Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mSgbAYw7utM8SO79ZQwlMGtsUkc.roa
File: mSgbAYw7utM8SO79ZQwlMGtsUkc.roa (raw, json)
Hash identifier: DMUHt1dP4FxrusLfdJkPWO9f6V0fLQwFE9S6knUeVww=
Subject key identifier: 99:28:1B:01:8C:3B:BA:D3:3C:48:EE:FD:65:0C:25:30:6B:6C:52:47
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E347B63C7807C6C7FD547E078F121D865
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mSgbAYw7utM8SO79ZQwlMGtsUkc.roa
Signing time: Tue 12 Mar 2024 21:04:45 +0000
ROA not before: Tue 12 Mar 2024 21:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:347a:dd63/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:7b:63:c7:80:7c:6c:7f:d5:47:e0:78:f1:21:d8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 12 21:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99281b018c3bbad33c48eefd650c25306b6c5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1d:5a:4c:7a:02:61:4c:ab:88:54:d4:6d:33:
61:61:6f:87:7d:6f:3a:48:a6:8c:f1:cf:67:d1:92:
51:6f:17:3e:1f:66:de:51:a4:2e:01:d0:44:80:64:
99:ec:45:8b:88:c4:04:dd:25:a0:b5:ab:be:ad:03:
41:37:03:7d:91:1d:ff:40:68:bf:f1:44:3d:c4:01:
fb:b2:94:5b:30:df:72:db:75:d2:c8:e5:16:32:bc:
7e:e8:65:5d:9a:f6:19:5a:a6:4b:16:10:56:0d:54:
49:71:95:7c:a1:2d:1c:d8:ac:5f:91:dc:01:ac:83:
57:3d:c3:93:36:09:81:d5:43:73:82:24:74:22:43:
19:17:84:97:e5:5c:c6:b2:c2:64:30:2e:50:6c:ff:
0e:3b:2c:51:25:7e:14:64:b0:91:ff:07:64:db:7e:
01:2b:60:cc:d7:1f:63:14:2b:81:a8:23:13:10:62:
d9:b9:10:e3:36:c9:10:57:5f:61:87:a6:d6:21:91:
28:d3:be:13:53:db:6c:97:55:da:61:99:37:25:53:
d8:47:c6:3f:d0:8a:9c:d2:7d:36:0a:08:d8:52:66:
e1:82:3b:14:c9:7b:b5:82:4d:87:00:cd:2e:85:8f:
24:87:b8:ce:10:40:c7:a9:1d:b9:5a:28:bb:96:a3:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:1B:01:8C:3B:BA:D3:3C:48:EE:FD:65:0C:25:30:6B:6C:52:47
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mSgbAYw7utM8SO79ZQwlMGtsUkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:4e:df:51:2d:80:21:67:9d:41:83:eb:40:d6:13:26:f9:05:
99:cd:02:e1:bd:cb:79:3b:86:22:97:7d:c0:ea:30:a3:5d:84:
73:8f:0c:38:7e:26:ce:e7:d6:b0:7e:37:db:f6:70:f6:1f:cc:
ce:3a:cd:b7:c3:b0:7b:f9:7c:06:6d:77:c3:32:da:31:cf:cc:
8e:d2:9b:65:95:2b:2c:1d:53:02:35:4c:a7:3d:32:05:e6:1d:
ad:71:c2:56:f3:d6:5d:6b:78:f5:63:ee:ef:fd:d2:3a:87:86:
dc:68:d5:58:b3:72:79:b3:93:a7:e6:da:ed:29:57:5d:c1:ba:
38:31:76:1e:26:47:45:f0:aa:9d:3d:a4:93:ea:f6:0f:75:e8:
3d:6e:e4:08:4e:4f:a4:40:45:e1:6d:f6:39:8d:19:a5:16:3a:
ec:e4:ed:5a:33:61:44:ab:ae:48:f7:e6:de:f5:b6:74:86:aa:
81:d6:a0:27:14:34:d8:40:18:fa:21:9e:26:34:ac:42:59:17:
dd:0e:d5:b5:9f:8c:ac:c8:04:60:a2:ba:6d:8a:b6:3e:8f:89:
e6:cb:27:6a:54:36:42:a7:3b:a7:c0:11:3c:2e:ed:e1:d4:85:
ca:31:50:fa:48:32:ae:92:19:f3:ac:cf:21:71:0a:cd:8f:43:
e2:b3:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:13:46 2025 by rpki-client