:09:70:2e:1e:b7:46:06:2b:56:c1:8a:97:b8:95:8b:97:35:
59:83:36:ce:c2:1a:51:75:42:26:f9:4d:4d:a9:0d:8f:ab:00:
05:22:3b:17:01:a5:f6:38:47:29:ca:b3:e7:14:ec:ab:ec:fe:
04:2b:af:da:a4:11:81:b1:94:14:ca:d2:05:1a:c4:35:09:78:
d3:b3:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:42 2025 by rpki-client