Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MKyT_urZSS2DOb5_QXQUcXUOKYk.roa
File: MKyT_urZSS2DOb5_QXQUcXUOKYk.roa (raw, json)
Hash identifier: RB3SwI0nkublEHpqAmeFi8TCJALUzps5g1hCxsZ1LKM=
Subject key identifier: 30:AC:93:FE:EA:D9:49:2D:83:39:BE:7F:41:74:14:71:75:0E:29:89
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E691320D16B69EC9DEBA897EB96396B4A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MKyT_urZSS2DOb5_QXQUcXUOKYk.roa
Signing time: Sat 23 Mar 2024 02:10:44 +0000
ROA not before: Sat 23 Mar 2024 02:10:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:69:13:20:d1:6b:69:ec:9d:eb:a8:97:eb:96:39:6b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 02:10:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30ac93feead9492d8339be7f41741471750e2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:79:76:23:1e:fb:a9:de:35:73:de:6f:48:
bf:03:e5:13:9d:8c:4c:aa:78:fb:0c:98:70:d2:8b:
aa:82:59:ae:42:df:d9:1c:71:ff:34:4b:af:c9:0f:
f2:65:f4:64:0e:29:af:f3:e6:e9:6f:d4:a1:12:61:
d3:da:00:c0:01:ff:4b:fe:5b:47:69:7e:96:04:bc:
6f:ec:fd:25:64:53:f5:24:d7:ab:58:07:6b:15:aa:
7b:1a:a8:a6:b2:b2:20:b2:fb:31:c6:93:ad:29:5f:
05:94:d3:e2:21:23:c8:7e:d3:09:7b:01:92:a5:2b:
29:2e:f5:56:12:cf:52:33:d6:44:af:3b:88:b0:51:
ff:cf:4e:19:65:da:11:51:72:23:45:fa:43:5a:ea:
31:ff:25:f4:31:20:8e:da:5e:4d:7f:0e:7b:ab:1f:
2a:bd:4e:a8:f1:3c:d3:7e:df:22:8c:ec:27:74:0e:
35:6e:16:6b:d8:c7:94:5c:8c:60:68:f5:53:d4:c0:
47:4f:88:e1:c3:c9:f5:ba:22:9d:b8:54:a1:d0:1a:
5d:a5:f1:90:f7:b7:95:77:d3:79:2a:58:d3:89:3f:
83:8d:60:6b:f2:83:b1:74:fc:fd:e8:85:83:04:4f:
63:70:fc:e4:53:c7:81:02:e4:be:99:78:7e:16:d7:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:93:FE:EA:D9:49:2D:83:39:BE:7F:41:74:14:71:75:0E:29:89
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MKyT_urZSS2DOb5_QXQUcXUOKYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:89:65:c8:3a:35:84:e7:87:9a:13:44:e2:21:9d:9f:b7:c3:
59:f8:9a:ad:87:c5:72:78:2f:12:f2:fb:a3:67:e0:17:fd:ce:
b7:e8:f1:f3:68:b3:2f:8b:76:d7:ce:2b:f9:20:0d:3c:99:c2:
a2:67:b7:cf:07:b6:09:2a:df:a3:4e:64:b4:bd:7c:f1:f2:6d:
cd:77:15:6a:62:fd:bf:b7:af:78:6d:28:34:b3:80:1f:49:3f:
07:5f:e4:90:5d:4f:e9:15:eb:24:b0:c2:ca:3b:8f:2d:15:ba:
38:72:29:de:b2:c9:22:ad:7d:85:d3:76:24:af:c7:64:ee:30:
ca:82:ee:08:ce:80:a5:de:cf:e1:98:c8:fa:9b:28:bb:aa:54:
c5:7d:74:45:8c:bb:46:1d:7a:0e:1b:45:75:6d:7f:9f:4f:45:
a0:a0:8a:ba:e8:6e:9d:b7:f5:ce:47:f0:4b:21:f7:ca:7b:1e:
2e:61:04:68:f1:3a:e1:dd:ff:b6:50:ec:32:8f:6d:de:fd:da:
fb:61:b6:66:9c:40:d5:f4:e2:97:fc:06:d5:8a:fb:76:a9:c8:
07:64:0b:0a:01:be:02:b6:45:b1:66:2c:08:8a:f8:25:8a:8a:
b2:06:4e:c4:f7:21:5a:f1:50:d1:64:b4:a7:f9:5b:b3:b4:3f:
74:37:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:51 2025 by rpki-client