Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/mAo26VPj0zSn83SBRVoaCRdhIg4.roa
File: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (raw, json)
Hash identifier: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=
Subject key identifier: 98:0A:36:E9:53:E3:D3:34:A7:F3:74:81:45:5A:1A:09:17:61:22:0E
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E0D9A23BE7BAA8DE663227ACDB6ED
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/mAo26VPj0zSn83SBRVoaCRdhIg4.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141180
IP address blocks: 2a02:e0:3138::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0d:9a:23:be:7b:aa:8d:e6:63:22:7a:cd:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980a36e953e3d334a7f37481455a1a091761220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:35:01:02:aa:fd:cb:07:6c:27:73:60:bd:
59:b1:fb:63:de:74:27:5f:10:a6:25:42:52:8a:e0:
75:f3:49:46:ad:a1:d0:5e:ff:3b:d0:8c:a0:ab:98:
7c:61:28:ab:f4:31:ec:5b:ad:3f:f3:4b:83:72:ef:
0d:e0:74:47:49:8e:a3:f1:bb:03:d6:1e:18:c1:6b:
b2:46:81:ea:68:3e:1b:8b:b8:ac:3f:2b:f9:55:f1:
d8:01:f8:3e:4b:27:7a:0b:12:b1:4d:81:a8:9c:23:
94:e6:40:58:28:a9:c5:e8:2b:1f:32:f9:c6:79:e1:
11:0a:d8:c7:ea:a8:fa:e0:70:68:f7:ef:7d:2b:5b:
94:1e:5e:1a:43:fa:95:e0:48:9a:cf:74:0d:c1:20:
7e:b5:8d:50:16:92:f3:ee:df:2e:c1:cb:40:bc:f4:
18:d3:5f:59:e3:e2:ae:be:89:a8:23:4d:39:8c:7f:
db:ea:28:99:98:0c:a4:21:45:51:cb:1b:c9:aa:a8:
7a:9b:a6:2e:20:c8:9b:21:89:fa:cd:18:60:47:5f:
ba:68:c5:55:27:4f:8b:45:7d:2f:78:26:60:9d:bd:
be:32:ef:17:f2:11:3f:66:b0:a4:78:1c:7b:2c:cb:
c1:75:21:c9:df:3e:ab:58:a9:66:86:68:47:2f:54:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0A:36:E9:53:E3:D3:34:A7:F3:74:81:45:5A:1A:09:17:61:22:0E
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/mAo26VPj0zSn83SBRVoaCRdhIg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e0:3138::/48
Signature Algorithm: sha256WithRSAEncryption
67:9a:e3:e3:7b:54:95:d0:06:2b:d1:1a:33:c5:25:29:9f:5f:
e7:cb:f3:3e:05:9c:fa:2c:c7:c0:19:a5:a9:1e:21:24:fc:3d:
47:a3:4a:bc:1c:cc:f2:70:31:c1:7e:d9:5e:a6:9e:6f:7d:22:
33:4f:91:d5:55:7e:78:cc:70:cc:74:9f:7e:4c:d5:1e:97:ec:
09:d4:8c:3b:3d:97:75:ed:8d:70:b4:48:2b:46:4b:2f:99:9d:
0d:6a:0a:ab:65:59:4d:eb:e1:27:4f:3f:e4:0c:5a:1a:a9:bc:
d0:d8:f9:84:85:f2:c5:e3:0c:1f:fe:b6:c2:bc:5c:76:56:5d:
70:c9:22:91:ba:18:12:79:a6:66:d7:4d:7a:e1:ea:59:b6:6f:
22:3b:12:aa:ef:9e:9b:ef:22:0f:c2:e6:62:ca:b3:45:b7:6f:
da:61:cf:c1:f8:e3:f5:e6:48:ea:10:fe:ce:b9:00:06:95:2f:
02:74:1c:15:55:09:87:96:99:c2:a4:8c:f5:56:9c:23:01:50:
ed:01:ac:cd:b1:40:90:08:b4:e0:30:14:46:a3:4b:52:d2:9d:
a7:ea:39:9f:03:88:d1:7c:ea:a6:22:31:9c:cf:31:4b:a9:2c:
b0:e2:2d:2d:0c:2f:81:4e:f1:f7:c1:82:5b:1e:dd:30:ba:f5:
75:85:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:17:46 2025 by rpki-client