Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/MskN5IW4YbSVStksycIAVSRiACY.roa
File: MskN5IW4YbSVStksycIAVSRiACY.roa (raw, json)
Hash identifier: GtGd7VunvxEO3a5zw0qRjRIJ45Va8Fe1dsh/hbDD0zw=
Subject key identifier: 32:C9:0D:E4:85:B8:61:B4:95:4A:D9:2C:C9:C2:00:55:24:62:00:26
Certificate issuer: /CN=fc2b218c26435fff74a02f25198cf70ef9e9a901
Certificate serial: 018570399765716086E4635E842C889B43C1
Authority key identifier: FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CshjCZDX_90oC8lGYz3DvnpqQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/MskN5IW4YbSVStksycIAVSRiACY.roa
Signing time: Mon 02 Jan 2023 02:05:00 +0000
ROA not before: Mon 02 Jan 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201333
IP address blocks: 193.243.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:97:65:71:60:86:e4:63:5e:84:2c:88:9b:43:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2b218c26435fff74a02f25198cf70ef9e9a901
Validity
Not Before: Jan 2 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c90de485b861b4954ad92cc9c2005524620026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:63:e4:88:48:6a:6b:52:bf:76:07:76:74:44:
21:51:43:98:bb:b3:e8:a6:26:12:4a:79:8f:46:bd:
a1:f8:ba:56:0d:35:a9:b5:5f:af:6c:59:33:6d:8b:
20:e7:77:3a:6e:61:59:c0:52:50:0b:2f:c1:6d:e6:
db:f3:ce:b6:40:4a:e9:74:4f:40:b6:de:c1:9e:7b:
67:c3:db:a5:ad:55:b2:c5:4f:e0:f2:16:f6:33:eb:
25:bc:82:86:2d:1a:8d:df:8d:de:16:f2:5e:da:2a:
93:76:bd:93:11:c1:52:64:4a:76:83:68:73:a1:48:
44:c1:6b:e7:a2:a3:49:ad:87:79:e7:56:d5:95:cd:
02:14:96:96:93:71:4d:02:2c:7a:c4:1f:27:1e:48:
fd:85:34:c7:93:06:e1:f6:66:f8:ba:76:06:2a:57:
8c:fb:c4:97:c5:b6:51:c1:4d:39:6e:7e:89:63:79:
50:6e:a4:b0:51:ce:33:f6:4a:5e:b2:a9:9a:22:e9:
e2:32:f5:a0:8f:24:17:f0:78:14:91:47:68:6c:e0:
35:31:32:48:e9:e9:a3:e9:28:7c:62:9b:16:fa:ac:
65:f6:a8:80:10:a1:bc:c7:32:42:a8:1a:1a:b6:91:
a8:b0:ee:b5:0b:e2:63:96:8b:ff:fa:be:01:bd:4a:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:0D:E4:85:B8:61:B4:95:4A:D9:2C:C9:C2:00:55:24:62:00:26
X509v3 Authority Key Identifier:
keyid:FC:2B:21:8C:26:43:5F:FF:74:A0:2F:25:19:8C:F7:0E:F9:E9:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CshjCZDX_90oC8lGYz3DvnpqQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/MskN5IW4YbSVStksycIAVSRiACY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd218a-bf6a-4dbd-a767-9cc338d842d4/1/_CshjCZDX_90oC8lGYz3DvnpqQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.184.0/24
Signature Algorithm: sha256WithRSAEncryption
