Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mYW0ZahOVTcrAzTqNxYilfPfhxE.roa
File: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (raw, json)
Hash identifier: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=
Subject key identifier: 99:85:B4:65:A8:4E:55:37:2B:03:34:EA:37:16:22:95:F3:DF:87:11
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019420680182F46347004C8FC73135780C9C
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mYW0ZahOVTcrAzTqNxYilfPfhxE.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a0c:9e03::/32 maxlen: 32
2a0c:9e04::/32 maxlen: 32
2a0c:9e07::/32 maxlen: 32
2a0c:fe02::/32 maxlen: 32
2a0c:fe03::/32 maxlen: 32
2a0c:fe04::/32 maxlen: 32
2a0c:fe05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:01:82:f4:63:47:00:4c:8f:c7:31:35:78:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9985b465a84e55372b0334ea37162295f3df8711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:c8:14:cb:1b:b2:a2:4b:dc:de:11:12:37:
88:01:fe:d2:41:e8:c7:a2:b8:7e:3a:cd:df:84:e9:
d9:0f:24:87:4c:c2:6a:82:d5:5f:ea:20:31:01:45:
88:fe:5d:2a:bf:0f:7e:70:a3:51:8f:96:dc:62:5d:
8a:fe:d4:b6:d9:ad:b3:df:e2:18:f0:41:47:d1:2a:
7f:04:5c:6d:1c:d9:b4:64:4d:88:55:e5:da:3d:2b:
e7:e3:f7:4e:5f:dc:12:3e:a1:bc:94:bc:a5:4a:5c:
58:d1:1e:6b:6a:fb:56:03:af:23:25:a3:d9:b6:07:
6c:9a:2a:c0:d7:63:a6:8c:02:24:68:70:26:8d:d7:
80:92:3a:a4:49:8f:82:62:f6:bc:4e:07:a0:a5:a0:
a7:c6:f9:70:4e:56:a5:ae:2c:08:2d:5f:0d:89:91:
c8:34:80:09:8b:88:8d:cd:f8:5a:5f:e2:16:38:3c:
32:54:4d:12:1b:f5:0d:6d:68:06:99:7f:12:7d:4c:
44:b3:b2:65:dd:22:d2:25:96:c3:67:83:8a:06:54:
fd:7d:6e:a5:f6:59:2f:0f:43:79:75:b4:01:cb:ad:
30:76:93:31:a9:5c:12:19:89:bb:f1:64:36:df:3d:
88:fa:f2:2f:2b:2a:b0:bd:f5:85:b3:d2:b7:0e:4f:
68:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:B4:65:A8:4E:55:37:2B:03:34:EA:37:16:22:95:F3:DF:87:11
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/mYW0ZahOVTcrAzTqNxYilfPfhxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9e03::-2a0c:9e04:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:9e07::/32
2a0c:fe02::-2a0c:fe05:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:27:5e:ce:85:cd:61:a7:6e:68:c3:55:d9:7c:68:18:46:50:
28:31:77:b9:f1:60:13:9c:3b:88:2b:32:c3:89:9f:99:0c:59:
6f:13:83:12:d2:2b:c2:15:d4:75:77:35:a7:17:fa:86:44:ae:
7e:2a:24:e7:25:2a:69:9d:ce:72:72:e2:7f:3b:51:27:cc:cc:
03:55:50:0b:8d:30:8e:9a:0d:00:98:eb:21:21:cf:73:7b:f0:
f5:7c:25:a2:c4:3d:b7:b0:e7:ad:d6:55:c5:90:37:6e:85:2f:
be:d2:dd:91:a3:4f:35:91:15:8f:9d:17:63:e7:e7:a7:c0:32:
d9:f6:27:20:03:f7:c7:8b:12:11:19:a6:6c:d5:bd:53:60:61:
1b:5f:4c:d5:c0:fa:59:12:c6:48:c0:1c:a2:ce:09:52:95:9b:
2a:3e:80:63:ce:ef:eb:c6:df:de:93:f3:bb:c7:93:47:35:d4:
ab:60:57:a4:6c:ed:44:0a:ff:7d:bf:ad:65:74:ec:bb:28:74:
70:3d:65:d9:df:c2:88:c6:38:fa:d2:99:49:8a:d1:c6:f7:63:
5a:f5:b0:03:91:39:57:bf:5a:23:0c:78:35:18:04:c2:ea:e6:
76:ad:27:1c:c9:6d:f7:33:78:fe:3e:0b:46:40:5a:69:09:51:
94:40:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:37 2025 by rpki-client