Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MGIk430pPBiXbK_96DkIVYmjkZI.roa
File: MGIk430pPBiXbK_96DkIVYmjkZI.roa (raw, json)
Hash identifier: GxYFcJxBx8A6/BkVYwcDlJ17odUUcsVeuVTDE50HVzo=
Subject key identifier: 30:62:24:E3:7D:29:3C:18:97:6C:AF:FD:E8:39:08:55:89:A3:91:92
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01902F562A4BCA12A050316BB711AC6E07A6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MGIk430pPBiXbK_96DkIVYmjkZI.roa
Signing time: Wed 19 Jun 2024 07:11:34 +0000
ROA not before: Wed 19 Jun 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:56:2a:4b:ca:12:a0:50:31:6b:b7:11:ac:6e:07:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 19 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=306224e37d293c18976caffde839085589a39192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:27:85:58:73:38:50:1b:00:d5:63:b7:e4:
81:17:d4:2a:7b:3d:4e:8c:26:d9:3a:f4:27:92:b9:
47:ec:d0:2d:3a:eb:d4:4f:12:fd:09:51:98:38:4e:
a9:29:50:23:e9:fa:86:59:70:12:dd:68:79:9a:69:
c4:8f:a2:1e:c7:87:47:31:df:8c:65:9a:38:b7:e2:
75:94:a6:9a:0b:97:cb:ec:0e:3c:94:9d:e1:94:26:
7d:0c:12:b9:5f:a6:e3:99:96:b8:26:b3:7c:10:fc:
6f:58:6a:26:90:95:bc:d3:a9:02:af:0e:7b:7f:c5:
90:df:bd:9e:31:bb:3f:3e:c2:c1:9f:57:e8:a1:40:
39:4b:63:e0:cc:44:87:ec:52:7f:25:3b:b5:86:9e:
31:62:4b:31:aa:36:50:91:04:f4:8c:21:43:49:ec:
3e:88:5c:c7:f4:f1:11:55:2a:2f:1b:bd:b5:54:5b:
d0:46:ed:80:b1:91:5f:71:28:95:44:9d:a9:c0:32:
2f:f4:bb:69:de:1a:9e:5d:7d:f3:6b:99:ba:a3:c7:
aa:23:d6:1f:18:2e:29:9c:d0:7b:29:de:07:e5:11:
1f:84:b7:d4:ba:5c:53:e6:9e:f6:ab:3e:98:db:69:
97:52:7f:5f:26:1d:f9:33:b9:19:d1:a9:74:d2:1f:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:24:E3:7D:29:3C:18:97:6C:AF:FD:E8:39:08:55:89:A3:91:92
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MGIk430pPBiXbK_96DkIVYmjkZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:57:60:1b:0f:2c:9c:2e:7d:67:89:0b:df:05:37:95:88:1d:
7d:2c:85:b0:39:e0:dd:33:7f:a5:5f:fa:f0:f4:8f:60:d8:6b:
c3:3a:21:29:4c:42:87:10:49:9a:29:15:2c:5e:00:9e:ce:3b:
d2:e2:c0:eb:34:61:f1:27:12:ed:ca:f0:29:a1:92:d2:2e:3a:
ce:98:d1:06:3d:71:35:21:59:0e:35:23:8e:98:1e:c1:06:fd:
b8:25:94:de:8d:86:5a:6f:c0:5c:f5:d1:b6:23:69:cf:6f:22:
00:37:1a:1e:13:39:0b:1e:01:aa:53:48:7d:3b:42:20:1e:9c:
54:e3:b4:5c:89:2b:46:09:fd:e3:7c:78:d7:6c:be:76:a2:09:
62:ff:d6:03:a7:bc:77:f4:68:df:4d:c3:40:9e:d2:66:eb:40:
9c:e9:fb:fc:54:14:6c:ae:69:a1:16:4b:af:8f:7e:29:c3:99:
82:8d:1a:55:23:71:89:b1:d8:4a:f8:71:17:35:d4:1a:28:40:
dc:2e:2b:90:4c:de:73:e3:06:a4:0c:68:7b:d3:66:41:88:88:
2a:e7:71:ef:08:46:21:3c:8a:af:ae:40:71:ba:a4:83:d8:ec:
5f:15:f8:a9:10:52:21:8c:79:09:aa:10:9b:6f:36:b2:73:58:
36:f9:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:37 2025 by rpki-client