Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mcYLP9bCy1hFSNZwbk9tvh5Bngk.roa
File: mcYLP9bCy1hFSNZwbk9tvh5Bngk.roa (raw, json)
Hash identifier: 3ENCF1z81OZYZQtWDAUBWfvGkcHR83QrAXZxBO93oGM=
Subject key identifier: 99:C6:0B:3F:D6:C2:CB:58:45:48:D6:70:6E:4F:6D:BE:1E:41:9E:09
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD4285F7FB81B4433920DDA54F472B984
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mcYLP9bCy1hFSNZwbk9tvh5Bngk.roa
Signing time: Wed 15 Nov 2023 18:04:57 +0000
ROA not before: Wed 15 Nov 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:d427:d854/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:28:5f:7f:b8:1b:44:33:92:0d:da:54:f4:72:b9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99c60b3fd6c2cb584548d6706e4f6dbe1e419e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:a4:c1:86:1f:81:6d:ea:10:28:a7:10:cb:
ce:54:ba:ea:b5:59:df:00:cd:71:8c:3d:87:f1:c0:
2d:f2:53:3c:ab:f8:83:ac:eb:cf:60:60:b6:bc:bb:
a7:f3:29:b7:3b:a9:00:c0:02:d6:c7:cc:4a:43:83:
76:b9:99:0a:3f:e8:66:59:f0:04:10:d1:5e:ff:ec:
cb:96:cb:f6:4b:0a:3e:11:80:ee:f3:5e:1d:1c:c1:
8a:bd:b4:77:8c:f8:1e:74:99:d3:bb:c6:72:8a:74:
e6:b6:5c:0e:fa:60:2c:a1:88:33:c8:2b:84:40:86:
4c:70:3e:df:c1:76:b1:bd:d3:a8:84:9b:a0:a5:23:
9e:3b:7a:e1:c5:5e:7a:cf:87:4b:72:b0:5c:9b:f4:
dd:df:21:b5:d0:c9:7e:17:c0:db:2b:92:12:cf:8c:
94:a8:cf:98:cb:3f:a2:7d:1d:86:93:f5:bc:b8:11:
a3:43:66:2e:e2:f6:8f:6b:58:5f:c7:f5:5a:78:58:
bb:19:b7:ff:10:aa:a9:d2:55:18:20:be:f2:e9:ae:
02:71:a7:4f:ae:48:29:dc:3e:e1:04:6d:15:26:63:
ce:be:b3:03:90:93:c5:32:d9:2f:d7:a0:f4:93:f6:
46:b3:a7:bf:3d:a4:d4:98:d0:5f:33:5e:30:e5:7c:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:0B:3F:D6:C2:CB:58:45:48:D6:70:6E:4F:6D:BE:1E:41:9E:09
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mcYLP9bCy1hFSNZwbk9tvh5Bngk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:bb:08:a5:e8:07:f1:c9:48:45:5b:03:26:99:a5:f5:c1:22:
67:fc:70:15:96:20:75:af:5e:32:59:2f:ae:fb:7a:99:f6:61:
5f:e8:ae:66:7b:79:f4:13:22:96:8a:19:9b:6c:08:e3:56:b8:
cb:79:c2:91:d5:e4:4f:90:da:6b:32:13:eb:bd:b3:cd:0b:34:
e4:3c:73:1d:0b:2b:5f:2e:ff:15:26:0e:41:a7:3b:19:a6:97:
89:49:d5:80:03:27:c7:1b:3c:89:69:c5:ad:66:b4:cd:b5:d6:
67:27:df:c6:3d:81:b5:ca:87:f2:69:2d:1c:46:de:83:b4:ff:
e3:4a:98:e4:c2:96:1d:ae:2a:65:ee:fc:bf:5a:a6:68:76:b9:
b3:a7:ef:f9:a3:6d:8f:b4:e5:8d:55:c9:fa:c0:a4:5a:29:7e:
4c:c0:5c:1f:9a:1c:30:fa:cc:d6:b5:09:6c:30:d9:47:83:14:
09:cd:d8:91:94:d9:58:d7:a7:e4:29:a8:94:89:98:28:dd:b2:
be:a8:b0:d6:aa:b1:4f:73:b9:53:3c:a7:d5:ff:26:7a:59:cb:
d8:a5:1f:1e:de:4b:4d:fc:3a:69:8b:f2:3b:96:dc:30:c1:a1:
38:50:c5:a6:61:dd:12:0f:f2:89:9b:96:d0:4d:b8:b9:54:da:
a4:fb:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:41:18 2025 by rpki-client