Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_Mfy4Kst9sDDePWmWOtIuWubLWs.roa
File: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (raw, json)
Hash identifier: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=
Subject key identifier: FC:C7:F2:E0:AB:2D:F6:C0:C3:78:F5:A6:58:EB:48:B9:6B:9B:2D:6B
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0194266B1B5E37493B4C71DF058617745824
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_Mfy4Kst9sDDePWmWOtIuWubLWs.roa
Signing time: Thu 02 Jan 2025 09:49:00 +0000
ROA not before: Thu 02 Jan 2025 09:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26073
IP address blocks: 2a0d:1a40:edef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:1b:5e:37:49:3b:4c:71:df:05:86:17:74:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 2 09:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc7f2e0ab2df6c0c378f5a658eb48b96b9b2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:67:a6:a8:40:39:66:e5:73:28:52:71:97:
ab:91:a9:da:c0:37:4a:12:dd:40:32:e1:01:08:30:
f9:2e:a7:ce:f6:cd:66:90:ca:01:74:d8:c3:26:48:
06:87:fe:43:ea:6a:bb:f9:17:8f:27:96:4a:81:19:
1d:32:db:be:1b:3c:19:33:3a:3f:e7:d1:7e:0f:18:
60:e3:5d:0f:34:1e:03:d9:b4:af:28:db:2d:4c:e5:
12:c0:86:d1:ef:5f:15:e5:a8:a3:aa:48:81:67:5a:
6e:16:78:37:4f:3e:b5:ba:24:dc:ba:92:a1:44:9b:
92:cc:1b:69:7f:10:cf:5a:f9:26:d3:d5:8b:9c:36:
a8:de:d4:f1:74:e8:b4:ec:1d:fd:78:6c:7d:2b:0b:
04:7d:26:2f:cf:22:68:e0:6c:b8:18:2c:4d:ab:75:
30:55:80:f2:61:cf:60:b4:4a:b2:b5:9e:72:19:5c:
77:b0:70:c8:a5:b1:fc:91:1a:0d:20:54:64:54:73:
85:92:c5:76:c1:3d:f3:a9:a9:6c:c0:32:80:35:c7:
ef:35:af:3e:d9:16:2d:2f:59:05:48:b3:3c:64:48:
ee:c6:b1:ab:43:c8:41:f6:df:39:68:ef:ab:ba:22:
3c:bc:0f:5d:bc:ab:54:9e:7c:e5:ed:34:c6:88:01:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:F2:E0:AB:2D:F6:C0:C3:78:F5:A6:58:EB:48:B9:6B:9B:2D:6B
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_Mfy4Kst9sDDePWmWOtIuWubLWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:edef::/48
Signature Algorithm: sha256WithRSAEncryption
74:ed:fb:2c:fe:55:9e:31:88:b5:8e:d3:84:af:b3:ee:f2:6f:
be:b5:bc:46:dc:03:bf:4d:a2:53:6d:2b:4d:cf:8e:07:db:64:
0d:2f:ef:ee:c4:a4:35:2a:48:aa:53:90:09:e3:06:6b:f6:e6:
c0:8d:68:87:62:70:45:65:e8:cc:01:00:59:79:7e:63:5d:87:
fa:9e:aa:29:3e:14:8c:63:92:05:92:f7:a3:0a:04:df:f0:1b:
39:66:3d:aa:26:04:88:e7:c2:d0:5d:53:83:45:29:3a:ba:71:
6e:0b:3e:72:79:3f:62:cc:89:10:a4:22:6c:57:f8:ff:68:11:
72:b6:19:2a:7f:16:a9:2c:f4:9d:94:ea:fe:b0:4d:66:56:e6:
4d:eb:c2:f7:bf:ff:7d:0c:36:db:29:b5:be:6d:03:cc:6f:0d:
fb:12:fa:b5:03:43:de:4b:cc:26:69:8e:b2:9f:39:9e:ab:58:
04:35:a7:15:2d:3f:bc:47:3e:6b:83:e0:9c:89:2d:c3:9a:f3:
89:ef:19:1c:d4:31:19:8c:93:fa:c4:5a:3d:ed:41:ce:85:81:
cc:59:14:25:1e:fb:5f:5c:81:75:09:87:1c:a5:58:86:75:8f:
c0:7e:c5:0b:5c:ff:21:f5:8a:15:d0:c0:62:5d:18:39:fa:23:
f6:8f:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:44 2025 by rpki-client