Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MlehsIy_W9NO86gv46wuzQ6qZ-w.roa
File: MlehsIy_W9NO86gv46wuzQ6qZ-w.roa (raw, json)
Hash identifier: 4IuYJg4EpW0Ze0fUY8okQ7CGVvhEUkiOByIWlAh8KoA=
Subject key identifier: 32:57:A1:B0:8C:BF:5B:D3:4E:F3:A8:2F:E3:AC:2E:CD:0E:AA:67:EC
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A713F638FCB95646F74B87A0E7E0E75FF
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MlehsIy_W9NO86gv46wuzQ6qZ-w.roa
Signing time: Thu 07 Sep 2023 20:04:54 +0000
ROA not before: Thu 07 Sep 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:713e:da45/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:71:3f:63:8f:cb:95:64:6f:74:b8:7a:0e:7e:0e:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3257a1b08cbf5bd34ef3a82fe3ac2ecd0eaa67ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:01:58:bf:ae:22:bc:ea:13:a3:03:f3:e2:
82:d0:ce:e1:b7:e9:25:b0:1f:9e:2e:32:fa:f1:a0:
04:4e:91:7c:0c:8f:14:6e:58:a6:0a:1d:06:5b:c9:
14:e8:36:4b:c1:c8:e0:d1:43:89:06:90:0d:9b:c6:
52:d7:7b:5a:d1:d4:8e:be:71:b8:33:76:cd:a3:0e:
18:3b:47:8f:b9:c0:c1:fa:f0:73:f8:72:d0:53:d4:
61:dc:bc:53:28:c9:5f:55:33:5b:6e:99:b1:ff:81:
77:5f:52:cd:48:1c:b6:43:f1:07:a1:b9:de:a8:23:
62:90:ed:ba:73:9d:b9:be:b6:89:c5:a8:09:03:b1:
ce:69:1e:f6:cd:49:6b:45:6c:45:92:19:e7:76:dc:
04:0f:06:ea:e8:f3:fa:7d:b8:d5:4d:45:20:b7:29:
7a:b8:07:91:35:f8:7a:13:29:64:1a:63:14:90:0c:
38:1b:fb:77:a4:cd:e0:f3:8d:2d:bd:b0:18:c1:5e:
d6:e0:f4:c8:36:fa:67:5d:ad:71:cb:cf:d7:01:60:
26:73:23:9b:54:79:c3:9a:1d:55:59:e4:95:5f:08:
fd:f7:a6:c4:a0:4b:c1:47:fd:12:8a:f5:79:0d:63:
21:76:da:24:c9:f2:08:53:8d:19:52:ba:71:b3:4b:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:57:A1:B0:8C:BF:5B:D3:4E:F3:A8:2F:E3:AC:2E:CD:0E:AA:67:EC
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/MlehsIy_W9NO86gv46wuzQ6qZ-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:22:30:33:6e:b5:3f:d8:b1:df:2b:b4:9a:5a:aa:51:83:9d:
82:3a:a7:80:15:1f:b6:89:23:60:22:cd:f1:29:47:c8:ca:00:
cd:4d:bf:0a:53:87:44:c6:7c:13:8c:cf:a5:a3:d5:f1:d3:10:
de:9a:b6:60:77:21:85:b4:11:3e:2f:6f:7a:eb:bf:94:e5:a6:
90:c6:8b:39:07:54:bc:38:4c:57:98:bd:e8:ff:3c:39:b3:ae:
1e:6c:af:26:cc:b3:03:27:c7:0f:a1:d3:55:d0:e6:66:98:c4:
f0:a9:ad:8b:4b:c1:fe:84:ea:4b:93:0d:bc:02:46:b0:74:3d:
00:ce:11:37:cb:1d:8c:19:93:da:ee:5d:93:89:da:6d:2d:5c:
6b:7b:0d:ee:42:a0:e8:01:50:6c:00:02:e4:9e:e2:d8:ce:d8:
0f:05:73:1c:87:ce:80:55:71:ba:2a:3b:d3:fc:06:39:18:4c:
cc:cc:46:a6:33:c4:72:1f:7c:38:c9:aa:c5:b7:ad:c6:4e:f2:
a3:8a:0b:0b:14:13:c6:fe:ff:8f:d8:61:28:91:2d:05:3b:97:
78:8b:02:6b:db:6e:69:d5:2d:85:28:84:9b:38:f9:ec:1e:b1:
26:0e:bd:5a:ae:40:57:b6:cc:a9:a4:2c:76:b1:14:81:39:19:
b1:fa:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:51:31 2025 by rpki-client