Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEX0RaTdstnQ2a004xDeStmN21U.roa
File: MEX0RaTdstnQ2a004xDeStmN21U.roa (raw, json)
Hash identifier: fCzA2VBMBqF/u254XRKx2i2CVj7zg2ltegNVB+45JDA=
Subject key identifier: 30:45:F4:45:A4:DD:B2:D9:D0:D9:AD:34:E3:10:DE:4A:D9:8D:DB:55
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E8C43EC1DD1651C1275FE7A5183D3BD19
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEX0RaTdstnQ2a004xDeStmN21U.roa
Signing time: Fri 29 Mar 2024 22:10:45 +0000
ROA not before: Fri 29 Mar 2024 22:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8c:43:ec:1d:d1:65:1c:12:75:fe:7a:51:83:d3:bd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 29 22:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3045f445a4ddb2d9d0d9ad34e310de4ad98ddb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:4d:55:ea:8a:f6:43:ac:97:b6:f9:80:a8:
be:0e:dd:40:73:87:05:82:9e:c5:e7:85:e9:6a:f2:
24:f4:9a:18:5b:a4:36:60:7a:d1:01:40:e4:24:18:
85:de:f7:26:5a:9c:11:ba:8d:68:d8:2f:ae:b8:95:
a6:72:21:be:b7:9e:59:d6:2b:b9:4a:83:04:46:c0:
1a:12:8e:27:d0:ac:97:fc:f3:fb:ae:b7:76:8a:5b:
11:72:c0:a6:a2:fb:d7:75:ee:96:a3:bc:23:44:14:
31:1a:ac:b5:50:8f:cc:0d:f4:f1:41:21:cd:56:41:
cd:78:df:36:8e:19:30:ec:f1:fd:88:73:59:0a:72:
67:c8:7e:51:2a:f8:dc:3d:ae:5a:26:da:0a:9b:e2:
04:95:8f:d2:b2:5d:16:b7:77:94:32:93:58:5f:17:
52:f5:57:a6:e0:89:76:d3:35:be:41:90:f1:95:36:
c4:69:c0:41:80:c3:0a:14:e7:0f:c2:57:f4:5b:e9:
37:72:c6:0e:d3:df:d6:46:77:2f:82:b7:8e:66:fb:
0f:47:9d:e7:4b:70:fa:7b:71:5d:ef:12:22:91:bf:
19:9a:92:e1:c0:06:e7:77:f8:d5:ed:05:2b:7b:ab:
c1:25:2f:56:e8:74:7c:bf:ee:b6:9b:c7:fd:23:41:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:F4:45:A4:DD:B2:D9:D0:D9:AD:34:E3:10:DE:4A:D9:8D:DB:55
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MEX0RaTdstnQ2a004xDeStmN21U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:52:40:dd:21:59:ce:ad:26:18:45:96:87:c7:da:6b:4b:74:
1d:9b:52:4b:12:5e:54:94:26:1d:71:bc:39:be:bc:16:3e:4d:
56:f3:46:94:0e:f1:87:93:89:b8:a3:f0:55:1d:bc:41:4e:73:
26:64:81:2b:3f:c5:0d:21:1d:bc:52:91:f2:5c:fc:8c:13:fd:
2d:2b:bc:93:86:cc:c5:2e:a8:a2:e4:a4:5b:15:74:35:36:2f:
f0:5c:bc:0b:d7:1b:0a:51:26:97:58:24:bb:32:44:c8:9b:5e:
6b:f0:80:5a:1f:2c:76:c7:ea:9d:a4:90:77:28:e4:35:12:81:
d0:67:30:48:54:04:fa:ac:5a:c7:0b:88:0c:45:fe:3f:4e:a0:
78:00:1e:e1:56:d0:5e:f0:2a:3c:90:ef:62:5e:70:ea:16:3e:
99:84:0d:c2:e3:79:32:f0:49:0d:2b:50:4d:47:b0:88:9d:fc:
a9:8e:56:0c:26:29:60:39:b6:64:97:89:85:b5:3a:af:1e:82:
d7:42:f7:70:76:36:b3:60:cb:80:a5:f3:28:34:20:ba:d6:38:
97:a7:dd:1e:37:af:18:9c:cc:63:41:e8:eb:77:a0:dc:7e:24:
5e:c0:55:a0:45:16:54:9a:75:19:73:07:db:4a:44:4b:03:fb:
5d:3e:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:01 2025 by rpki-client