Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa
File: 45og-MskCAEaeDh7l2xxfn2S_L8.roa (raw, json)
Hash identifier: wjAhZpyiCCTHBBj1jwTvz7MOJB1HymDMz0se4IHpxA8=
Subject key identifier: E3:9A:20:F8:CB:24:08:01:1A:78:38:7B:97:6C:71:7E:7D:92:FC:BF
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F4616E637ABF3B9FB9AF55625278166BA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa
Signing time: Sun 05 May 2024 00:10:56 +0000
ROA not before: Sun 05 May 2024 00:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:46:16:e6:37:ab:f3:b9:fb:9a:f5:56:25:27:81:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 00:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e39a20f8cb2408011a78387b976c717e7d92fcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:42:2b:38:07:18:f3:ae:e4:49:14:ae:37:
c5:23:22:59:a2:2d:6c:c7:98:62:fb:12:1a:54:cf:
1e:76:bd:b6:5a:14:3a:2b:10:bf:74:60:72:5f:ec:
d7:da:78:88:78:7a:07:30:ed:ed:fa:b3:cb:42:27:
65:ab:a7:46:6f:c2:6a:ee:27:02:61:81:29:08:e1:
68:d8:0b:17:6a:0f:64:b0:0a:ee:af:63:0e:51:8c:
6f:de:a7:72:1d:ee:f2:94:e3:84:7f:e5:b2:57:01:
8c:c3:a6:46:89:eb:b3:68:70:43:67:5b:c4:77:0d:
a2:24:7f:d4:1a:df:af:9c:5c:52:29:58:84:ee:24:
ce:92:f2:2b:29:25:38:3b:28:90:17:7f:d7:f1:d2:
48:a2:b5:f3:1d:59:e7:3c:78:46:dd:bc:26:e6:21:
76:10:dd:0d:84:a9:70:3d:e8:b3:ed:2e:5b:c5:b9:
a6:f8:48:8e:8a:1a:1a:30:58:05:70:97:27:3d:1e:
5d:21:4d:0f:ed:ee:4a:00:5e:f0:5e:27:88:35:5e:
6a:c1:16:f9:38:21:e8:b2:57:32:a7:6b:73:a9:cb:
09:66:ef:eb:30:00:0e:f1:c4:a1:6c:d0:3a:e1:0d:
9f:90:2e:01:3b:33:26:4a:95:f8:1b:e0:cf:8d:59:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:20:F8:CB:24:08:01:1A:78:38:7B:97:6C:71:7E:7D:92:FC:BF
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/45og-MskCAEaeDh7l2xxfn2S_L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:fb:5d:48:d6:06:e3:5e:07:5c:7c:b5:27:55:3e:c3:47:df:
b8:8c:87:43:09:b6:0a:c5:ec:32:05:45:95:40:f7:ad:2f:da:
60:ec:0a:53:49:2c:b5:d7:64:ec:be:3e:4f:18:54:76:43:d0:
ec:3f:f7:37:c5:f0:ef:ab:01:cb:c6:bc:e8:c7:69:d7:28:e4:
b4:4c:68:76:8b:29:10:39:0b:16:84:19:09:07:3d:3d:07:46:
bb:56:60:36:21:6a:ad:c3:6b:7b:9b:24:15:78:cc:75:fd:9e:
60:b5:e4:cb:0a:38:bc:39:bf:c1:ac:15:cc:3d:c1:4f:0f:3e:
86:6d:13:f1:b2:32:87:1b:98:01:05:4f:0e:87:2f:e7:ff:e6:
5d:b6:b3:ef:7d:22:8d:19:ad:3c:5b:91:7d:85:c4:bd:57:53:
3b:bf:35:58:f5:47:e8:0f:a3:56:85:b3:77:ec:55:03:eb:5b:
fd:17:b7:3c:b3:09:71:55:79:7b:b1:5e:a7:05:f6:82:a3:54:
ec:60:cd:fe:f1:6e:56:5f:7d:f5:47:b5:3b:b7:03:9a:ba:a9:
cf:a7:1d:5a:8c:aa:4c:63:dc:a5:0b:f8:80:4d:59:68:1e:d2:
36:f8:5b:68:2d:fa:79:3f:67:5e:ea:13:8c:ff:79:84:b9:85:
14:54:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:04 2024 by rpki-client on console-fra.rpki-client.org