Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/motJg_hClgvKFxrmI0ThBISo3lo.roa
File: motJg_hClgvKFxrmI0ThBISo3lo.roa (raw, json)
Hash identifier: 1+GgeLsk0bVXeFjHtsYrISwKmvPy/YI4vUXD5HuoJw0=
Subject key identifier: 9A:8B:49:83:F8:42:96:0B:CA:17:1A:E6:23:44:E1:04:84:A8:DE:5A
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C5F15409E3DA59533605EB3AE385C
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/motJg_hClgvKFxrmI0ThBISo3lo.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42116
IP address blocks: 2a02:2698:4400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5f:15:40:9e:3d:a5:95:33:60:5e:b3:ae:38:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8b4983f842960bca171ae62344e10484a8de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:f0:62:b4:80:9a:04:65:0f:b5:2a:64:e3:
7b:59:a3:bb:e2:fa:2e:50:b3:65:28:7f:bc:9d:4e:
35:13:41:83:c9:67:d7:ad:33:78:fa:0f:19:d1:d6:
29:00:f6:40:82:c0:52:8c:7c:ab:a5:12:ed:f8:e0:
6e:b8:07:01:d9:3f:30:a4:01:6a:f2:52:c1:4d:da:
f7:81:43:5a:98:8a:4d:63:fb:a5:d7:35:ea:ca:54:
93:cf:bb:47:bb:05:da:02:bf:8d:65:21:f1:cd:05:
ed:06:e6:6e:ff:4e:71:41:b9:6a:9b:33:df:73:78:
1c:63:5b:0b:82:c2:62:0f:62:04:3c:d4:ad:a0:2f:
85:81:a0:b3:00:b9:52:00:02:22:9a:1e:a9:e5:f6:
30:c4:ff:59:04:91:37:0a:f8:6d:1c:c1:41:4a:ec:
50:ca:35:3b:ef:cf:c7:7a:dd:a6:a9:43:3e:b1:77:
13:63:ad:d2:9c:3e:86:7c:f5:67:07:96:d2:0f:55:
e6:66:ef:52:d6:23:cd:2b:0a:22:3a:c6:59:19:d0:
05:64:8a:a0:fa:5a:bc:cc:e3:e4:29:a2:0c:f8:7f:
6c:f3:68:e6:c7:c8:14:ab:e3:a4:d4:d9:ae:90:df:
2e:fb:76:bf:b5:7f:40:21:36:7e:94:0c:62:09:d9:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:49:83:F8:42:96:0B:CA:17:1A:E6:23:44:E1:04:84:A8:DE:5A
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/motJg_hClgvKFxrmI0ThBISo3lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:4400::/38
Signature Algorithm: sha256WithRSAEncryption
4c:12:7a:e1:3c:c6:79:ad:45:da:f2:4a:f1:7d:52:c7:d9:e4:
12:ab:2c:f1:d9:38:60:15:cb:3d:b6:e2:94:21:11:4f:76:80:
f1:6a:fd:f7:04:90:37:d6:56:17:9f:fc:c0:25:dc:f8:78:a9:
dd:71:0c:a3:ab:2c:76:96:00:32:67:6f:26:f8:00:55:6c:cc:
99:1a:27:b4:c3:bf:c0:df:17:08:e0:03:2c:37:07:5e:37:ba:
16:13:38:d0:39:ca:76:20:f2:13:ab:73:25:7a:0f:e7:c8:83:
55:70:31:6f:ff:fc:d0:2b:c4:03:81:01:2e:60:1d:b1:42:86:
9d:d5:aa:44:71:9e:95:b0:6d:c9:4d:01:3c:0f:1c:6d:45:b4:
f8:c7:b3:57:d0:dc:9d:bc:0f:56:47:d8:a0:70:e0:c3:e9:21:
15:b0:fc:33:84:42:10:54:e6:83:a5:1a:a5:97:c5:9e:9f:26:
22:65:39:ab:e1:27:7a:8d:43:7b:ca:19:b3:f1:ff:47:33:24:
a5:5a:b1:60:73:05:d5:3b:08:a2:6b:69:b9:ab:90:98:04:08:
de:a3:79:2c:98:87:bc:61:4f:b4:b8:95:c5:d6:ce:ca:86:a7:
88:e0:43:ff:e0:dc:c1:20:3a:07:01:30:2d:20:7d:be:05:5e:
14:aa:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:41 2025 by rpki-client