Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MYY6MTuCQjCh5zgO1MQolK0fyCg.roa
File: MYY6MTuCQjCh5zgO1MQolK0fyCg.roa (raw, json)
Hash identifier: Y78aWymk1ZRN9UYHcrXAPVXHHHxV8y4b3SRI1q7ZEZI=
Subject key identifier: 31:86:3A:31:3B:82:42:30:A1:E7:38:0E:D4:C4:28:94:AD:1F:C8:28
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D52FD78793ACB50900F95583230F4EDF9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MYY6MTuCQjCh5zgO1MQolK0fyCg.roa
Signing time: Mon 29 Jan 2024 02:12:39 +0000
ROA not before: Mon 29 Jan 2024 02:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:fd:78:79:3a:cb:50:90:0f:95:58:32:30:f4:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 29 02:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31863a313b824230a1e7380ed4c42894ad1fc828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:34:1d:40:71:03:a7:7b:5c:eb:9a:78:e8:
3a:b0:50:6d:56:3b:8b:ed:75:86:59:e5:38:8e:f7:
6e:52:c3:47:4c:70:77:ff:c2:2d:da:55:74:35:d2:
01:06:5f:78:11:3f:95:92:48:df:64:f1:d3:ae:94:
15:ee:d2:8a:bf:39:18:f6:b8:e2:fc:22:b5:9a:9e:
ad:63:79:88:cd:06:23:37:b7:55:00:51:01:f1:5a:
91:07:4c:0b:76:31:4c:06:0c:dc:48:5d:9b:65:4b:
23:5e:13:0e:78:e2:c9:8c:aa:6c:0a:0a:31:d1:73:
f2:6a:2d:25:25:89:bb:6c:21:96:a9:e7:75:68:c3:
1e:97:fe:6f:3a:3b:cc:da:53:10:c9:22:9c:27:2d:
d8:b2:65:b4:59:c6:de:03:f7:1a:f2:c3:2e:18:ef:
2d:d2:40:ad:2d:33:8c:e0:b0:7f:2e:ef:41:9d:28:
94:f5:03:a5:32:be:b2:0d:85:ae:ea:43:c9:df:e0:
f3:04:e4:ce:50:a8:16:d4:4c:65:a8:4d:62:ba:47:
98:f3:8a:a0:bd:be:91:34:6a:64:44:4d:e8:84:10:
b0:83:18:5f:76:ef:a9:d7:77:0d:e1:01:0c:45:f5:
75:a7:16:f3:58:c5:d9:cb:07:51:0f:20:4b:17:0c:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:3A:31:3B:82:42:30:A1:E7:38:0E:D4:C4:28:94:AD:1F:C8:28
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MYY6MTuCQjCh5zgO1MQolK0fyCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:e1:68:f5:e0:19:6f:ef:31:71:cf:33:e6:6c:ec:69:07:e6:
f6:e8:0d:2c:69:73:e4:01:2a:9c:35:95:0f:66:2d:9f:48:6f:
ea:03:f6:1e:4e:cd:0b:fb:f7:34:b3:6d:09:4d:77:a1:4e:ee:
08:86:c4:82:b0:06:b9:f4:25:0b:65:e8:70:c2:b6:88:89:9d:
87:02:e8:3a:19:c9:77:c9:04:29:43:a7:4c:2f:e4:19:35:e2:
f0:a7:fa:a2:09:39:f9:b8:68:b7:cf:44:72:19:1b:82:9b:bf:
28:9f:4b:e5:ab:c5:23:32:a6:ae:90:f2:aa:c7:a8:b7:7f:be:
9a:48:83:81:8b:7c:6b:f2:bc:9b:b6:b9:76:05:17:bf:ea:10:
91:33:08:94:ae:7b:a0:dc:cd:b2:4c:60:b9:1a:41:7d:6e:e7:
70:f5:55:5c:90:ce:86:05:25:a8:98:48:25:24:83:8a:1c:31:
2f:21:b8:bf:79:78:b8:59:3d:ac:ad:55:06:49:e7:79:7a:e8:
10:f9:e9:ba:6d:c0:a4:41:f4:e8:54:cb:d0:50:5c:b2:5a:13:
77:d1:e1:03:bb:cb:c4:ee:fb:0d:a7:fc:4b:4f:91:1a:ee:cd:
8f:7a:da:78:f3:b2:8c:21:0b:8b:28:9d:f9:67:93:01:8a:c5:
f8:c4:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:49 2025 by rpki-client