Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlsg_NzTisifVKKkUffAbdMybsw.roa
File: mlsg_NzTisifVKKkUffAbdMybsw.roa (raw, json)
Hash identifier: YEvY+bsmBixF2oh2B0QtqNiuhVQpdmNsGTThSRCGNMs=
Subject key identifier: 9A:5B:20:FC:DC:D3:8A:C8:9F:54:A2:A4:51:F7:C0:6D:D3:32:6E:CC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C94A879564CE4BF6C3A641D361E94EFF7
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlsg_NzTisifVKKkUffAbdMybsw.roa
Signing time: Sat 23 Dec 2023 03:11:58 +0000
ROA not before: Sat 23 Dec 2023 03:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:94:a8:79:56:4c:e4:bf:6c:3a:64:1d:36:1e:94:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 03:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5b20fcdcd38ac89f54a2a451f7c06dd3326ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:74:78:ed:ac:02:9c:2a:ce:86:f5:75:35:
26:56:85:bb:6e:c8:2e:28:a8:80:29:0f:0b:f3:ea:
8e:52:e6:17:d0:7c:5b:3d:2f:e8:1e:6f:66:63:30:
cb:7e:16:25:74:00:c8:6d:c0:db:3e:31:a3:c7:10:
9e:f8:c7:7c:de:55:f7:81:a3:9f:2d:ac:d6:7a:c3:
f3:de:4d:aa:1c:74:2f:ea:f5:e1:0c:57:d3:62:ae:
8b:22:ce:ac:5f:91:f0:8d:04:c5:22:b6:fc:0e:4e:
23:10:b3:ca:f5:f9:8f:80:25:ba:ff:de:0d:c7:da:
5a:ef:a6:c9:83:90:98:80:38:e5:73:34:f9:c1:5c:
01:33:91:67:d4:9c:73:57:53:dd:3d:ce:d1:96:6e:
4f:d4:af:70:67:84:3a:ab:68:16:fa:ee:46:a4:cd:
d8:58:12:aa:c6:cc:41:af:86:ef:d4:75:49:d5:98:
81:4f:a5:6a:fb:e8:63:84:fc:4b:88:77:ef:7d:02:
b7:ee:76:4e:bd:ce:85:5b:44:9c:1a:70:ba:81:07:
69:84:c1:21:33:4d:47:8b:b5:d7:d0:df:75:a2:46:
28:86:4c:80:2f:13:48:03:c5:bb:f9:d6:6c:b2:e9:
62:53:7b:b8:1a:46:35:1c:8b:51:82:a9:cf:80:b7:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:20:FC:DC:D3:8A:C8:9F:54:A2:A4:51:F7:C0:6D:D3:32:6E:CC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mlsg_NzTisifVKKkUffAbdMybsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:b4:58:c4:59:13:9a:e3:d5:e4:39:f5:f3:22:26:70:ff:04:
68:69:e5:3f:a6:6f:7f:3d:03:40:30:be:55:23:f6:51:05:34:
51:28:1e:49:a7:07:c4:15:6f:9f:0f:1c:32:22:34:c5:db:f1:
e4:38:14:77:5b:f4:c5:7b:cc:8b:12:cd:36:a1:d6:98:2e:38:
31:70:ec:72:9a:ff:e3:e3:98:35:d1:b7:11:f0:3a:58:64:6e:
89:03:d4:f7:35:55:3b:14:38:c0:d3:32:1e:a1:7b:70:53:19:
f7:bf:2c:c4:2d:c5:28:a4:21:40:5f:c4:1a:b8:b2:dd:48:e5:
8b:be:06:cd:b2:44:f4:3d:3e:81:13:70:13:60:cb:13:9f:7f:
7e:79:97:de:95:95:0e:aa:60:fc:6d:18:23:ea:f3:56:72:c4:
15:a8:c1:28:37:cb:78:bc:17:09:a1:ff:7d:d3:78:95:02:12:
3d:e5:b3:f7:77:4a:ba:13:e6:07:94:8a:9f:57:7f:7c:6d:d5:
c0:68:46:b6:d0:07:87:05:bd:ac:f0:87:0b:0e:72:f9:03:6f:
4c:91:04:a5:0c:f1:81:1d:a5:c1:14:b8:56:32:77:48:06:76:
9b:29:28:3f:4e:ef:d4:b6:b0:23:cb:a2:69:29:d9:3f:20:96:
7c:9f:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:41 2025 by rpki-client