55:24:e9:6a:63:33:78:44:22:3d:5a:5a:2c:08:b5:11:cc:4d:
c2:f0:85:37:2f:d8:73:97:25:0f:90:90:b3:94:7b:05:2f:35:
8a:d9:82:60:72:7d:33:62:c3:b4:65:cf:ce:a2:be:d0:83:79:
91:66:e8:49:13:de:6f:c9:99:1c:ef:8a:ef:3d:0d:98:dc:9b:
d0:a0:14:bf:b5:36:f4:fd:b8:ba:58:87:6f:57:3b:17:7f:d3:
fa:75:47:5a:6c:e3:df:79:93:35:3f:66:0f:9b:6c:c5:a5:ba:
14:d8:91:25:10:3c:b8:5b:64:1e:a7:7b:91:95:d5:d2:85:3a:
af:2c:2a:df:97:2f:89:33:96:a4:3f:bb:8f:ba:dd:94:e1:7f:
6f:d2:93:be:71:ea:1c:71:95:11:9f:d7:a0:b3:c5:69:73:76:
d1:a7:a4:f6:49:5c:03:ca:ad:c3:fc:a8:3a:34:87:51:f5:04:
40:ba:8f:00:a1:f3:e0:05:03:c1:5d:df:85:d9:ca:2d:a3:07:
a2:73:54:8d:ee:8a:b4:31:d0:74:ba:93:08:45:f1:aa:28:1c:
af:b2:ab:6e:5e:05:0d:5c:80:fc:65:f5:73:f5:52:79:ae:c1:
ba:10:74:32:30:87:1c:10:ae:0e:e9:35:68:02:f5:2f:e2:06:
11:8d:fb:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOZdlcWCG5GNehCyIm0PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmIyMThjMjY0MzVmZmY3NGEwMmYyNTE5OGNmNzBlZjll
OWE5MDEwHhcNMjMwMTAyMDIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmM5MGRlNDg1Yjg2MWI0OTU0YWQ5MmNjOWMyMDA1NTI0NjIwMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGPkiEhqa1K/dgd2dEQhUUOYu7Po
piYSSnmPRr2h+LpWDTWptV+vbFkzbYsg53c6bmFZwFJQCy/Bbebb8862QErpdE9A
tt7Bnntnw9ulrVWyxU/g8hb2M+slvIKGLRqN343eFvJe2iqTdr2TEcFSZEp2g2hz
oUhEwWvnoqNJrYd551bVlc0CFJaWk3FNAix6xB8nHkj9hTTHkwbh9mb4unYGKleM
+8SXxbZRwU05bn6JY3lQbqSwUc4z9kpesqmaIuniMvWgjyQX8HgUkUdobOA1MTJI
6emj6Sh8YpsW+qxl9qiAEKG8xzJCqBoatpGosO61C+Jjlov/+r4BvUp7TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLJDeSFuGG0lUrZLMnCAFUkYgAmMB8GA1UdIwQY
MBaAFPwrIYwmQ1//dKAvJRmM9w756akBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NzaGpDWkRYXzkwb0M4bEdZejNEdm5wcVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mZDIxOGEtYmY2YS00ZGJkLWE3Njct
OWNjMzM4ZDg0MmQ0LzEvTXNrTjVJVzRZYlNWU3Rrc3ljSUFWU1JpQUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mZDIxOGEtYmY2YS00ZGJkLWE3NjctOWNjMzM4ZDg0MmQ0
LzEvX0NzaGpDWkRYXzkwb0M4bEdZejNEdm5wcVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfO4MA0G
CSqGSIb3DQEBCwUAA4IBAQBVJOlqYzN4RCI9WlosCLURzE3C8IU3L9hzlyUPkJCz
lHsFLzWK2YJgcn0zYsO0Zc/Oor7Qg3mRZuhJE95vyZkc74rvPQ2Y3JvQoBS/tTb0
/bi6WIdvVzsXf9P6dUdabOPfeZM1P2YPm2zFpboU2JElEDy4W2Qep3uRldXShTqv
LCrfly+JM5akP7uPut2U4X9v0pO+ceoccZURn9egs8Vpc3bRp6T2SVwDyq3D/Kg6
NIdR9QRAuo8AofPgBQPBXd+F2cotoweic1SN7oq0MdB0upMIRfGqKByvsqtuXgUN
XID8ZfVz9VJ5rsG6EHQyMIccEK4O6TVoAvUv4gYRjfuI
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:11:55 2025 by rpki-client