Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa
File: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (raw, json)
Hash identifier: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=
Subject key identifier: 30:14:D0:5C:BA:FA:BE:AD:45:82:E6:57:3D:0D:59:8E:74:4B:5F:45
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747056D775504B5A4558E388E3C5C21
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 2a0f:6580:110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:05:6d:77:55:04:b5:a4:55:8e:38:8e:3c:5c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3014d05cbafabead4582e6573d0d598e744b5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:b6:ca:99:e7:fe:ab:ee:c4:bc:73:0f:d2:
35:88:de:b1:8a:bb:12:07:8c:3d:bc:1f:fc:de:2e:
e0:13:fc:b5:f9:bf:2b:e0:5e:95:18:76:0a:cc:7d:
54:dd:41:52:67:de:7f:67:87:ea:9b:de:4c:4c:cb:
cd:9e:73:43:b0:1e:5c:a8:ce:83:c7:1f:20:78:43:
f3:86:1c:07:4b:76:8e:a1:98:b2:ef:41:be:e4:8a:
2d:55:5d:21:04:ac:a5:ab:c5:c7:02:c5:04:c0:b5:
5c:e0:90:b8:76:a7:62:6a:5b:5c:72:4f:5b:b6:1d:
82:4c:17:3c:3d:95:67:55:1a:63:fe:3f:f8:bb:9c:
a1:5b:52:f7:ad:9c:3e:f4:dd:bf:6c:ee:00:90:cb:
27:55:2f:17:f6:95:a2:13:8d:49:a1:d9:ef:cb:0e:
13:6f:19:0d:14:ce:3c:68:8b:34:97:06:a5:96:67:
78:ab:80:89:f5:37:b3:99:1a:c5:1d:b4:c3:61:fd:
fb:ea:5c:61:4a:aa:f0:8d:89:7b:a5:5a:c5:20:9c:
7d:61:09:6a:e1:88:77:a0:7c:fd:73:be:66:9e:31:
c0:36:5d:9f:12:99:c4:7a:5f:02:4f:4d:d3:62:5a:
4f:9d:ca:49:bc:6b:da:fd:7b:f9:d3:c7:de:ac:e1:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:14:D0:5C:BA:FA:BE:AD:45:82:E6:57:3D:0D:59:8E:74:4B:5F:45
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:110::/48
Signature Algorithm: sha256WithRSAEncryption
25:50:b4:c9:4f:f8:68:2e:94:5f:34:e1:b1:6a:df:7e:57:94:
32:24:5d:7d:d7:da:20:4b:6a:d6:df:a4:2c:ad:87:ce:9a:0d:
ee:cc:ee:8b:f2:70:ff:50:c2:7b:5a:57:ed:c5:e7:7d:80:6b:
9a:ba:3c:d7:38:e4:c8:ed:9a:a0:9a:f9:55:d2:b3:52:d0:9c:
26:99:b7:fd:9e:67:52:44:04:6c:ee:74:88:e9:5b:67:e9:f6:
f1:74:2f:a8:a7:fb:77:56:f8:55:c1:e1:25:92:dc:46:4f:eb:
fd:6e:f5:7f:e7:86:fd:9d:49:9b:56:01:e3:4d:36:b4:96:55:
2f:2a:4b:ed:67:62:fe:77:f8:06:f2:4b:23:74:91:73:8b:57:
d6:19:13:b5:f4:9b:42:87:03:de:66:e7:8d:8c:88:83:24:4e:
db:02:1d:63:6c:a3:27:ea:47:37:a0:da:c4:e6:38:57:63:40:
6f:fd:f7:8f:e2:e9:8b:73:ea:3c:96:c2:5e:ac:76:3a:e6:9f:
77:33:7f:27:66:38:8c:b4:c4:a6:7f:0f:aa:49:a0:c1:7b:3e:
81:b8:c7:ea:22:6c:9a:f6:5f:d2:f8:c5:f5:23:fa:04:dc:59:
a6:a6:71:47:1a:2b:34:64:2b:71:93:88:e1:bc:fa:af:13:f2:
51:93:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:06 2025 by rpki-client