Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfc6cxOgA8vG0w0uovMM-8QPV30.roa
File: mfc6cxOgA8vG0w0uovMM-8QPV30.roa (raw, json)
Hash identifier: YwJayTuBecgBiSegKZzPIzSCRe94j4vbhSDyXq44qXI=
Subject key identifier: 99:F7:3A:73:13:A0:03:CB:C6:D3:0D:2E:A2:F3:0C:FB:C4:0F:57:7D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190AAB1730F3B17EC9F8B3CA702ED57D95D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfc6cxOgA8vG0w0uovMM-8QPV30.roa
Signing time: Sat 13 Jul 2024 06:04:34 +0000
ROA not before: Sat 13 Jul 2024 06:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:aab1:4012/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:aa:b1:73:0f:3b:17:ec:9f:8b:3c:a7:02:ed:57:d9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 13 06:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f73a7313a003cbc6d30d2ea2f30cfbc40f577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c3:b2:a1:55:c5:79:ce:48:52:53:c9:38:31:
b6:67:db:81:cc:3a:00:15:07:36:91:a6:2f:53:49:
8f:46:66:61:1e:c8:c1:e0:84:36:22:b0:6b:ab:17:
85:cc:76:45:be:e2:48:29:df:fb:06:9d:7d:d8:4f:
d4:0f:a4:5b:59:96:53:cf:58:99:c9:3e:81:f4:ad:
18:23:86:c3:ee:65:2d:72:c0:65:e8:66:ac:68:7f:
5b:64:e0:4c:bc:03:1a:3a:52:5c:8c:26:86:86:77:
d2:9e:6a:47:70:40:c7:f0:ce:3a:3d:ee:fa:bc:5a:
59:12:e2:ff:27:9b:51:58:1b:c6:fc:8a:46:73:04:
de:2a:81:25:eb:c2:3d:5b:38:e6:0c:8a:da:bf:5d:
ee:fd:72:54:7f:bf:ae:c2:3d:16:5f:94:44:b8:93:
3f:6c:ec:76:74:dd:19:11:b0:76:81:e6:d5:5d:3e:
15:2f:0b:da:a8:46:e3:87:0c:21:5e:2f:81:84:d7:
df:c9:9d:1a:b0:60:00:a0:57:dc:27:5f:fc:ac:1a:
d1:e6:1b:d6:5b:d2:d1:bb:33:6c:29:57:55:a6:74:
de:2f:b8:95:af:11:2f:ad:0b:86:11:83:ea:18:5c:
e5:7e:a2:b4:40:13:e6:f0:05:5c:67:57:b1:a0:b8:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:3A:73:13:A0:03:CB:C6:D3:0D:2E:A2:F3:0C:FB:C4:0F:57:7D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mfc6cxOgA8vG0w0uovMM-8QPV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:b2:4f:16:45:7f:18:9a:32:db:1d:0f:fa:ff:16:9b:fc:37:
c5:08:71:cc:33:00:9e:3c:6f:1f:f4:0f:d1:e7:69:bb:29:19:
79:80:a6:08:d8:b0:8b:4f:a8:92:02:70:9f:6a:30:3c:28:f1:
e6:7b:01:73:df:f2:80:f5:4e:0b:95:8c:b8:8a:40:fd:b2:ae:
0d:0d:f3:79:d8:d4:23:45:29:54:ea:16:62:f3:aa:00:0f:56:
68:1f:99:04:9c:26:85:7d:56:2e:d9:10:86:ab:53:fc:9a:3d:
e1:51:b2:1d:a9:27:65:2c:a3:67:b9:76:3d:fd:50:5e:88:df:
41:52:c8:c7:0a:8b:77:b2:a1:db:d0:15:a4:09:0a:63:64:a3:
c1:b2:ff:98:b6:26:2a:92:fa:f6:f9:88:f3:68:b0:94:1d:59:
8e:25:b2:40:7b:12:17:b6:b7:02:11:ef:c7:ca:5d:67:08:de:
85:09:3d:65:81:e4:30:e8:8a:61:c5:e5:d3:cc:63:9e:91:59:
64:6c:95:7e:01:ba:02:10:b9:83:44:e3:fc:ea:6b:40:5b:bc:
e8:15:7c:11:69:56:e9:84:0a:43:48:9f:21:5f:df:f2:6f:65:
09:32:b4:89:7d:94:84:bf:ae:11:79:60:70:63:13:a8:39:d1:
03:30:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:06 2025 by rpki-client