Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/MLJYWdu3EJ1kDoXjD2sDbwkzhSI.roa
File: MLJYWdu3EJ1kDoXjD2sDbwkzhSI.roa (raw, json)
Hash identifier: RWt+LdPY6cG+jg5tSJDKIGsgyTXXqJgUgGTRatlyo0E=
Subject key identifier: 30:B2:58:59:DB:B7:10:9D:64:0E:85:E3:0F:6B:03:6F:09:33:85:22
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019425214396149F8ECE2A4118AC169ED36E
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/MLJYWdu3EJ1kDoXjD2sDbwkzhSI.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 2a10:c943::/32 maxlen: 32
2a10:c943:100::/48 maxlen: 48
2a10:c943:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:43:96:14:9f:8e:ce:2a:41:18:ac:16:9e:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b25859dbb7109d640e85e30f6b036f09338522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:bc:85:1f:7f:b3:b1:e3:1c:88:5c:ad:af:
0a:dd:dc:c0:37:fb:73:8c:c1:dd:62:c2:84:ca:5f:
f1:48:4d:4f:69:ca:a8:b7:b0:79:fc:f2:35:32:8d:
6b:e0:37:2f:d0:18:a7:ef:52:93:f4:83:bf:b4:c7:
f9:68:33:05:69:59:97:60:4a:d8:8b:52:0a:f0:d0:
6b:a3:09:08:32:22:00:ed:1f:67:26:56:09:74:31:
67:7d:37:ff:ff:d7:72:c6:6e:14:39:18:28:d3:8e:
b5:e2:ad:5e:78:c2:0e:8f:e3:f8:3e:fd:41:32:49:
8d:8d:80:68:41:1d:c5:74:4b:38:85:5d:85:aa:f9:
f3:42:c8:c5:2f:3f:a1:26:85:d0:7d:c3:4d:dc:d7:
0d:08:8a:32:b5:fc:16:31:8b:62:66:dc:d6:32:14:
de:6a:3a:05:66:d8:6e:6f:c3:20:24:6a:3f:75:15:
42:35:d6:90:05:96:c5:7e:86:3a:2b:b4:1f:4c:f0:
80:2f:c8:39:8e:f6:56:07:35:b9:76:7a:4f:0b:7e:
d5:c1:6f:a1:ae:a8:8a:22:d2:dc:ae:09:9a:81:d8:
15:e8:53:ff:86:c1:33:7c:2b:8c:9d:22:9b:22:61:
04:3f:3c:f3:6c:46:31:64:e6:8b:42:5c:37:e7:95:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:58:59:DB:B7:10:9D:64:0E:85:E3:0F:6B:03:6F:09:33:85:22
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/MLJYWdu3EJ1kDoXjD2sDbwkzhSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c943::/32
Signature Algorithm: sha256WithRSAEncryption
2c:68:2f:d4:72:a6:08:f3:53:98:e5:72:7c:41:02:11:3d:1f:
36:b7:bd:49:11:a2:c4:15:01:f0:d7:7f:3d:c0:6f:bc:a1:dc:
83:ed:de:c0:e3:38:53:b7:56:ad:e2:1f:4d:82:e6:b9:3c:07:
19:71:8e:5d:93:a9:77:6b:5c:fe:28:f6:83:e9:4d:22:50:e1:
02:d8:58:1d:7b:52:1e:17:41:59:bb:f3:93:9a:43:8a:66:88:
eb:26:fc:81:63:25:88:1c:f9:97:0f:08:9e:4f:5a:41:42:ff:
31:04:43:67:e5:b2:55:4d:88:e7:65:cf:55:74:13:29:8a:a6:
ec:02:b2:cd:7a:65:d0:9f:88:8f:ed:3e:27:6a:4f:e2:0c:e9:
b9:42:f3:f6:ba:01:3a:c5:b6:f0:cc:f9:99:28:78:ad:33:f1:
6f:82:e5:b3:36:46:30:3e:50:16:c3:76:af:f6:75:92:17:03:
33:b4:7c:5f:1d:5c:4e:07:c1:8c:5c:86:19:1e:c8:a1:42:5b:
3d:f7:78:39:43:15:f3:d6:7b:bc:1d:34:4d:ca:3e:8b:61:f5:
cd:cf:35:2f:34:9b:41:bd:d4:7e:fd:ed:a6:43:ae:27:4e:60:
b4:04:ea:e9:47:9f:bf:9b:b2:a4:9a:ef:26:6f:05:e8:96:7b:
39:cd:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:26 2025 by rpki-client