Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mp6MRwLNR549C3kbUWBUbE-6Ilc.roa
File: mp6MRwLNR549C3kbUWBUbE-6Ilc.roa (raw, json)
Hash identifier: RcIhbxd4oA/8ZHhqWqAb9h2AN2bTuVkiBE6idaLcz0w=
Subject key identifier: 9A:9E:8C:47:02:CD:47:9E:3D:0B:79:1B:51:60:54:6C:4F:BA:22:57
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F129693A8F926B0E37A11729834DF9DFC
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mp6MRwLNR549C3kbUWBUbE-6Ilc.roa
Signing time: Thu 25 Apr 2024 00:10:08 +0000
ROA not before: Thu 25 Apr 2024 00:10:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:12:96:93:a8:f9:26:b0:e3:7a:11:72:98:34:df:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: Apr 25 00:10:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a9e8c4702cd479e3d0b791b5160546c4fba2257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:36:95:47:1d:0b:ed:88:8f:88:6f:f3:41:
11:89:c8:db:4c:91:e9:22:c5:8e:4a:50:81:ef:c1:
b9:19:a5:10:df:d4:fc:44:4d:83:62:cd:97:f3:5f:
65:1a:b0:b5:3b:d3:d2:77:4d:af:38:db:7e:95:d7:
ac:37:f4:f8:e7:c3:8c:c9:4e:c5:6c:22:c7:9d:e0:
fe:a3:26:78:c7:a0:d2:49:1f:8e:19:2e:2b:f4:ed:
f2:ad:18:a0:15:0d:55:5d:8d:8a:a9:5d:fa:05:d9:
5f:a7:43:f1:b4:24:6e:c9:b5:10:e2:e4:1b:7c:d9:
ef:4e:79:6e:4f:9c:a5:ff:c5:de:1e:c7:b7:02:ae:
9b:34:00:90:97:80:a5:a8:20:62:ca:88:b0:13:d8:
88:45:ae:44:22:cc:58:e0:fa:67:37:b4:31:60:ff:
b8:da:23:1e:6c:7d:e4:54:37:9d:92:71:65:68:89:
55:7e:8d:e7:3c:49:0c:e0:4f:d0:06:59:fb:ce:4e:
b2:07:07:48:f1:a6:9f:51:a9:b6:80:42:b9:54:a3:
32:ef:78:af:38:1b:63:3c:12:02:ac:7e:96:54:61:
a9:d4:d7:82:ef:4a:8c:59:81:a4:89:1b:50:d3:1c:
fe:10:15:0f:ef:c8:ff:9f:cd:e9:e9:17:74:2e:49:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:8C:47:02:CD:47:9E:3D:0B:79:1B:51:60:54:6C:4F:BA:22:57
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/mp6MRwLNR549C3kbUWBUbE-6Ilc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64:ffff:0:18f:543:9e41/128
Signature Algorithm: sha256WithRSAEncryption
ca:ad:4e:70:37:51:5a:98:14:d4:f8:48:6e:e6:a9:d6:cb:40:
b8:4b:44:05:80:42:bd:b4:2e:8e:0b:0d:b9:41:52:e8:19:54:
d1:4b:62:41:06:5e:79:34:78:43:bd:03:50:4f:37:5b:bd:9f:
cb:cc:fe:ea:da:4b:a8:41:15:60:30:fa:e2:4d:af:37:7e:82:
75:cb:62:53:6d:03:80:48:b9:93:80:9b:13:fd:dd:21:75:3e:
0e:8e:96:83:06:cd:55:ea:0d:67:bc:83:37:4b:86:54:24:d3:
3d:1c:bf:66:e6:65:1b:02:34:8a:31:d4:31:cc:78:e7:6a:ec:
69:2b:79:c0:ae:93:40:11:b4:d2:b3:5b:4c:1e:d3:89:17:ad:
2d:b9:7d:85:57:2b:6b:7d:cf:e7:64:0c:e0:16:f2:dd:32:4e:
69:06:c0:76:50:a5:fc:c1:1c:0c:a2:23:50:6f:84:6f:6d:d4:
8b:ac:e1:83:b1:f0:04:18:39:66:44:b3:af:1c:bb:bf:63:9a:
cb:d5:e2:cd:05:90:af:4c:e0:d8:67:05:28:14:db:06:d1:16:
75:b2:f2:2b:c1:c5:b9:3c:40:ce:90:e9:b3:95:f4:1c:45:4e:
2b:9f:18:5f:cb:07:31:67:5f:b5:ff:85:00:e1:c9:67:09:22:
da:c9:40:a8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8SlpOo+Saw43oRcpg03538MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNDI1MDAxMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTllOGM0NzAyY2Q0NzllM2QwYjc5MWI1MTYwNTQ2YzRmYmEyMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldk2lUcdC+2Ij4hv80ERicjbTJHp
IsWOSlCB78G5GaUQ39T8RE2DYs2X819lGrC1O9PSd02vONt+ldesN/T458OMyU7F
bCLHneD+oyZ4x6DSSR+OGS4r9O3yrRigFQ1VXY2KqV36Bdlfp0PxtCRuybUQ4uQb
fNnvTnluT5yl/8XeHse3Aq6bNACQl4ClqCBiyoiwE9iIRa5EIsxY4PpnN7QxYP+4
2iMebH3kVDedknFlaIlVfo3nPEkM4E/QBln7zk6yBwdI8aafUam2gEK5VKMy73iv
OBtjPBICrH6WVGGp1NeC70qMWYGkiRtQ0xz+EBUP78j/n83p6Rd0LklEgQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJqejEcCzUeePQt5G1FgVGxPuiJXMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvbXA2TVJ3TE5SNTQ5QzNrYlVXQlViRS02SWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAMBAIAATAGAwQDwQAYMBkE
AgACMBMDEQAgAQZ8AGT//wAAAY8FQ55BMA0GCSqGSIb3DQEBCwUAA4IBAQDKrU5w
N1FamBTU+Ehu5qnWy0C4S0QFgEK9tC6OCw25QVLoGVTRS2JBBl55NHhDvQNQTzdb
vZ/LzP7q2kuoQRVgMPriTa83foJ1y2JTbQOASLmTgJsT/d0hdT4OjpaDBs1V6g1n
vIM3S4ZUJNM9HL9m5mUbAjSKMdQxzHjnauxpK3nArpNAEbTSs1tMHtOJF60tuX2F
Vytrfc/nZAzgFvLdMk5pBsB2UKX8wRwMoiNQb4RvbdSLrOGDsfAEGDlmRLOvHLu/
Y5rL1eLNBZCvTODYZwUoFNsG0RZ1svIrwcW5PEDOkOmzlfQcRU4rnxhfywcxZ1+1
/4UA4clnCSLayUCo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:07 2024 by rpki-client on console-fra.rpki-client.org