Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mziTIMpSwyNOcypzEr568ar-WeM.roa
File: mziTIMpSwyNOcypzEr568ar-WeM.roa (raw, json)
Hash identifier: Ub2aPp3m+eYSC6l5oBReiPzLnWQjtncknWbng1X07Os=
Subject key identifier: 9B:38:93:20:CA:52:C3:23:4E:73:2A:73:12:BE:7A:F1:AA:FE:59:E3
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4D4298623FD12ADE768CEFB677DC50EC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mziTIMpSwyNOcypzEr568ar-WeM.roa
Signing time: Thu 31 Aug 2023 20:22:04 +0000
ROA not before: Thu 31 Aug 2023 20:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:42:98:62:3f:d1:2a:de:76:8c:ef:b6:77:dc:50:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 31 20:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b389320ca52c3234e732a7312be7af1aafe59e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:1b:49:8f:28:87:87:60:f2:46:be:02:da:
d9:e8:ab:02:32:83:aa:5d:b1:1a:d9:5b:f1:77:af:
6a:eb:88:fb:bc:58:dd:77:6a:6e:72:f7:db:8a:3f:
eb:93:b0:da:a6:a9:07:50:38:86:30:53:cb:fe:ba:
b4:d7:8b:79:d4:5b:a7:9e:fb:dd:54:f0:77:4f:cf:
48:35:69:3a:71:9c:dd:2b:e3:f4:57:64:dc:2f:d2:
bc:bb:d9:6a:8b:5b:63:04:91:10:59:0e:d5:c4:a8:
b3:c1:4b:2e:b2:85:2b:dd:e3:40:d6:a0:79:a6:e6:
75:56:65:94:83:77:fa:1e:06:f5:79:bc:8b:b0:90:
80:3c:cf:7f:e3:7b:1b:9f:4e:a8:ed:31:c1:16:44:
2c:f4:96:ad:41:c8:f1:aa:04:b6:72:ac:6f:45:41:
25:64:60:a4:b2:a4:a5:dd:33:d1:f2:4d:02:51:de:
bb:b3:d4:76:64:fc:e7:b4:11:20:a5:06:0a:cd:00:
d3:82:2d:e3:30:87:bd:0e:91:f8:d8:aa:11:c3:37:
09:1b:d1:2b:0f:39:20:0c:65:c6:b3:ec:d2:08:dd:
0d:c0:d3:c5:e9:90:2c:21:5b:f2:ba:19:78:6c:32:
91:0f:a5:78:93:02:d2:6b:dd:e8:e3:d7:d3:a4:7a:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:38:93:20:CA:52:C3:23:4E:73:2A:73:12:BE:7A:F1:AA:FE:59:E3
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mziTIMpSwyNOcypzEr568ar-WeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e4:17:a7:59:f2:9f:51:89:c0:ce:9b:fe:2f:48:9d:08:bd:
7b:f4:cf:49:67:80:6a:8e:ad:d8:10:2e:c4:b2:5e:e6:e9:f8:
ee:68:fa:03:fe:f0:c3:80:50:10:19:4c:5b:55:07:1a:6a:e3:
46:b3:24:4c:63:c2:99:1e:91:7f:d0:8a:3e:0c:82:41:5e:c8:
45:5f:e7:09:8f:6f:6e:55:74:48:20:5e:a9:08:67:16:54:ee:
de:33:67:8e:77:00:38:5a:6b:c7:ed:a7:2f:b1:53:ea:25:3c:
4a:f8:79:51:46:1b:68:5b:ed:ce:17:9b:f9:1a:48:ee:5f:a6:
c6:27:c6:ff:6e:f3:e6:67:33:a5:59:69:d5:90:ad:d9:4c:a5:
d0:ad:36:92:67:f8:3a:f7:d2:5e:ac:4f:23:0e:13:db:58:81:
f4:a1:7e:c4:21:8b:04:45:b6:5f:9e:31:2b:2f:5d:28:a5:ed:
1a:f4:17:50:3a:35:6d:50:0c:87:78:f0:d1:f9:77:c3:b3:61:
04:b1:96:2a:d5:d6:22:10:f6:a5:be:12:f4:7a:42:44:62:f7:
53:00:36:20:97:7d:c7:6c:ee:5f:5d:ec:c9:fd:63:3e:18:7e:
c4:69:a1:f2:de:4e:bf:b4:78:c0:68:2f:7d:32:d9:74:14:95:
17:5c:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:39 2025 by rpki-client