Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/MB63xwwlxwESq4ySPkFb_7OoD0I.roa
File: MB63xwwlxwESq4ySPkFb_7OoD0I.roa (raw, json)
Hash identifier: FEYpr6pwu6U7Xto6H6DCQNUui65oFbBSxyJ2/8NS3bY=
Subject key identifier: 30:1E:B7:C7:0C:25:C7:01:12:AB:8C:92:3E:41:5B:FF:B3:A8:0F:42
Certificate issuer: /CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Certificate serial: 018CC3492D6A820A274628E87A12917B4300
Authority key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/MB63xwwlxwESq4ySPkFb_7OoD0I.roa
Signing time: Mon 01 Jan 2024 04:30:02 +0000
ROA not before: Mon 01 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203453
IP address blocks: 2a11:5cc0:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2d:6a:82:0a:27:46:28:e8:7a:12:91:7b:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=301eb7c70c25c70112ab8c923e415bffb3a80f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:c7:c1:51:b9:c9:86:5d:72:22:11:70:9f:
6c:7e:f2:6c:4d:54:1e:13:64:5a:f9:ec:0b:82:83:
a2:36:03:7a:e5:04:70:36:4b:79:34:8c:f6:5a:56:
93:e5:10:e1:84:d9:0e:26:d7:97:a6:b6:a0:41:44:
11:2d:f6:26:d0:3d:ee:64:0a:30:4f:7e:aa:65:cd:
07:4f:d8:6e:e5:71:13:5d:3a:4c:82:57:c8:20:ae:
04:38:f8:5a:29:55:dd:f3:c9:51:97:1c:19:e3:9c:
f7:17:20:56:3a:1b:79:b8:8c:d7:58:37:3a:18:7e:
7d:60:ce:17:5e:46:06:e6:3d:47:69:4e:88:fe:cb:
68:7f:3b:a5:c2:64:43:57:3c:af:b0:f8:22:e7:d0:
70:97:ea:d6:91:66:b6:70:e3:4a:55:9b:2d:9a:15:
f9:b8:a5:35:4e:60:70:e7:e6:16:5c:6a:ac:b9:06:
66:b3:c2:2b:de:f9:75:d9:41:71:57:7e:26:2a:df:
49:03:cb:8d:b4:40:03:69:b9:5e:78:8a:a9:a8:0e:
30:4b:c8:51:9f:41:1a:73:e0:cc:48:c4:ca:a0:0f:
e1:71:ec:78:96:2d:42:71:4e:e0:0c:5e:91:02:d1:
34:bd:78:b9:0b:2b:ab:a7:4c:51:c2:ba:e8:e8:a1:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:B7:C7:0C:25:C7:01:12:AB:8C:92:3E:41:5B:FF:B3:A8:0F:42
X509v3 Authority Key Identifier:
keyid:63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/MB63xwwlxwESq4ySPkFb_7OoD0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5cc0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
9e:32:05:35:3f:96:65:39:e6:8e:0d:20:9f:29:b6:32:d1:ac:
98:37:de:41:fd:9b:b4:e4:ce:1c:12:73:ea:26:ab:5d:a3:ba:
9b:c0:12:40:82:bb:b4:cd:6f:c5:39:93:37:0c:f1:d5:3f:78:
c9:e7:84:48:8b:52:e7:fa:e9:c2:66:bc:15:b7:fe:17:d1:1b:
a8:bf:7c:54:54:45:58:05:43:1a:1c:ff:06:46:5e:c1:c7:8b:
28:8f:73:9b:d0:08:52:47:59:2b:62:d9:0c:da:90:84:36:7b:
4d:53:cc:88:32:16:2b:72:02:c8:29:1f:96:63:f5:62:dd:11:
42:81:c3:a6:0a:bb:a6:56:08:14:5a:53:fb:fe:c1:45:c6:a0:
b3:8b:1f:cf:a8:2c:99:36:ee:91:d5:05:e9:0a:8c:61:d5:16:
f2:64:c2:a8:6c:86:46:b0:ae:07:b9:0f:49:c2:9f:9c:61:07:
50:03:ed:77:2c:60:03:dc:31:7c:a3:c1:aa:11:97:64:a7:7b:
1d:f7:cb:71:91:97:d4:e6:22:50:f8:5a:b8:ac:ed:5b:58:0c:
21:05:d5:1b:f6:43:6c:2f:4e:b0:40:e4:c0:e2:66:18:24:22:
5d:00:4d:cc:bc:b5:b1:77:22:a8:37:c4:41:a6:b9:7d:ca:66:
23:cf:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:15 2025 by rpki-client