Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MbSO_ZoomsCTbUu2sbMQaIHxM2A.roa
File: MbSO_ZoomsCTbUu2sbMQaIHxM2A.roa (raw, json)
Hash identifier: ilg8pYmw4MwGXoVWydC2qkezTkSsmpkKs9adw8oGcgU=
Subject key identifier: 31:B4:8E:FD:9A:28:9A:C0:93:6D:4B:B6:B1:B3:10:68:81:F1:33:60
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6FBEDDEB42BF99F5E5BC161A0E5BDDC2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MbSO_ZoomsCTbUu2sbMQaIHxM2A.roa
Signing time: Thu 07 Sep 2023 13:04:54 +0000
ROA not before: Thu 07 Sep 2023 13:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:6fbe:688d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:be:dd:eb:42:bf:99:f5:e5:bc:16:1a:0e:5b:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 13:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b48efd9a289ac0936d4bb6b1b3106881f13360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:77:45:6a:73:a5:04:17:be:d0:79:8e:d6:
8d:38:23:ce:ee:4c:10:a4:ba:64:a4:9d:37:d1:e4:
c8:fc:33:27:7e:51:37:ba:6d:7d:36:85:c2:9a:7b:
6a:49:c1:92:a8:1f:6b:58:c9:18:a4:5a:5e:6c:54:
1e:0c:a6:31:db:f7:ed:97:a5:67:8c:5c:1d:cc:01:
f1:51:27:46:95:95:48:5b:3d:97:ae:ae:4c:25:9a:
34:e1:7a:5e:9c:f4:67:7a:7c:6e:38:10:53:06:0d:
00:61:d0:48:a2:2f:90:8a:f3:e3:7a:2b:c0:d2:91:
e8:84:0e:d6:e5:db:d6:d5:f8:7d:2d:ac:1b:15:c0:
05:9b:33:66:dc:95:44:a0:65:a4:21:6e:2b:ae:0a:
a5:0c:59:45:91:da:ee:a3:39:6b:62:71:5a:36:0e:
03:60:3a:50:a2:c3:32:aa:0e:20:c4:a7:ea:52:38:
97:ee:b4:fe:ff:0c:a8:42:2d:e4:36:1e:ae:84:22:
d2:89:34:5b:b7:69:25:ea:5d:50:e2:ca:c2:04:3c:
7b:d0:57:54:45:20:64:e3:b5:95:db:dc:7f:12:dc:
bc:54:83:9b:28:f4:b6:0a:f2:39:12:e8:07:b4:bd:
eb:0d:9a:13:43:91:83:45:bd:d8:7f:8b:69:cb:2d:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:8E:FD:9A:28:9A:C0:93:6D:4B:B6:B1:B3:10:68:81:F1:33:60
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MbSO_ZoomsCTbUu2sbMQaIHxM2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1e:4b:47:77:cc:d9:fb:32:d6:4a:04:6d:2a:32:e3:b0:63:
56:42:9d:12:5d:0b:e7:27:7d:f0:94:90:3d:7c:c9:e4:36:02:
eb:08:21:cc:94:13:2d:c6:22:85:53:c4:36:0a:e0:e4:14:48:
89:34:a5:32:5c:36:1f:5f:a0:d3:e2:1c:7b:d6:0f:ec:c9:ad:
ce:f1:3c:49:c4:a4:9d:71:8d:a5:ac:00:a6:86:14:67:83:6b:
81:11:d1:22:ef:36:27:69:10:f9:33:e0:ce:0f:de:dd:74:79:
a3:f8:de:bf:06:6c:43:67:65:41:83:9e:4f:b2:f7:ab:a4:51:
0f:7f:0b:25:81:b3:0e:d0:5e:02:ac:85:be:7e:ab:05:1f:1b:
8a:94:9c:98:c6:de:22:9c:6c:6d:77:2d:25:5d:1d:88:e5:24:
56:c5:d5:d3:fa:e1:bb:cd:12:0f:29:f8:5c:30:64:0b:fc:e4:
04:84:7a:c3:3a:c4:24:c2:c8:48:0b:0e:82:28:57:49:02:07:
1e:86:9e:16:fd:75:b2:5a:44:2e:4e:83:fd:ad:88:ac:6d:4e:
c6:d5:68:21:6a:66:38:8d:f6:5e:83:d0:4a:2d:4f:6b:0a:19:
24:84:1b:68:21:3a:fe:5f:01:09:91:67:15:5a:73:69:98:1f:
79:1c:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:32 2025 by rpki-client