Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MgbgNiNW8XYCMekAuziI-E-dhjA.roa
File: MgbgNiNW8XYCMekAuziI-E-dhjA.roa (raw, json)
Hash identifier: yuKvVQGiaIzaDvh0kDi30y+Gw4KS+7ukAZhQqD9gfA0=
Subject key identifier: 32:06:E0:36:23:56:F1:76:02:31:E9:00:BB:38:88:F8:4F:9D:86:30
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018EF7207FAFF1FB614E7902D7FC4441D0FD
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MgbgNiNW8XYCMekAuziI-E-dhjA.roa
Signing time: Fri 19 Apr 2024 16:11:25 +0000
ROA not before: Fri 19 Apr 2024 16:11:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:20:7f:af:f1:fb:61:4e:79:02:d7:fc:44:41:d0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 19 16:11:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3206e0362356f1760231e900bb3888f84f9d8630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:c7:98:2b:6f:e2:37:29:63:a5:e5:40:f1:
e8:25:7a:d2:2e:47:40:9a:2f:59:0a:55:02:df:a2:
0d:b9:0e:52:eb:fd:83:b0:32:1a:b9:05:c4:78:c8:
f7:b3:f1:5c:e0:13:66:03:e8:ed:fe:e9:33:33:13:
1f:81:11:0e:28:a9:a8:22:9b:60:3f:24:0f:b1:b0:
31:5c:b1:fc:5f:d8:1c:c7:bd:28:a8:ad:98:cd:ca:
f1:6d:56:bc:6d:3f:e2:af:d6:38:bf:ef:8c:62:2c:
2d:2d:a7:c3:61:30:d0:a9:57:ce:0e:66:5a:4b:fc:
f3:9d:e6:d0:82:e2:62:87:a2:e1:d7:67:12:7a:1b:
01:1a:a0:45:49:33:08:94:e3:59:9a:85:9e:e1:0a:
01:d2:ad:2b:b6:9f:79:73:6e:72:16:b0:db:d2:d5:
19:f4:19:07:c2:5c:8e:d2:1d:26:6e:93:95:fa:a5:
0d:fe:3e:19:2f:7a:0d:17:ed:bf:ce:6f:22:43:1f:
2a:77:7c:e5:f5:e2:10:25:49:ea:71:eb:e5:f2:cc:
71:a3:95:12:67:05:27:18:7b:85:87:6b:90:42:07:
34:45:0e:e1:da:6a:91:bf:85:0d:e2:0e:3f:84:a2:
45:53:5b:23:87:10:0c:e2:22:5a:08:b2:4e:b0:e5:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:E0:36:23:56:F1:76:02:31:E9:00:BB:38:88:F8:4F:9D:86:30
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MgbgNiNW8XYCMekAuziI-E-dhjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:d0:68:4e:41:38:12:a2:a3:9d:94:42:20:9d:0b:a2:6e:dd:
45:22:36:51:a4:f3:ed:77:47:c3:30:2f:1d:79:7d:11:98:0a:
b8:01:44:89:9c:75:74:20:ad:e7:25:78:79:d6:5a:0f:e4:3c:
57:21:df:5d:e3:d9:68:65:5d:7d:23:4a:44:75:37:ea:f2:a8:
2b:e1:55:b2:3f:13:36:e2:ed:1c:ef:23:15:7f:1d:c7:1b:71:
1b:85:93:19:95:fd:cc:3e:4f:a0:bc:32:b9:2e:f3:7b:92:30:
30:18:72:62:ff:e6:a2:1b:a8:99:7a:b0:6e:17:4f:6b:af:09:
f5:8d:94:cc:a5:4c:b5:1c:ec:81:18:e8:9d:e8:ef:c5:42:94:
3b:6f:0e:c1:55:bc:ca:99:9a:d5:15:cc:fd:97:82:85:92:05:
82:45:0a:d9:85:6a:83:14:64:22:53:54:b7:0a:db:45:f3:16:
73:c7:38:93:6b:f7:2d:b5:e1:3d:79:d4:bd:ee:8d:ec:d9:b8:
df:68:6e:29:6b:e4:2f:38:41:cd:17:dd:90:a2:ae:e4:40:d0:
c2:8e:87:f6:7e:41:60:89:da:70:3a:49:dd:44:b7:d7:74:31:
99:48:58:83:ca:e0:d5:cb:85:f4:a7:d5:f4:a1:da:f5:f7:2d:
83:98:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:37 2025 by rpki-client