Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/muXl3inz6jffhdO2S6S_pqbjk0E.roa
File: muXl3inz6jffhdO2S6S_pqbjk0E.roa (raw, json)
Hash identifier: 0wF5o2O8eQOPVzc8lfen0DZTo8qEoofN4oy8P0PuwO0=
Subject key identifier: 9A:E5:E5:DE:29:F3:EA:37:DF:85:D3:B6:4B:A4:BF:A6:A6:E3:93:41
Certificate issuer: /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial: 01955CE13CF2B39DD7022AC891D72EA17A67
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/muXl3inz6jffhdO2S6S_pqbjk0E.roa
Signing time: Mon 03 Mar 2025 16:40:19 +0000
ROA not before: Mon 03 Mar 2025 16:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a00:dc80::/33 maxlen: 48
2a00:dc87:8000::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:e1:3c:f2:b3:9d:d7:02:2a:c8:91:d7:2e:a1:7a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Validity
Not Before: Mar 3 16:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae5e5de29f3ea37df85d3b64ba4bfa6a6e39341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:b7:9f:b2:34:36:ad:c2:97:43:56:76:56:
e0:28:ef:9a:7e:04:6b:5a:48:0d:1f:a9:83:03:ed:
55:15:b1:a9:4b:03:02:b0:4a:41:32:c6:8e:97:eb:
17:10:d4:e8:90:70:0a:a9:6c:5a:48:41:9e:16:4f:
d3:31:6c:f9:bc:9d:b4:42:99:b7:24:eb:35:e9:06:
ba:73:03:07:75:b1:7b:31:16:7d:1b:05:71:e4:e9:
00:ea:c0:ce:8f:86:21:98:5b:a5:d6:a1:7d:d2:1b:
d8:24:f4:64:64:fc:52:18:b1:5b:5e:79:59:04:87:
69:f5:45:2c:29:df:69:db:27:66:2f:0c:81:9b:75:
d8:73:44:9d:65:36:b8:5c:f5:10:37:52:4c:a9:13:
b9:a0:11:3f:ec:8e:29:2d:d2:4b:fd:54:83:9f:7a:
db:6a:b1:fd:a2:a0:6d:9c:92:ed:b8:e1:f6:31:5d:
d0:42:8d:49:d0:21:1b:42:db:dd:62:68:b0:56:89:
40:a8:15:cc:5e:bb:44:bb:47:e3:db:c6:97:94:dc:
34:c4:4d:40:26:2d:ea:70:6c:31:68:94:86:46:60:
7a:51:22:3f:1d:55:fa:66:f6:b4:8d:16:9c:67:a9:
aa:1f:a5:bd:96:a2:c6:00:36:a7:18:f1:a6:b2:1f:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:E5:DE:29:F3:EA:37:DF:85:D3:B6:4B:A4:BF:A6:A6:E3:93:41
X509v3 Authority Key Identifier:
keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/muXl3inz6jffhdO2S6S_pqbjk0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dc80::/33
2a00:dc87:8000::/33
Signature Algorithm: sha256WithRSAEncryption
05:bb:72:98:f8:ae:a5:ab:6a:ca:0f:a3:0f:dd:8b:a8:98:a2:
f3:7f:1f:e9:bf:62:03:c6:cd:d0:18:a8:55:a6:6f:1a:0b:86:
e2:78:d4:e3:b9:96:7d:3c:2c:56:6e:cc:16:04:ab:20:af:c7:
2f:8e:bf:99:96:ff:b9:52:dc:77:e4:d3:e0:35:af:0f:f5:bf:
07:af:d1:7f:45:64:1e:e4:2f:3c:0c:ad:ed:49:66:9c:1b:36:
48:f8:fc:1a:0b:5e:5a:f4:19:2a:b4:11:ca:0e:fd:8c:ca:e0:
e9:78:14:f0:24:bc:1d:b2:32:e3:32:1a:d7:c5:e3:ce:82:89:
72:6f:18:71:2d:82:06:04:bf:b7:f4:3e:db:54:a5:1f:a2:a2:
ed:9c:b2:17:34:1d:ed:1d:b3:be:a6:50:02:6b:f5:b4:ea:8f:
3d:33:e2:3b:b8:16:e6:2d:7a:df:48:f8:a9:45:6d:80:9d:79:
3c:c1:70:fa:4c:f1:4a:4c:8f:a5:6d:60:c4:e7:93:fd:a6:a0:
e0:1c:07:79:91:6a:41:c5:f5:f3:b5:cb:92:18:73:96:7e:76:
d9:01:61:c3:ed:ba:7a:d7:e7:51:bc:b2:1b:4d:2c:3e:fb:79:
94:a2:92:cb:be:5f:c5:92:b7:8c:ca:6f:7b:49:25:a6:95:6f:
9d:d0:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:21 2025 by rpki-client