Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MZYRd7FtrfI8LYLFKkVOz5eI0hs.roa
File: MZYRd7FtrfI8LYLFKkVOz5eI0hs.roa (raw, json)
Hash identifier: oHgwhpUYN44XCuHiF6zvvBOeSOjstk95UvhKfnrVAbg=
Subject key identifier: 31:96:11:77:B1:6D:AD:F2:3C:2D:82:C5:2A:45:4E:CF:97:88:D2:1B
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D0C355EF833E77BF145501EF54E63B39C
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MZYRd7FtrfI8LYLFKkVOz5eI0hs.roa
Signing time: Mon 15 Jan 2024 08:20:40 +0000
ROA not before: Mon 15 Jan 2024 08:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:35:5e:f8:33:e7:7b:f1:45:50:1e:f5:4e:63:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 15 08:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31961177b16dadf23c2d82c52a454ecf9788d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f7:10:7f:7b:eb:dc:a9:fd:95:7e:df:ba:6a:
06:d1:4f:16:d3:cc:c0:ea:46:be:88:14:84:17:01:
84:83:1b:44:7b:13:fa:1a:b0:af:3a:35:66:c9:82:
2d:35:4e:09:45:0e:25:6f:8f:0c:c2:40:57:7b:bf:
ea:18:78:ca:5b:08:6f:82:da:5a:ad:13:e1:9d:08:
66:3d:5b:3a:ee:43:27:d4:25:5f:a3:18:a9:3a:44:
88:62:a2:d0:25:95:a4:91:cb:e8:10:34:d6:d3:80:
88:f1:da:78:1c:4c:5c:1a:5d:36:3a:43:f5:ae:5f:
6d:fa:dc:55:e0:f0:48:65:f0:b8:dc:b6:bf:3e:f0:
b6:fb:cb:2c:0d:88:7d:83:a9:cb:a4:6e:5d:f8:00:
07:d5:2e:88:39:d9:3a:e3:a1:56:42:66:7d:f3:e4:
dc:8d:ea:64:a8:c2:1e:f2:7b:db:fd:f1:99:d5:42:
f5:c6:ae:cd:c2:cd:a5:2c:de:df:93:6b:ef:42:bc:
a1:bf:62:af:63:da:bf:4e:ac:5a:6f:77:6f:0e:9d:
0f:f3:ac:c3:74:36:a8:d0:fb:4a:c6:86:2a:01:81:
ae:b4:72:2a:70:b8:03:1b:a6:f4:28:c8:87:b9:93:
06:ab:89:ef:25:33:cb:4c:b0:90:7c:8a:8f:81:c7:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:11:77:B1:6D:AD:F2:3C:2D:82:C5:2A:45:4E:CF:97:88:D2:1B
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MZYRd7FtrfI8LYLFKkVOz5eI0hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:3d:e6:18:8c:f4:83:01:6b:fa:6c:ff:cb:8a:ac:9c:5b:cd:
3a:d8:54:6f:a9:fa:29:c6:6b:4d:c6:52:aa:01:58:71:8d:25:
2e:11:35:a3:19:b1:6c:34:44:6f:73:d2:95:a6:54:d9:44:0b:
fd:02:f9:c6:c6:02:af:fb:00:3a:0f:2f:a6:d6:28:3b:11:7d:
6c:eb:16:82:e6:c0:fb:d0:38:d0:ee:2a:81:ea:80:fe:b8:f7:
50:38:44:7d:75:a3:5d:1d:eb:37:ed:9e:00:8d:1f:4e:e9:2a:
3a:ad:6d:c8:a2:29:e7:64:67:46:78:08:4e:ae:2d:f0:67:a2:
14:47:d9:d3:24:48:22:3b:8c:e7:a3:f1:1f:8f:f7:1b:99:f1:
c8:73:99:e5:97:07:fd:ef:2e:9c:be:4b:22:8b:39:57:87:fc:
f7:3b:75:4b:d3:46:58:ca:84:fa:80:aa:ee:71:17:d6:76:ad:
ac:a7:dc:83:2d:ad:ff:18:a5:fd:c2:eb:1c:b4:b9:6c:89:77:
a7:93:ef:4d:68:54:60:a6:8d:8e:7d:a0:03:9f:2f:bd:a5:01:
e0:58:32:b6:83:93:f5:93:cc:03:7b:0a:18:fb:9d:93:42:d1:
5a:9d:d5:5a:9e:02:f1:d8:87:78:19:bc:c2:77:26:ad:a9:6c:
08:62:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:32 2025 by rpki-client