Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mMeCA5hWo_FKJ21DEPFOrJc-d9Q.roa
File: mMeCA5hWo_FKJ21DEPFOrJc-d9Q.roa (raw, json)
Hash identifier: YzKgW/Y8QkGkEXVaF0WLe0A7DJLt6wOUk9fs2biwtp8=
Subject key identifier: 98:C7:82:03:98:56:A3:F1:4A:27:6D:43:10:F1:4E:AC:97:3E:77:D4
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC3A3B05C442401B8E9050FC1DE9D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mMeCA5hWo_FKJ21DEPFOrJc-d9Q.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9cc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c3:a3:b0:5c:44:24:01:b8:e9:05:0f:c1:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c782039856a3f14a276d4310f14eac973e77d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:3f:28:fc:65:0f:d7:42:40:92:3f:6f:68:
d4:5e:f8:ed:10:43:1f:44:ca:f9:09:4c:34:ca:47:
dc:a2:16:27:00:98:fe:d3:b3:de:59:fa:64:ea:ff:
ae:e6:ad:5f:8e:f2:2b:e9:18:79:ea:4c:16:7c:48:
76:33:a5:83:16:9e:ef:7a:3f:2b:fd:9f:0d:ad:2c:
92:ef:f1:2e:a1:9e:ef:5c:ad:5a:5b:ed:d5:eb:ed:
04:9b:f4:c0:f5:b7:30:69:b0:05:75:03:d6:6c:4c:
0e:29:14:83:8a:1a:9d:0a:b9:1f:d4:69:28:02:c6:
f0:f9:89:35:fb:41:e0:3d:3e:ae:88:34:7a:86:3a:
0b:70:2a:3e:9b:10:20:0e:f5:db:3e:96:31:4a:c7:
48:02:70:90:53:c7:95:43:a8:72:b9:77:47:0c:d8:
86:b9:1f:de:20:73:1b:7f:04:c7:64:f3:64:26:e7:
2c:41:c4:7c:50:e2:c5:f3:dd:81:49:d2:31:fe:2c:
ac:6a:70:c7:3f:75:37:46:a2:a9:10:09:de:e1:8f:
6a:5b:6e:e3:d2:11:97:4b:36:fa:3c:b5:9d:1d:0f:
d8:ab:f8:5a:c6:34:58:51:55:b9:23:66:c5:37:bd:
07:1c:db:07:9c:a1:aa:3c:a0:59:0e:22:38:7a:93:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:82:03:98:56:A3:F1:4A:27:6D:43:10:F1:4E:AC:97:3E:77:D4
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/mMeCA5hWo_FKJ21DEPFOrJc-d9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9c10::/44
2a0c:9a40:9cc0::/44
Signature Algorithm: sha256WithRSAEncryption
b5:20:99:c1:60:d7:94:e7:7d:d8:7a:9b:1a:2c:83:da:40:4c:
e9:e2:d2:3d:7d:fc:fd:c7:5a:cd:c7:fd:52:95:8d:2d:37:11:
b5:0f:3a:2c:7d:91:d4:b1:5c:41:c5:b2:d5:db:63:2f:6e:08:
2e:15:cd:85:e7:03:91:9d:d4:f0:05:ce:be:fe:9b:f2:16:68:
6a:ce:94:e8:63:c2:c8:c3:af:4f:b4:4c:31:f5:b0:3a:8f:25:
00:90:f6:72:9b:d7:0b:05:42:b7:4d:8c:7c:b0:15:d5:9c:b1:
07:49:cd:cd:53:ed:9a:85:9c:e5:0e:9c:bf:0a:7e:01:7c:79:
d0:9b:ce:1a:61:b2:fa:4f:7d:c7:b6:15:56:ca:71:e5:8f:be:
96:d8:b1:e9:d9:9a:45:a9:eb:61:19:f5:b3:be:d4:26:ca:39:
d5:99:29:e0:68:aa:92:b0:5d:14:67:ea:f1:02:d3:23:76:9b:
91:52:de:7b:bc:ba:4a:db:1a:0b:22:3a:e8:98:d6:f3:4d:c4:
61:50:06:f3:a2:8e:6d:4d:49:1d:fa:c8:7b:b5:cc:ef:4c:00:
95:ff:2d:1e:43:4f:dc:79:d3:cc:6e:20:63:a4:60:b4:d9:32:
f8:5d:bc:c3:ff:58:d1:91:cf:10:d4:55:41:1b:26:e2:bf:8b:
d3:29:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:17 2025 by rpki-client