Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MnQ30QGoAdNDn8xwN-AKxZabfxE.roa
File: MnQ30QGoAdNDn8xwN-AKxZabfxE.roa (raw, json)
Hash identifier: sAkuT3q9CWy+/A763LNXFrjcK7s4g1+DxnISlw9u1Gs=
Subject key identifier: 32:74:37:D1:01:A8:01:D3:43:9F:CC:70:37:E0:0A:C5:96:9B:7F:11
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F32FF60B5055C97C85995EC9192CD0A39
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MnQ30QGoAdNDn8xwN-AKxZabfxE.roa
Signing time: Wed 01 May 2024 07:12:28 +0000
ROA not before: Wed 01 May 2024 07:12:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:ff:60:b5:05:5c:97:c8:59:95:ec:91:92:cd:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 1 07:12:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=327437d101a801d3439fcc7037e00ac5969b7f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:83:e5:bc:ce:f4:12:e3:09:7b:22:67:ec:
af:03:36:b3:b9:79:17:c4:86:39:3a:16:a0:13:8d:
d9:c2:c8:5d:ef:c6:b2:ae:f7:e9:a0:c2:16:dc:ec:
23:61:f0:10:f7:f4:8a:a9:11:03:bc:40:e5:9f:43:
77:11:93:0d:5e:17:32:47:0b:e4:a5:f8:32:16:02:
b0:e7:82:88:be:c8:99:7e:80:76:ec:fc:d5:d3:46:
dd:af:6e:7c:d6:10:b6:18:a5:a6:a6:22:55:14:4b:
fc:d9:8d:59:ae:f0:45:98:42:f8:b6:50:b4:16:19:
66:64:f0:aa:f1:62:4c:92:f3:6c:ce:bd:e3:39:66:
f3:a7:bc:25:0a:3c:b5:7e:46:ba:3a:45:7a:0e:93:
35:e3:40:9e:bd:28:73:a8:3c:db:58:33:75:29:1b:
0c:05:bf:10:6b:16:11:91:5d:12:29:1f:a3:34:6c:
85:f5:f6:b8:9f:9a:73:bf:f1:91:e8:ac:6a:1d:72:
12:9c:da:17:c4:b3:ae:13:2f:18:d1:15:99:eb:60:
69:49:73:cb:7a:69:5f:4f:c2:5a:45:da:94:f4:ef:
ea:a6:76:c8:9b:bd:f8:49:ba:01:f2:e6:57:81:3c:
b2:53:33:df:72:62:46:03:ee:11:3a:31:bd:7f:7d:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:37:D1:01:A8:01:D3:43:9F:CC:70:37:E0:0A:C5:96:9B:7F:11
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/MnQ30QGoAdNDn8xwN-AKxZabfxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ee:42:4a:85:38:e0:0d:f4:af:19:b5:ff:0c:86:84:92:42:
27:6a:98:39:38:6f:cc:de:a8:b5:42:c9:c5:38:3a:b2:45:41:
ee:f5:1f:9d:9c:bf:be:cc:cf:de:b3:05:e5:9e:bc:b3:84:70:
9b:fa:a8:a1:5b:4c:ed:db:de:8f:9d:b0:92:ba:f9:1b:51:0e:
8b:9f:25:53:78:22:7d:c0:e2:ed:c0:70:5c:a9:7f:07:3a:7f:
ed:30:dd:95:a1:8d:46:fa:49:d0:d7:9c:5d:38:da:eb:91:6c:
a3:d5:89:ef:d1:e8:60:07:74:e7:fc:c6:3b:b0:03:b4:00:b3:
41:df:d6:3c:17:21:bd:a0:22:d3:9f:b2:6f:de:15:80:17:26:
a1:f2:41:bf:cc:10:00:a5:fb:0d:30:58:d7:5d:19:78:cc:6c:
a2:e0:78:53:f6:fe:57:c4:68:74:d6:ce:23:86:1a:37:05:f4:
6a:2c:5e:be:cf:25:e3:e9:dd:9d:0b:5f:88:37:31:f5:9a:ac:
43:23:c0:84:e0:b8:f4:cd:ef:51:8b:ce:b3:e6:08:31:c9:b8:
41:92:80:e7:eb:f9:e0:0c:59:59:03:71:82:bb:13:8b:42:e9:
e2:7c:2a:2f:b2:ae:5f:51:7f:38:0c:a7:c1:02:92:4b:27:ca:
13:df:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:18 2025 by rpki-client