Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MH25ACrz8TAPfopoSXa7iLFfJ_E.roa
File: MH25ACrz8TAPfopoSXa7iLFfJ_E.roa (raw, json)
Hash identifier: IMfm1O+HeNy/1R1IQg266Ff5ZZJFoumBNrK0Mz+kg6c=
Subject key identifier: 30:7D:B9:00:2A:F3:F1:30:0F:7E:8A:68:49:76:BB:88:B1:5F:27:F1
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C95156BD1253CA0CFBC4E7F208C976B8C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MH25ACrz8TAPfopoSXa7iLFfJ_E.roa
Signing time: Sat 23 Dec 2023 05:10:58 +0000
ROA not before: Sat 23 Dec 2023 05:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:95:15:6b:d1:25:3c:a0:cf:bc:4e:7f:20:8c:97:6b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 05:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=307db9002af3f1300f7e8a684976bb88b15f27f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:c9:c0:6d:66:d6:d1:9a:4a:9c:df:28:ea:
a2:42:9d:20:44:8e:0c:8f:e9:92:5f:02:e6:65:d6:
38:0c:80:22:33:4e:a0:48:59:1a:19:b5:85:1f:8e:
6b:41:b9:14:13:0e:5c:f6:92:a2:2f:70:2e:cc:d8:
9e:c5:17:69:20:80:51:24:b8:cc:4f:06:5f:de:fd:
f5:96:24:e0:b9:e5:a4:e0:b0:37:00:be:e8:36:16:
b4:cf:5f:54:38:bb:da:71:db:8a:d5:32:d1:76:fe:
84:24:a8:4c:da:c2:e1:11:a2:c0:fb:cd:64:64:63:
5e:2e:2b:49:2b:4d:0c:dd:b7:24:42:cf:75:bb:96:
6f:9b:a8:27:6d:94:37:eb:50:00:3d:54:ef:35:02:
d0:f3:eb:25:95:49:03:25:66:9a:ce:18:fb:36:8d:
0c:4f:f0:cb:15:27:47:6b:5d:82:a3:d6:ed:af:18:
2e:10:37:0a:e5:96:fb:5f:ac:2e:00:35:8a:21:3d:
4d:26:e2:55:5f:bf:91:48:7d:2d:c8:b2:d6:31:d1:
3a:21:74:45:ab:82:ee:a5:84:ba:28:46:4c:ad:c2:
04:45:d5:8d:64:a7:a3:7e:a3:14:3c:ab:8b:8c:99:
ed:b0:d7:86:98:6f:e5:60:05:da:b6:ed:ce:cb:62:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7D:B9:00:2A:F3:F1:30:0F:7E:8A:68:49:76:BB:88:B1:5F:27:F1
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MH25ACrz8TAPfopoSXa7iLFfJ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:4b:37:a7:64:05:a1:74:4f:d8:e5:02:e2:6a:6c:30:9f:4e:
76:d3:78:e0:05:cf:ff:ae:22:29:88:cd:86:be:d4:29:8a:4a:
2f:1a:7e:61:fe:62:7f:14:51:80:e1:c3:ab:13:1c:66:63:79:
aa:9c:b0:95:4f:46:b9:e4:90:87:28:57:1a:90:f6:16:59:f7:
1d:ef:1d:90:bd:14:ec:82:c5:b9:e2:dc:e2:62:ee:41:2d:33:
aa:5f:55:2e:f9:00:ea:39:11:bd:68:34:70:21:0b:d3:87:6d:
73:27:11:27:de:4a:34:10:c0:45:d2:58:01:d9:bf:e8:1d:25:
cf:a1:ea:74:4b:7b:93:e8:98:c3:cb:a7:a2:f7:03:78:f2:ff:
ad:a6:7a:d4:e2:d7:bd:e0:63:bb:15:8c:54:7e:e2:89:e9:4c:
f5:fa:05:2a:a9:bd:ec:50:19:de:51:3a:82:68:0b:d6:90:29:
c8:f8:24:09:24:e1:9a:18:a4:7f:61:42:88:93:ca:55:99:dd:
7b:fb:2d:c8:9f:dd:09:c6:0c:01:cf:9b:1b:9f:d5:67:55:7b:
da:cf:e1:6d:aa:35:a7:32:0d:ba:1c:18:92:b0:42:20:1b:25:
9b:bb:f9:54:2d:14:bc:76:38:75:12:01:e4:53:cf:b6:0e:4d:
83:14:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:50 2024 by rpki-client on console-ams.rpki-client.org