Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/MJ_krBd8c8ZRVoCpDNe56AF3Q4c.roa
File: MJ_krBd8c8ZRVoCpDNe56AF3Q4c.roa (raw, json)
Hash identifier: HiC1KzYzu+Okr3LiN7aVMutKNJ0KoVUkB9MYHeorgDs=
Subject key identifier: 30:9F:E4:AC:17:7C:73:C6:51:56:80:A9:0C:D7:B9:E8:01:77:43:87
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018A829FE8280126FD6B2EB756AF72CAB10F
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/MJ_krBd8c8ZRVoCpDNe56AF3Q4c.roa
Signing time: Mon 11 Sep 2023 05:03:52 +0000
ROA not before: Mon 11 Sep 2023 05:03:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204089
IP address blocks: 2a12:f8c7::/32 maxlen: 32
2a12:f8c1:f8c1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:82:9f:e8:28:01:26:fd:6b:2e:b7:56:af:72:ca:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Sep 11 05:03:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=309fe4ac177c73c6515680a90cd7b9e801774387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:1f:e7:5a:73:d5:cb:e5:27:c5:d5:7f:eb:
40:2d:b8:9a:93:74:0a:10:8c:4b:43:57:2d:85:48:
f8:54:86:6f:22:5a:f2:40:4a:b7:96:1c:64:3c:98:
d9:b7:f4:be:95:f0:13:ed:d9:4f:f1:b2:d8:6c:51:
c4:62:e0:a6:b8:8b:c2:d7:fa:10:be:d7:8d:12:8b:
68:e6:48:c8:54:c7:fd:8c:e3:49:f9:d1:86:00:10:
45:3c:89:b1:4d:6d:eb:4c:2e:6b:cd:fe:2d:53:18:
f6:b7:1d:21:08:3c:27:1c:40:ef:b1:a2:c6:08:90:
84:40:57:18:e7:60:fa:18:ef:a9:72:f1:eb:1c:ab:
0f:12:82:20:ea:63:a3:21:ab:9b:3b:64:50:d7:43:
dd:b1:6b:c3:59:da:97:9d:25:ca:e4:6a:8b:d4:d2:
4e:31:9f:05:44:3a:7f:27:d0:63:9c:6d:69:09:d1:
1a:f8:1b:3f:d6:dc:dd:19:12:7c:e6:13:fc:f0:0a:
0e:2e:89:16:97:32:00:53:38:0b:73:b1:6d:e7:6a:
5e:42:04:6f:5c:77:9d:a6:ed:f3:e4:ba:e1:e9:e6:
89:d4:49:f5:b9:47:c9:60:c7:78:b9:89:21:a6:9d:
88:38:ec:13:f9:b1:f3:ab:ea:77:48:0e:75:62:ca:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9F:E4:AC:17:7C:73:C6:51:56:80:A9:0C:D7:B9:E8:01:77:43:87
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/MJ_krBd8c8ZRVoCpDNe56AF3Q4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:f8c1::/48
2a12:f8c7::/32
Signature Algorithm: sha256WithRSAEncryption
a2:64:15:a4:eb:e7:75:30:1e:38:83:b8:d2:b3:e9:f1:1b:78:
63:74:93:d5:ce:6f:54:d7:c6:dd:20:dd:e7:ca:d6:19:7c:cf:
6e:12:4f:33:1f:4e:36:df:dc:f4:3e:ea:9a:b4:03:e8:28:9b:
38:6e:3a:f1:c1:28:4a:31:2a:c9:c4:5c:10:bc:34:99:80:7e:
5b:ed:82:d5:ca:1b:39:99:09:67:66:93:48:ec:d1:7e:40:52:
49:6b:8c:1f:9d:b9:ad:ce:ca:ce:38:52:7f:f6:27:b4:b7:eb:
45:60:2a:b2:39:c5:32:c9:4a:f9:4d:df:ef:f6:e1:90:59:d7:
20:14:45:87:a3:00:3f:68:7b:2a:f7:8b:ff:03:46:e0:7c:09:
f8:97:f9:97:69:1f:47:a1:8a:4c:d7:50:14:d7:7c:27:12:43:
96:60:6e:ee:98:d7:85:32:52:d1:ac:06:34:f6:04:24:45:0f:
14:1d:46:da:71:ed:51:ae:95:cf:75:04:f1:60:8b:7e:f9:59:
3c:d2:24:8f:75:c8:78:ec:12:f2:c6:53:ab:15:ce:fd:99:7f:
36:9d:89:c8:4c:86:75:cf:8d:63:4d:2f:92:69:cf:20:cd:2e:
8e:fc:8d:01:66:25:4a:80:a8:7e:87:c9:fc:01:d9:13:cf:8e:
ac:e1:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:25 2025 by rpki-client