Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MffX6zziBOJY7KsMlGXNocOCk1U.roa
File: MffX6zziBOJY7KsMlGXNocOCk1U.roa (raw, json)
Hash identifier: jaYASNhkmu2QmPhJT7XvsMFtuOtff4asUczK+TOKuyU=
Subject key identifier: 31:F7:D7:EB:3C:E2:04:E2:58:EC:AB:0C:94:65:CD:A1:C3:82:93:55
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF87056B008E7339B7432BAD979C98199
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MffX6zziBOJY7KsMlGXNocOCk1U.roa
Signing time: Thu 11 Jan 2024 12:12:40 +0000
ROA not before: Thu 11 Jan 2024 12:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:70:56:b0:08:e7:33:9b:74:32:ba:d9:79:c9:81:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 11 12:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31f7d7eb3ce204e258ecab0c9465cda1c3829355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:89:35:25:cf:f8:6d:2a:bd:69:b8:34:7f:
e7:68:67:f9:1d:a2:b1:45:fa:18:48:07:7d:3a:e5:
fb:c0:c7:f0:94:76:df:57:ef:cc:23:6b:9a:d0:83:
f8:d9:8e:2a:cf:f8:f0:40:c1:ea:5e:21:1d:77:70:
47:a8:37:11:93:a4:44:68:4c:d6:11:54:c2:54:35:
8c:4c:95:43:af:7f:37:00:0b:16:43:cc:20:73:f0:
2a:9c:4a:4a:ea:5a:01:40:9c:1b:16:8b:ea:dd:07:
60:28:ba:af:f2:cb:1a:93:fb:7b:b9:33:88:da:a0:
09:83:b9:0a:3a:ea:b6:09:0b:2d:c1:17:a7:58:dc:
ce:87:3d:78:25:1d:ae:c0:2e:c5:04:96:10:c7:1a:
8f:25:84:90:8d:41:43:ce:9e:fd:56:5b:10:c8:02:
46:b5:13:9d:9d:f6:a9:35:44:f3:80:f9:d0:6d:35:
13:cb:86:3f:80:dc:73:a5:39:94:d5:8f:d9:96:d0:
c2:86:2a:08:91:c0:68:5d:af:8e:99:b8:19:bf:cf:
1e:d4:d9:1b:02:4d:01:08:4e:b9:a1:bd:37:f6:93:
66:2e:0f:43:95:b0:47:ad:f3:0e:9e:97:1e:99:30:
1e:20:61:7c:87:8e:21:40:56:3a:bc:31:90:d2:4c:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F7:D7:EB:3C:E2:04:E2:58:EC:AB:0C:94:65:CD:A1:C3:82:93:55
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MffX6zziBOJY7KsMlGXNocOCk1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:02:ba:87:18:60:94:44:94:be:d2:64:b8:b1:e3:ad:28:39:
49:e1:9e:15:e4:aa:3d:ba:f2:09:cb:c3:33:fd:89:e6:ef:a4:
7b:09:b1:a2:f1:9f:ed:fe:98:f7:6c:b6:bd:0c:75:34:36:97:
f4:5a:78:1e:aa:82:fc:c4:98:a3:cf:8a:82:6f:e5:78:61:6e:
3d:88:10:0c:12:c9:e9:80:47:ec:62:c5:c2:47:bb:62:b3:09:
c2:1b:aa:1f:bc:2b:b4:b2:1f:68:85:d4:60:d3:20:11:d0:cf:
f3:0e:7c:04:88:b0:3a:07:cb:b1:d3:03:33:12:4d:5b:16:4f:
80:4d:68:61:52:a1:09:62:65:f7:a5:d8:fc:94:7c:cf:f0:3c:
d7:b2:12:96:f5:61:c9:51:3d:47:53:29:ab:68:4a:ea:72:bb:
ce:7f:83:cb:e8:33:c3:0a:2b:1d:68:d4:98:6c:30:dd:a3:a5:
32:17:77:53:47:5b:ad:98:b1:52:19:ec:59:9d:09:83:9b:7e:
fd:16:aa:47:b3:80:1b:35:23:58:61:09:1b:b1:3d:0e:1e:b4:
e5:2c:b6:13:84:44:16:7b:51:74:76:69:f1:34:a7:53:04:26:
fb:d0:9e:4f:d7:93:df:68:11:9f:66:f5:61:2c:9e:3d:d5:7d:
57:5d:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:56 2025 by rpki-client