Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MiPHjkBgBoFiyl9qPiVUXeysM2U.roa
File: MiPHjkBgBoFiyl9qPiVUXeysM2U.roa (raw, json)
Hash identifier: OsH2x5FK6SS6ku3kYGvae/dTti8nwu984hnaGNi9LXQ=
Subject key identifier: 32:23:C7:8E:40:60:06:81:62:CA:5F:6A:3E:25:54:5D:EC:AC:33:65
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E2D6C23818FAD390F327CB28A6B6656AA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MiPHjkBgBoFiyl9qPiVUXeysM2U.roa
Signing time: Mon 11 Mar 2024 12:10:45 +0000
ROA not before: Mon 11 Mar 2024 12:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:6c:23:81:8f:ad:39:0f:32:7c:b2:8a:6b:66:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 11 12:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3223c78e4060068162ca5f6a3e25545decac3365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:89:6f:34:2f:41:bc:13:fe:2d:15:53:19:
c8:cf:77:73:b3:12:16:80:fe:e3:b1:7e:b8:ae:e2:
c6:40:ce:21:f9:5c:0c:f9:02:73:f9:2a:c6:e2:f8:
4c:36:4c:cf:05:d2:87:f9:00:d0:33:3b:29:ca:d7:
7c:2e:b7:6e:00:bc:92:91:06:27:4e:93:be:23:99:
42:1c:17:12:45:7d:8e:e1:58:fb:35:f9:b4:ea:6b:
5b:3d:ff:53:76:85:e4:04:7f:26:92:34:cb:bc:10:
c3:f7:1e:60:35:bd:fb:97:9e:d4:34:f6:fd:dc:4f:
7d:1a:f8:23:91:90:9b:ff:fa:5a:26:0f:47:17:6f:
91:1e:7b:54:53:49:36:fc:ba:0a:cb:cf:44:4e:a2:
6a:9f:26:9a:1c:b7:a8:cc:2b:7a:72:69:0e:86:dd:
9a:ad:78:91:9c:0b:3a:8a:42:89:15:30:ac:14:88:
4c:2d:22:80:10:a0:e7:20:fa:85:e7:cd:a3:d0:11:
7e:7d:0e:e7:23:f2:3b:fd:7d:dc:f7:14:c7:9a:a7:
79:71:c0:11:af:50:4d:65:f3:72:42:c7:85:5e:7c:
f2:b8:4c:0d:e0:f2:3d:e4:4d:e8:6c:dd:d8:e4:25:
9a:f9:a2:33:4b:20:27:fe:56:3e:9c:f4:7a:ea:18:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:23:C7:8E:40:60:06:81:62:CA:5F:6A:3E:25:54:5D:EC:AC:33:65
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/MiPHjkBgBoFiyl9qPiVUXeysM2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:5e:23:e7:5e:1e:bf:0f:d2:53:5f:73:7c:a4:92:ec:5d:08:
e1:ac:be:15:0b:33:36:2f:f9:16:71:ec:ec:eb:e9:84:08:2d:
0c:50:44:d2:3a:fd:db:54:e7:d7:20:cd:fd:2d:48:91:38:0c:
25:81:3a:08:a5:b1:2c:cc:05:e7:e5:e7:43:30:39:7d:19:21:
2f:db:3b:33:76:f6:8d:58:71:b7:25:d5:cd:62:4d:22:4e:50:
b2:b6:99:b0:f6:78:35:80:7f:0c:6b:eb:36:78:f7:7e:65:b4:
6a:e7:33:1b:b2:94:87:c4:26:99:d5:7b:b4:b7:75:b2:b3:e3:
76:c9:fe:8b:9c:ee:76:ed:82:2a:9f:b6:96:cc:21:d1:06:05:
7d:19:e1:5f:a1:b2:77:cf:2c:99:1f:dd:68:e1:d4:7b:31:33:
bc:fb:76:6d:6e:29:78:76:b2:66:bc:e6:4f:ac:02:02:30:f9:
2b:87:a7:94:ad:56:2e:bf:f8:75:67:09:99:6e:68:2e:c2:78:
7c:d8:87:bf:1b:47:a1:47:74:59:23:f2:bc:91:ef:9b:88:f1:
65:cb:da:14:73:ba:a8:b8:98:e7:4b:9b:9f:17:92:68:5e:34:
e7:51:44:4a:27:2f:e1:02:40:3f:f9:0c:ef:4f:20:33:cd:ce:
0f:1d:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:56 2025 by rpki-client