Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/MI3YGR5BDa-mEUhbPWF1EcuOKTU.roa
File: MI3YGR5BDa-mEUhbPWF1EcuOKTU.roa (raw, json)
Hash identifier: W+BGCYpYfW//+jDUXg7H20J69T6fUShGCsUioY0OqXY=
Subject key identifier: 30:8D:D8:19:1E:41:0D:AF:A6:11:48:5B:3D:61:75:11:CB:8E:29:35
Certificate issuer: /CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Certificate serial: 018EF5D7D2DD25F53332A54BA9AD4C58AC53
Authority key identifier: F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/MI3YGR5BDa-mEUhbPWF1EcuOKTU.roa
Signing time: Fri 19 Apr 2024 10:12:25 +0000
ROA not before: Fri 19 Apr 2024 10:12:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:d7:d2:dd:25:f5:33:32:a5:4b:a9:ad:4c:58:ac:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Validity
Not Before: Apr 19 10:12:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308dd8191e410dafa611485b3d617511cb8e2935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:a7:4a:eb:71:38:d9:ca:ff:70:7d:ae:5d:
e3:fe:e7:f6:77:43:b5:30:af:f1:6d:2b:96:fe:63:
5c:71:5d:e5:c7:0a:3b:5e:b4:a1:56:8a:aa:10:67:
ab:3a:bb:86:b4:ff:cd:03:a9:e5:96:a4:65:f2:ed:
05:5d:5c:c0:38:01:80:d2:b1:4c:52:6c:2e:ca:19:
1f:07:57:a7:57:e6:3f:24:8a:14:f1:ae:a8:6e:7c:
ab:13:62:6a:cf:35:31:ed:79:ad:e3:63:1f:9b:cc:
8d:a2:e2:19:5f:d1:dd:75:9b:02:cb:b5:a5:f9:16:
74:c3:1e:c2:d9:18:51:fd:ab:13:5b:72:2d:26:c3:
ca:64:27:91:b2:4a:3b:9f:48:24:7a:2b:f9:0e:9c:
c6:2c:4c:8e:95:98:d9:47:aa:60:a3:96:3c:da:b5:
b6:f0:b4:46:92:fe:cd:36:9e:4f:5a:0f:88:3b:2f:
4e:64:6f:6b:ec:f7:86:48:0c:89:d9:3e:13:dc:5a:
c3:3e:d1:d4:e0:e0:ea:ac:88:6e:9c:d4:8e:ab:b1:
24:d6:ed:77:e2:bf:67:89:a1:45:01:fc:81:3e:bf:
43:29:8b:f1:69:b4:a8:5e:cf:c1:5e:b6:1c:5d:d1:
ae:27:36:0a:0f:87:f4:25:16:d8:00:25:7a:2e:eb:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:D8:19:1E:41:0D:AF:A6:11:48:5B:3D:61:75:11:CB:8E:29:35
X509v3 Authority Key Identifier:
keyid:F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/MI3YGR5BDa-mEUhbPWF1EcuOKTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:f1:e8:f8:91:32:56:17:4a:b6:63:33:fd:41:d1:71:be:c7:
6d:5c:53:22:bc:a0:b2:4e:68:1a:82:40:14:e8:ac:ca:5d:fb:
f3:be:09:da:ef:32:9a:ab:f9:84:5e:10:d7:1e:f2:60:0c:92:
62:e2:16:03:35:39:97:c4:b6:ed:ca:b7:52:f5:92:4b:b0:e9:
ff:8a:db:27:76:b2:f0:05:91:f3:8a:99:28:f7:ee:51:f3:12:
ab:4b:14:d3:1c:08:e1:f6:ed:03:31:fb:98:f2:7a:73:9d:d6:
19:32:f8:51:14:e5:b2:0a:67:52:4b:70:a7:71:05:9c:ed:3e:
90:15:dd:d1:10:25:ed:47:1f:8a:ae:b6:13:73:36:f1:aa:03:
30:64:88:03:88:aa:c8:7b:5a:92:fc:93:91:2f:eb:99:6e:05:
b6:d5:31:a9:09:1b:3c:a9:09:2e:8e:ec:2e:8c:15:f8:c5:3f:
02:ef:16:8a:f4:d3:98:a7:c1:59:44:2a:8a:43:3b:bc:01:c6:
e1:6a:92:22:a3:12:d0:31:96:d1:8a:5c:64:c5:a8:7a:4c:67:
28:69:12:cb:10:be:37:48:f3:a5:07:be:14:6d:5c:9a:56:91:
2c:76:4c:37:67:17:74:ca:b4:4b:07:a9:a9:e7:a0:35:e9:03:
26:78:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:34:44 2025 by rpki-client