Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MVvsV-k4CdGyGjCqcFrrmyfLHUE.roa
File: MVvsV-k4CdGyGjCqcFrrmyfLHUE.roa (raw, json)
Hash identifier: EcNOCc8UFt4rB0mx2sqSu/cP78aZ6H4JvA8gbJTOTws=
Subject key identifier: 31:5B:EC:57:E9:38:09:D1:B2:1A:30:AA:70:5A:EB:9B:27:CB:1D:41
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DF64142C922D36B8C47ED37F15F561344
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MVvsV-k4CdGyGjCqcFrrmyfLHUE.roa
Signing time: Thu 29 Feb 2024 19:04:48 +0000
ROA not before: Thu 29 Feb 2024 19:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:f640:a692/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:41:42:c9:22:d3:6b:8c:47:ed:37:f1:5f:56:13:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 29 19:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=315bec57e93809d1b21a30aa705aeb9b27cb1d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:b9:b2:47:3d:4b:25:30:fa:6e:ef:ec:dc:
4f:91:82:4b:7f:71:76:38:55:17:e7:4b:d5:1b:95:
14:85:fe:af:e1:92:52:bc:1a:8d:ae:11:01:a9:a1:
52:ff:a8:8b:d0:85:16:9e:80:6e:47:49:80:fc:d9:
75:6e:13:39:03:89:fe:26:3f:d1:48:6d:82:74:d8:
d2:8d:2d:bd:50:aa:63:04:85:3d:4d:a2:7a:a7:29:
c4:4b:7c:2d:1d:16:a5:de:df:a7:ed:e0:01:a6:4f:
4c:d0:75:1c:aa:f9:fe:ae:85:39:65:80:76:1a:e4:
52:38:ef:bb:2e:ea:b5:df:fb:0b:1c:30:8f:02:28:
83:8d:e1:14:86:46:51:17:58:f2:1f:f4:d1:5a:90:
52:d7:25:eb:53:25:89:2b:18:af:60:47:0e:d8:d9:
c8:42:4e:50:21:c0:c4:28:91:06:d6:fd:bb:3c:fd:
5d:53:36:fe:31:34:eb:de:bd:af:e9:ec:33:d7:d7:
29:95:f4:e4:89:35:ef:88:13:76:c7:4e:5e:7d:6f:
57:a4:c4:0e:42:bb:04:d5:23:a2:ee:55:ce:36:c9:
7f:6c:3d:ab:5b:92:26:f5:ee:c2:6b:53:cc:30:84:
8b:ed:fe:5f:a2:9d:cb:a8:06:77:1f:7c:fa:21:52:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:EC:57:E9:38:09:D1:B2:1A:30:AA:70:5A:EB:9B:27:CB:1D:41
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MVvsV-k4CdGyGjCqcFrrmyfLHUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:e4:df:07:3d:33:6a:75:dd:12:aa:17:b5:fa:8c:03:f3:24:
9a:be:ae:55:f7:cc:3e:76:97:2a:ef:0f:e9:f7:78:48:7b:3b:
5e:06:4d:67:1a:92:8c:37:2c:c4:c5:34:45:6a:e0:1d:09:23:
06:c9:92:1a:13:bb:83:45:63:f7:41:c0:8e:8e:7c:1d:1c:bd:
97:f0:ae:b6:0d:76:22:03:16:3b:b3:34:4c:8b:ce:a8:b1:ba:
9c:73:ee:b5:42:f2:07:48:a2:f8:55:e4:b6:ba:c8:73:0a:37:
46:4a:a0:83:ea:65:63:16:97:cc:a8:fd:af:0d:f8:40:db:0e:
75:f7:ea:6b:5c:c7:09:fb:e3:fd:bf:27:ad:42:6e:b0:72:c4:
c5:fe:b1:23:5f:e8:47:62:85:4a:09:62:c9:6b:ba:03:33:fa:
8e:be:b5:10:c8:f5:c0:ef:6e:01:34:ed:dc:83:74:78:9b:d3:
48:01:1f:26:ca:1e:53:91:ae:6c:3a:5c:a9:68:e2:34:2e:d0:
a5:38:ce:5f:ce:99:0a:a7:c4:8c:d8:fb:0b:c3:ce:75:63:60:
ae:32:53:55:e0:28:4d:79:4f:da:04:dc:ff:a8:00:60:9d:bc:
3f:45:d7:d9:52:01:0a:44:b5:1e:01:bc:2c:06:48:db:51:c6:
3d:14:88:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY32QULJItNrjEftN/FfVhNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI5MTkwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTViZWM1N2U5MzgwOWQxYjIxYTMwYWE3MDVhZWI5YjI3Y2IxZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQK5skc9SyUw+m7v7NxPkYJLf3F2
OFUX50vVG5UUhf6v4ZJSvBqNrhEBqaFS/6iL0IUWnoBuR0mA/Nl1bhM5A4n+Jj/R
SG2CdNjSjS29UKpjBIU9TaJ6pynES3wtHRal3t+n7eABpk9M0HUcqvn+roU5ZYB2
GuRSOO+7Luq13/sLHDCPAiiDjeEUhkZRF1jyH/TRWpBS1yXrUyWJKxivYEcO2NnI
Qk5QIcDEKJEG1v27PP1dUzb+MTTr3r2v6ewz19cplfTkiTXviBN2x05efW9XpMQO
QrsE1SOi7lXONsl/bD2rW5Im9e7Ca1PMMISL7f5fop3LqAZ3H3z6IVICTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDFb7FfpOAnRshowqnBa65snyx1BMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTVZ2c1YtazRDZEd5R2pDcWNGcnJteWZMSFVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFDk3wc9M2p13RKqF7X6
jAPzJJq+rlX3zD52lyrvD+n3eEh7O14GTWcakow3LMTFNEVq4B0JIwbJkhoTu4NF
Y/dBwI6OfB0cvZfwrrYNdiIDFjuzNEyLzqixupxz7rVC8gdIovhV5La6yHMKN0ZK
oIPqZWMWl8yo/a8N+EDbDnX36mtcxwn74/2/J61CbrByxMX+sSNf6EdihUoJYslr
ugMz+o6+tRDI9cDvbgE07dyDdHib00gBHybKHlORrmw6XKlo4jQu0KU4zl/OmQqn
xIzY+wvDznVjYK4yU1XgKE15T9oE3P+oAGCdvD9F19lSAQpEtR4BvCwGSNtRxj0U
iF0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:12 2025 by rpki-client