Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MLDfXul6cM0dt7g9feZCGXAfFzU.roa
File: MLDfXul6cM0dt7g9feZCGXAfFzU.roa (raw, json)
Hash identifier: PyPIDddQBYczT3xFjNpXtNVaFDIj6/YEFbgBKGy16Sg=
Subject key identifier: 30:B0:DF:5E:E9:7A:70:CD:1D:B7:B8:3D:7D:E6:42:19:70:1F:17:35
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF0C9BC1C5753219E771EF66FB17E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MLDfXul6cM0dt7g9feZCGXAfFzU.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214301
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f0:c9:bc:1c:57:53:21:9e:77:1e:f6:6f:b1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b0df5ee97a70cd1db7b83d7de64219701f1735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:74:05:5d:84:18:26:d0:87:94:a9:6b:e7:
70:89:78:40:e7:37:ce:bc:ff:5e:76:3a:80:b6:2f:
22:66:b8:39:9f:9a:cc:08:42:de:ed:c4:c8:51:73:
72:c4:79:8b:69:04:18:64:e0:bd:e6:03:ce:8e:69:
94:9b:c9:ca:a6:95:4e:5d:4e:45:cd:99:13:3e:f3:
91:e3:a2:62:f2:32:82:2c:f1:88:cb:e6:26:c6:fb:
b2:1f:52:88:a6:d4:9d:0c:71:d1:70:05:e8:b5:ac:
81:a6:ba:f6:a8:a1:83:3f:08:27:81:1d:5e:5e:a4:
f3:c0:7b:c1:8f:71:e4:6d:a3:73:2d:04:d0:e6:2c:
5c:5e:f9:af:4f:7b:6c:4f:26:7d:9c:63:e2:11:24:
6b:26:68:69:aa:17:94:b7:19:3b:68:82:13:97:6a:
bf:2e:e1:36:e5:be:cd:a7:b6:41:f4:4c:62:06:d7:
69:0a:73:5b:27:94:1d:1f:42:65:cc:94:2b:af:eb:
6e:5a:5d:d8:c1:57:95:84:b5:3a:c7:98:e5:3b:6e:
30:42:98:b7:45:98:77:02:00:88:1e:b2:c4:37:bd:
69:f2:74:8a:bc:12:e6:0a:54:1f:db:64:86:2a:4f:
a2:22:7f:a5:e7:26:35:6b:aa:66:0c:2c:e4:0f:f9:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:DF:5E:E9:7A:70:CD:1D:B7:B8:3D:7D:E6:42:19:70:1F:17:35
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MLDfXul6cM0dt7g9feZCGXAfFzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
Signature Algorithm: sha256WithRSAEncryption
5e:09:ec:4b:e6:5e:78:2e:48:65:81:09:7c:3f:26:12:d5:30:
40:40:04:3e:65:36:3a:c5:80:f8:d8:6f:be:d9:a3:4c:99:ab:
a3:4d:7d:b0:64:e2:19:bb:f8:2b:81:1b:2f:3c:70:fd:a5:ff:
6a:7c:bf:22:ed:b1:9d:a7:06:c5:99:bb:4e:54:83:b4:19:ea:
e8:05:6a:a9:a1:d3:d3:c9:fe:11:7c:d6:d5:25:f4:bb:27:52:
7d:f2:98:62:1e:8e:16:ed:f3:13:07:5e:ed:5a:d2:3c:7b:be:
19:83:08:41:d4:b9:88:c0:86:37:d5:70:b8:56:29:cb:1b:39:
da:4f:fe:25:4e:47:5c:e9:35:a1:fd:f8:f2:d8:45:1f:d9:b9:
82:9c:bd:02:89:c0:8d:35:2f:98:43:77:d6:01:b0:75:9b:04:
db:88:e8:89:63:21:e0:c5:bf:89:18:a3:c1:ee:13:22:f3:bc:
aa:fb:ae:f6:46:e3:29:23:d7:62:13:0f:05:63:11:8a:81:92:
92:92:4d:48:bc:00:54:ab:13:6e:88:6f:f8:64:9f:91:05:9c:
2c:52:f0:29:3d:77:52:e4:77:7e:a4:d4:28:96:9f:1d:e6:4c:
39:9e:cd:d2:df:ad:b5:d0:65:28:3e:04:eb:3c:6c:a5:7d:5a:
e9:60:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:01 2025 by rpki-client