Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEEwHwQfzMZNZlxC3oH5dnyhxEU.roa
File: MEEwHwQfzMZNZlxC3oH5dnyhxEU.roa (raw, json)
Hash identifier: ZY/E7BDwKN4I850tscUD+PlzCOIAgWQXowBuLPNRD6c=
Subject key identifier: 30:41:30:1F:04:1F:CC:C6:4D:66:5C:42:DE:81:F9:76:7C:A1:C4:45
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D7A462BA40B3F00EC4F83125D0BF5906C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEEwHwQfzMZNZlxC3oH5dnyhxEU.roa
Signing time: Mon 05 Feb 2024 17:17:15 +0000
ROA not before: Mon 05 Feb 2024 17:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:46:2b:a4:0b:3f:00:ec:4f:83:12:5d:0b:f5:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 5 17:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3041301f041fccc64d665c42de81f9767ca1c445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:17:b8:1d:84:d4:3d:85:24:50:df:90:66:
c7:80:46:5b:ac:c9:f1:f2:96:8e:23:26:77:59:aa:
c5:96:d4:fd:fe:82:bd:95:52:40:dc:c6:6f:8a:24:
18:2e:13:b2:45:42:cf:d8:e8:7d:17:30:fd:3a:67:
c9:b3:7b:3b:74:8b:72:76:73:db:17:14:60:2b:73:
76:8a:57:b5:d6:39:dd:7b:f2:b0:fb:71:d1:a3:26:
50:1a:e0:bb:bc:0c:9c:77:a5:ec:eb:5e:d7:f3:26:
d9:bc:b9:5a:4c:56:83:1c:35:e1:24:97:6a:46:d8:
9e:88:79:c9:e4:c2:6c:11:55:be:30:37:13:c6:18:
cf:8b:5d:55:88:75:c6:42:3b:88:ac:3b:08:11:fd:
b7:cb:13:ad:93:22:5b:1c:64:6d:8d:37:42:26:b9:
32:4d:af:35:59:ec:f2:b2:ef:03:de:fa:65:03:77:
b3:ed:bb:bf:98:60:86:a5:ea:66:40:eb:c6:79:ab:
6f:46:00:5f:00:b8:91:b8:b7:0f:64:b6:2d:7f:c7:
77:fc:6a:61:ad:cd:f1:57:9c:31:25:37:55:c8:41:
ac:c0:39:09:b5:c9:42:46:ff:06:0c:49:99:ed:ea:
38:d0:00:74:f7:ff:63:0c:00:5f:d1:ef:33:b2:e6:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:30:1F:04:1F:CC:C6:4D:66:5C:42:DE:81:F9:76:7C:A1:C4:45
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEEwHwQfzMZNZlxC3oH5dnyhxEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:0c:0e:5e:cf:1d:07:fb:cd:3d:54:a6:32:b6:46:77:f7:2b:
00:7b:1d:71:f8:0f:a1:54:46:c4:88:70:b5:ad:0d:28:12:fd:
45:b4:81:a9:1b:a4:ed:de:3a:4a:85:3e:36:af:59:9c:3e:cd:
7e:a7:aa:45:69:4c:82:e9:e6:87:8f:a7:70:7a:31:7d:3a:68:
fa:f1:fd:5f:ed:81:09:10:9e:72:05:08:69:3c:6d:49:24:a4:
e8:a7:8f:62:04:8d:d4:63:50:57:ae:fe:42:b6:f0:57:65:14:
fa:09:1f:b7:7b:28:fa:c4:43:0a:25:94:d6:10:f2:8e:a3:50:
8c:99:02:7d:f1:c1:64:f8:5a:3c:6e:0e:2c:d6:09:99:cc:30:
f6:df:f6:91:16:33:da:d1:af:16:03:92:61:32:79:ca:69:5d:
37:26:62:ab:f8:fc:6f:52:48:2e:3e:16:c7:98:71:76:71:33:
7a:aa:84:49:e1:80:7d:a7:54:ef:1a:d2:cf:2d:6a:21:3a:71:
de:84:43:a8:d7:90:45:56:8b:ae:70:a7:0f:0b:a9:3a:77:30:
f4:c5:83:19:c2:a5:fa:23:1c:7d:66:14:c1:4b:72:18:9b:6d:
70:4c:64:73:49:68:1b:7e:a2:66:54:a0:76:1c:c5:87:fa:81:
12:5f:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:23:17 2025 by rpki-client