Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mn3vuY9-DVPSURUw9GeAsGzEDW8.roa
File: mn3vuY9-DVPSURUw9GeAsGzEDW8.roa (raw, json)
Hash identifier: u5yu56WJ0K6UUj4Ckh0amsLZFGSaJgqc1DPfIuHhGow=
Subject key identifier: 9A:7D:EF:B9:8F:7E:0D:53:D2:51:15:30:F4:67:80:B0:6C:C4:0D:6F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E02EFB7F385384CA186D3E1DDE672A552
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mn3vuY9-DVPSURUw9GeAsGzEDW8.roa
Signing time: Sun 03 Mar 2024 06:10:48 +0000
ROA not before: Sun 03 Mar 2024 06:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:02:ef:b7:f3:85:38:4c:a1:86:d3:e1:dd:e6:72:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 3 06:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a7defb98f7e0d53d2511530f46780b06cc40d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:d0:70:89:d4:cf:61:7a:d1:43:fd:77:b1:
44:b7:fa:d6:54:65:90:ad:a8:d4:56:57:b9:f1:46:
04:d8:66:a2:24:9d:ec:09:40:b0:75:45:8e:96:f8:
0d:c2:77:97:9b:34:54:a7:42:cc:49:f3:cd:d4:de:
70:f8:c7:14:6a:cd:21:67:8d:dc:35:0c:08:cd:b0:
fe:b2:50:fe:be:54:9a:2e:dc:9d:a3:a6:86:4f:dd:
87:9b:76:30:10:ac:99:56:12:7e:85:b7:c3:ce:3d:
04:ea:9e:cf:95:12:d3:69:72:72:48:68:6e:39:5d:
6e:a5:88:38:03:39:5b:95:e5:d8:2b:c5:6a:1f:03:
41:75:db:09:03:3d:a5:b3:3b:3c:48:d2:d9:bc:e2:
62:19:27:ea:2d:66:db:48:3c:f1:14:0a:12:95:41:
ee:25:34:dd:90:89:5c:cf:d1:67:a6:01:45:74:ce:
89:c0:b5:f5:e3:47:8e:c8:ca:81:c5:41:bc:08:03:
92:fa:67:df:d4:38:87:fe:df:a9:07:be:2e:07:76:
78:a8:92:9b:3c:61:88:80:a2:f2:c5:77:e3:01:30:
3a:f6:d4:36:34:d8:7e:d6:a8:0b:f5:d0:03:b7:9c:
fb:9d:ea:d2:b2:94:0b:52:d9:a9:13:89:7a:31:19:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:EF:B9:8F:7E:0D:53:D2:51:15:30:F4:67:80:B0:6C:C4:0D:6F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mn3vuY9-DVPSURUw9GeAsGzEDW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:9b:0e:93:78:c9:9a:88:c2:3d:86:01:d8:ed:dd:ee:3c:8e:
62:57:2a:cd:9b:85:88:6f:2a:9a:14:09:24:6b:5a:b7:16:59:
d7:c6:a7:e7:9b:3c:5f:96:4d:84:d7:b5:75:6e:42:13:1c:10:
cf:91:b0:6e:ee:1b:f5:15:88:27:ba:2d:fe:2a:37:73:49:42:
8b:84:2a:a2:f6:dd:6d:20:84:99:1e:46:16:cd:5a:8e:96:5e:
64:be:b2:e8:36:61:c4:ec:a1:a1:a2:36:2b:9b:96:ee:72:1b:
3d:5d:d7:12:1e:2d:5f:45:3f:f0:92:e5:7d:d1:81:6a:2d:35:
f8:38:25:cf:b6:50:af:25:7d:09:2d:ea:f1:fb:95:da:62:5f:
c7:14:14:c3:9d:7c:4a:2f:4f:ae:3c:57:be:0d:41:5b:9d:47:
56:14:8a:3a:2f:d2:93:20:ec:35:01:11:d6:38:71:2b:17:c2:
1e:74:46:f4:95:60:f4:36:4d:e4:8f:4e:5a:58:da:81:e8:86:
bf:7c:f9:02:af:73:d7:c9:55:01:e1:19:29:8d:fb:91:16:eb:
71:48:0e:50:de:40:5e:92:32:27:20:23:e0:aa:e9:6c:0d:ce:
54:de:ce:12:31:d1:06:a4:19:e0:6a:46:75:6f:c5:bc:ff:50:
e5:4e:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:31 2025 by rpki-client