Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Mep_oW6oSHpfM-EqADqLPxvIqFs.roa
File: Mep_oW6oSHpfM-EqADqLPxvIqFs.roa (raw, json)
Hash identifier: 6a8TBTQQpOa0vAb9MxuUWCM81ytCduZcl8Sm4ouPZoY=
Subject key identifier: 31:EA:7F:A1:6E:A8:48:7A:5F:33:E1:2A:00:3A:8B:3F:1B:C8:A8:5B
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01956A48A25572B8C852F2E6C85102B24F31
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Mep_oW6oSHpfM-EqADqLPxvIqFs.roa
Signing time: Thu 06 Mar 2025 07:08:19 +0000
ROA not before: Thu 06 Mar 2025 07:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207137
IP address blocks: 2a13:240::/48 maxlen: 48
2a13:240:1::/48 maxlen: 48
2a13:240:2::/48 maxlen: 48
2a13:240:3::/48 maxlen: 48
2a13:240:4::/48 maxlen: 48
2a13:240:5::/48 maxlen: 48
2a13:240:6::/48 maxlen: 48
2a13:240:7::/48 maxlen: 48
2a13:240:8::/48 maxlen: 48
2a13:240:9::/48 maxlen: 48
2a13:240:a::/48 maxlen: 48
2a13:240:b::/48 maxlen: 48
2a13:240:4200::/40 maxlen: 40
2a13:240:4300::/40 maxlen: 40
2a13:240:4400::/40 maxlen: 40
2a13:240:4500::/40 maxlen: 40
2a13:240:4600::/40 maxlen: 40
2a13:240:4700::/40 maxlen: 40
2a13:240:4800::/40 maxlen: 40
2a13:240:4900::/40 maxlen: 40
2a13:240:4a00::/40 maxlen: 40
2a13:240:4b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:48:a2:55:72:b8:c8:52:f2:e6:c8:51:02:b2:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Mar 6 07:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31ea7fa16ea8487a5f33e12a003a8b3f1bc8a85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:f3:ed:a6:ea:ef:1e:e2:3b:c8:e3:b4:9e:
6d:25:cf:e6:ae:cf:27:5a:ff:a3:d6:bf:7a:7f:86:
53:c6:4f:96:de:be:6d:3f:52:e8:03:ab:33:9c:bc:
9f:7a:68:0c:e9:97:70:03:d5:65:f8:be:6b:ed:46:
2a:1d:37:3d:47:28:ff:0b:52:2c:60:c0:55:54:9e:
77:b0:93:c8:4a:08:dd:39:7c:fe:6f:4a:63:be:0f:
bd:30:62:2f:91:a1:5a:96:59:51:26:7c:bf:bb:48:
28:a8:54:b2:e7:5b:d5:21:7a:0b:cf:ea:9b:29:6c:
ed:24:2b:8a:b7:f6:ac:59:d6:f9:14:db:6d:1e:05:
c1:d4:55:d4:ba:34:e5:b0:0e:6f:1b:dd:82:b5:9e:
7d:77:09:db:cc:68:31:7b:63:48:97:0c:7a:9c:f6:
f9:dd:e3:00:34:9a:04:2e:01:49:53:07:b4:db:d7:
d0:7f:4e:b1:c1:55:5c:fc:0f:40:07:d9:4e:96:4f:
f3:ce:15:cc:d3:18:eb:3c:b4:65:53:ae:cd:1d:88:
53:26:6f:c2:fe:67:1b:8c:2f:58:5f:7e:21:a3:bb:
27:9b:4c:38:04:20:95:83:88:ac:71:6d:e5:82:72:
4a:47:83:91:4d:00:df:69:37:99:2b:e8:2a:d1:33:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EA:7F:A1:6E:A8:48:7A:5F:33:E1:2A:00:3A:8B:3F:1B:C8:A8:5B
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/Mep_oW6oSHpfM-EqADqLPxvIqFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:240::-2a13:240:b:ffff:ffff:ffff:ffff:ffff
2a13:240:4200::-2a13:240:4bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:c2:9d:d8:ab:e6:e3:75:fd:e3:3b:d3:e2:7e:88:72:5d:94:
b3:33:3d:2a:32:62:12:b0:04:3c:4a:2f:b0:a1:05:74:34:38:
33:14:58:f3:a7:ca:b8:22:92:f9:5f:5e:00:fb:aa:67:6d:a3:
03:d0:be:80:ef:53:2d:99:fb:ea:e3:1d:9e:70:08:a3:b1:39:
27:79:08:8b:ad:31:5d:cb:99:12:54:b9:47:c2:fd:80:1d:38:
be:cf:ba:3e:55:aa:52:f2:6f:da:f0:e7:aa:10:59:1d:dc:8c:
95:98:2a:6a:36:96:e3:21:b3:67:ca:77:38:73:18:b4:e1:4d:
03:a5:04:ea:d2:20:ca:74:bf:49:6f:f5:a6:f8:96:29:cb:52:
4e:f6:72:76:b7:c9:5a:86:4f:46:83:6a:5a:22:8e:58:cd:5f:
98:89:a7:32:f1:df:77:4b:3f:4d:96:7b:af:83:2b:51:45:0f:
b7:c6:f6:03:f7:61:ef:39:93:e4:77:60:fa:3c:7d:38:55:00:
8d:02:20:c0:9e:e9:cf:c8:40:03:2a:6d:03:f2:72:54:9a:9c:
b0:57:78:b5:a7:30:cf:5a:19:60:df:06:8b:19:a7:68:cb:88:
96:67:b6:e2:dc:02:67:f5:67:7c:d8:26:26:68:07:6c:95:ed:
6b:c3:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:01:30 2025 by rpki-client