Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mms4vsS11-xcS9R8PAJPEZXiBQM.roa
File: mms4vsS11-xcS9R8PAJPEZXiBQM.roa (raw, json)
Hash identifier: HzXaL9xPbIG7ydEhGf3BhomXusf1O9UBo/ybNGtcubM=
Subject key identifier: 9A:6B:38:BE:C4:B5:D7:EC:5C:4B:D4:7C:3C:02:4F:11:95:E2:05:03
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E16436CF8F801BDB5168691210E542308
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mms4vsS11-xcS9R8PAJPEZXiBQM.roa
Signing time: Thu 07 Mar 2024 00:15:01 +0000
ROA not before: Thu 07 Mar 2024 00:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:16:43:6c:f8:f8:01:bd:b5:16:86:91:21:0e:54:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 7 00:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a6b38bec4b5d7ec5c4bd47c3c024f1195e20503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:4e:de:d7:d5:5d:f2:97:0a:c9:1e:a6:f6:
1c:26:2c:3e:0a:ec:09:6b:aa:28:64:30:8e:90:6d:
96:cd:7f:60:fc:98:c2:7b:c1:fa:0f:48:49:74:3c:
38:e2:bd:87:7a:65:52:ea:35:17:eb:a4:51:6b:c2:
80:fd:74:b3:57:3c:10:e6:2c:c7:97:2c:ca:1a:a4:
b9:29:a0:de:bd:6c:fb:95:b3:0c:20:33:e1:f5:1d:
76:87:e0:0e:7c:25:9c:3e:bf:49:2f:81:04:75:e6:
21:86:4a:89:05:58:1d:ec:73:89:72:a5:cf:42:b6:
40:96:ea:de:6f:b0:bd:a0:86:77:1a:32:0a:17:f7:
39:1f:ff:11:66:f6:e5:8f:d3:16:cf:58:3d:4b:8a:
05:e1:67:26:97:3d:e6:a5:8b:b8:43:d9:5c:45:64:
d8:7e:55:e7:6e:55:9c:e0:87:31:20:53:1b:4d:48:
eb:4d:b5:cf:13:4a:35:ea:3a:46:b6:9d:fc:c8:fd:
14:37:14:fe:8c:60:f8:1b:45:dd:fb:92:dc:5b:d8:
85:5f:8b:a7:0b:bd:be:63:9f:0c:c7:f6:5c:76:44:
ad:9a:40:c7:2a:f2:91:19:1f:a0:79:9b:44:e8:19:
93:0f:c7:13:58:e8:d4:bd:d9:3b:94:b4:2a:6d:d8:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:38:BE:C4:B5:D7:EC:5C:4B:D4:7C:3C:02:4F:11:95:E2:05:03
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/mms4vsS11-xcS9R8PAJPEZXiBQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:c5:a1:4a:8f:a1:9d:0b:fe:65:a3:84:13:75:c4:8e:6d:67:
6e:ee:55:fe:a9:f7:a6:b2:46:f9:33:ee:71:0c:42:39:da:2d:
84:0e:b5:88:92:1d:fc:12:b2:b6:90:09:73:61:cc:5e:c1:61:
fd:0d:54:47:86:c3:aa:24:57:1d:ed:e8:e6:f4:b2:ed:59:e3:
d4:70:93:7f:f0:9f:7f:49:4c:13:b1:e1:b3:a4:d9:42:66:ef:
50:9f:5a:df:25:cd:88:63:64:ef:52:0f:72:7a:e9:81:81:07:
d6:a1:13:a0:44:16:d6:a9:71:be:53:0d:ef:11:b2:af:9c:cc:
3b:f3:1a:ad:a0:eb:f8:7c:3d:b1:6b:96:a9:75:bc:35:0b:b8:
51:ac:b0:e2:de:0c:a9:51:0d:52:39:09:00:6a:1e:97:ba:1e:
1c:fe:d1:b0:a8:44:c6:9c:c6:69:9d:33:25:95:20:8a:c1:1a:
b3:57:09:39:18:79:e3:d2:fe:78:a8:1f:04:0b:03:12:20:4c:
87:15:d3:3f:11:ae:e2:9b:ff:67:1b:0d:bd:f8:41:fb:d5:45:
25:da:50:a8:e2:cd:34:c8:a7:b6:aa:78:8f:44:59:a3:50:89:
af:8c:b4:ba:94:4d:67:7e:e9:bf:a0:61:a7:72:db:20:9f:ab:
e7:32:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:01 2025 by rpki-client