Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mdZbp-56_pAbK8Pu7tkQ8vTEIoI.roa
File: mdZbp-56_pAbK8Pu7tkQ8vTEIoI.roa (raw, json)
Hash identifier: CkJv2uDsDwOKfgHaSgtHEwlhtL6l8pN/hCSuoAidfEU=
Subject key identifier: 99:D6:5B:A7:EE:7A:FE:90:1B:2B:C3:EE:EE:D9:10:F2:F4:C4:22:82
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C05FB615AD672C67B3722E76EC2403D54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mdZbp-56_pAbK8Pu7tkQ8vTEIoI.roa
Signing time: Sat 25 Nov 2023 10:16:49 +0000
ROA not before: Sat 25 Nov 2023 10:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:fb:61:5a:d6:72:c6:7b:37:22:e7:6e:c2:40:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 10:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d65ba7ee7afe901b2bc3eeeed910f2f4c42282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:5d:55:ea:78:93:89:e7:b4:7a:e9:87:a4:
97:58:7a:87:36:60:39:3c:b9:88:c0:4c:16:e2:de:
8b:4b:62:c8:79:00:9b:12:39:f3:07:96:95:31:64:
8d:21:af:fe:c4:2b:f8:df:27:e6:4e:39:7d:fb:91:
ab:ed:27:5b:46:fb:d7:ca:9d:55:84:db:33:2d:5e:
a1:b4:e1:73:79:bd:f7:a2:f2:55:16:20:8c:f2:06:
de:37:38:85:e6:63:d9:0f:db:fc:2c:ae:40:a7:58:
34:39:8b:ed:b6:b7:12:81:ff:9e:22:ea:3d:29:0a:
0d:6f:f6:5a:42:bf:fb:12:63:85:3a:ab:d3:fd:04:
df:55:d0:08:08:b1:16:b4:59:d7:67:7a:8a:88:63:
7b:b0:64:82:2c:fd:3e:bc:05:6e:0d:47:26:91:1f:
c1:87:e7:4e:e1:9b:f5:08:2c:42:95:77:f7:18:62:
9b:8d:75:70:cf:9b:7e:df:3f:9a:45:13:e4:7c:5c:
a1:fe:57:00:20:16:f7:a2:c0:db:0d:e1:60:08:9f:
64:3b:4d:8e:6e:ef:f0:09:12:c5:9e:fd:30:d9:78:
17:57:f0:5d:94:bc:18:de:4a:5c:d9:2d:55:db:ba:
51:6f:23:1e:15:19:71:3a:c8:80:64:8f:b5:f4:e5:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D6:5B:A7:EE:7A:FE:90:1B:2B:C3:EE:EE:D9:10:F2:F4:C4:22:82
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/mdZbp-56_pAbK8Pu7tkQ8vTEIoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:be:6b:97:7f:16:bc:54:c8:ca:53:6f:81:9e:d1:23:e2:24:
54:2b:c8:97:6a:d3:31:11:03:18:3b:5f:a5:78:de:e0:f9:5d:
28:4a:0e:47:e3:06:2e:93:0c:6e:ed:1a:fb:f0:78:77:07:5a:
fa:4b:af:16:4d:4a:30:37:d1:5a:2a:0d:6f:a9:98:82:2e:c2:
09:83:2d:b4:f2:98:32:36:54:b0:2f:4b:fd:ef:d0:e2:0d:27:
a7:01:97:95:12:bf:85:18:67:ba:41:16:94:25:0a:52:de:03:
d3:67:5e:ee:98:12:b0:80:2c:09:5d:0b:70:c8:a9:41:28:8c:
62:b2:bb:88:ff:63:9a:b9:60:e1:ef:78:9a:85:d7:19:ca:e1:
96:f6:ad:36:12:1a:bf:c4:6f:ad:92:ea:b0:9f:7b:16:4d:ec:
0d:0c:a0:ac:12:59:5f:95:45:4a:dd:70:92:48:3e:c7:41:30:
e0:b4:22:c4:2c:a7:9d:53:fd:db:80:bc:29:4b:fc:8c:67:40:
20:31:df:c1:dc:2e:61:49:9f:65:4b:26:86:e0:40:79:48:7b:
87:02:5e:ec:c3:8a:e2:08:6d:2a:dd:96:3b:7b:68:18:02:d4:
bf:ad:ae:95:18:a1:f9:06:95:57:e7:99:ef:cf:f4:89:ff:f2:
a9:0c:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:28:16 2025 by rpki-client