Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mwlNNvYJLhdGnJm0QG7llJ8rUnk.roa
File: mwlNNvYJLhdGnJm0QG7llJ8rUnk.roa (raw, json)
Hash identifier: NfcpVDmwfz1HpSukd52giPAvpUht+LM29KZdh9ukjVk=
Subject key identifier: 9B:09:4D:36:F6:09:2E:17:46:9C:99:B4:40:6E:E5:94:9F:2B:52:79
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C95F3E4DA3C4822F47E8D922DC969D670
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mwlNNvYJLhdGnJm0QG7llJ8rUnk.roa
Signing time: Sat 23 Dec 2023 09:13:58 +0000
ROA not before: Sat 23 Dec 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:95:f3:e4:da:3c:48:22:f4:7e:8d:92:2d:c9:69:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b094d36f6092e17469c99b4406ee5949f2b5279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:84:de:39:72:43:e2:19:eb:00:a7:a3:56:
ae:10:0c:77:5e:c0:3f:e9:bb:b6:e7:4e:90:c8:b2:
88:6f:7b:3f:a3:60:26:a7:17:e8:ab:b1:64:38:41:
24:9d:1e:a4:9e:5c:fe:06:bb:8b:40:3c:dc:9a:55:
da:73:e7:4b:f6:83:e7:f1:b4:b3:92:92:2d:81:77:
b2:62:75:3c:66:96:bf:83:69:e2:73:37:01:b0:a4:
a5:dc:76:7e:e3:38:f7:d8:0e:70:de:30:b9:3c:21:
d4:a9:ec:8d:cd:b0:cc:c2:86:44:c0:f0:c6:d7:64:
6e:8d:b8:be:cb:82:35:07:26:b1:7f:ef:e6:de:e2:
6c:01:c3:de:3f:0f:9e:02:f5:53:e0:ba:d9:05:cb:
89:d4:08:a1:80:5a:d8:a1:de:76:29:d5:2a:d1:ec:
41:9d:1f:a3:0f:3f:87:89:cd:d1:96:28:05:4e:1f:
fa:f5:59:e6:70:8f:3f:57:9f:10:7b:ac:e7:9b:d4:
3e:35:0a:64:b0:00:a6:35:21:b0:20:a7:07:cc:c8:
9c:3a:26:6f:7f:93:38:f9:79:f7:61:60:95:19:43:
62:b5:82:2a:cc:b5:6b:ca:3a:9b:32:b2:dd:05:9f:
6d:43:9d:4e:85:e6:2b:c1:27:77:68:81:5b:4f:14:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:4D:36:F6:09:2E:17:46:9C:99:B4:40:6E:E5:94:9F:2B:52:79
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mwlNNvYJLhdGnJm0QG7llJ8rUnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:cb:e8:e2:c2:3d:34:3b:69:02:36:32:ee:ed:b2:c2:12:d1:
71:63:0b:ce:6e:7a:22:ae:47:53:45:10:18:3f:0e:a9:0e:db:
cf:c4:cf:37:3b:b6:28:17:e7:02:3a:06:6d:df:dd:71:aa:8c:
6c:d0:4b:58:84:b1:3c:2f:64:f7:3d:7a:d9:99:79:76:bf:a2:
fa:06:86:5e:e9:56:c8:59:d5:25:e4:17:e8:e2:c7:db:78:6b:
06:3e:38:81:80:12:df:95:c2:fc:18:5d:68:a7:2b:bd:84:71:
ba:ff:3c:02:62:90:3b:b1:d7:cb:88:32:1d:4c:1b:8c:07:1c:
60:e9:17:fd:00:61:7f:51:68:d9:92:d6:b1:83:57:b3:9d:9c:
19:c4:02:44:db:1d:c0:79:1e:49:06:fc:6e:00:96:f3:2e:98:
11:d4:6e:8d:cb:2d:77:ba:81:cb:f9:9b:ab:ae:da:85:2c:21:
8f:7e:3d:7e:aa:3b:ea:92:1c:38:60:c9:83:54:5f:67:1a:b4:
78:59:2f:0b:9c:8f:26:9a:9a:14:f7:98:bd:33:b4:cd:1c:fe:
b4:e7:73:b5:44:dd:14:34:9b:3c:7f:ef:2f:8e:00:6c:59:cd:
34:30:62:e9:47:b7:68:ac:64:6b:57:0b:9a:46:5c:cb:ab:d1:
6c:29:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:00 2025 by rpki-client