Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mdnmeiawS_p7JXGUf4Pht7y8Dsc.roa
File: mdnmeiawS_p7JXGUf4Pht7y8Dsc.roa (raw, json)
Hash identifier: mGiHpWxCh0KQmfACsJtw9gLKVWjYKSoy9JbD1u4GnXk=
Subject key identifier: 99:D9:E6:7A:26:B0:4B:FA:7B:25:71:94:7F:83:E1:B7:BC:BC:0E:C7
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CF4AB11ADCE5E3880E8A9FFE6AFF
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mdnmeiawS_p7JXGUf4Pht7y8Dsc.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34692
IP address blocks: 2a0b:b86:12::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:4a:b1:1a:dc:e5:e3:88:0e:8a:9f:fe:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99d9e67a26b04bfa7b2571947f83e1b7bcbc0ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:93:6c:27:b3:cc:1e:d7:3f:6d:9e:77:89:
79:6a:09:aa:87:08:a8:12:eb:dd:b5:36:34:6e:53:
1c:c4:d2:e5:d8:79:44:da:80:fc:5e:84:8e:fc:46:
8a:00:ac:6b:13:e3:85:39:1c:aa:9f:94:e7:30:50:
07:c1:3e:d9:91:29:23:e4:5b:ae:20:a4:c3:24:d1:
ba:04:23:cb:65:d6:1b:2d:bc:90:17:de:9c:18:55:
06:b3:3c:e8:de:87:4b:3c:c9:af:36:99:d2:51:e1:
d8:21:8b:39:7b:74:ca:5d:7a:f7:37:ba:80:c3:cc:
92:a3:2f:68:6d:ae:07:d9:bb:ce:06:ad:33:f7:52:
07:63:7f:fc:29:72:39:fb:f0:3c:73:d8:e2:fd:04:
00:5e:e8:a6:be:b3:0e:1b:c3:cd:bb:d7:f5:12:7a:
cf:55:d8:70:d8:3c:cb:ac:51:d0:a8:1e:96:03:42:
e8:9e:0f:74:80:6b:d5:0b:cb:32:54:d4:69:dc:13:
b5:f8:e1:c8:9c:7e:9b:3e:b2:aa:9a:2e:a1:05:eb:
88:6a:d8:33:db:02:af:07:90:0c:4a:cf:25:51:0c:
75:4a:cf:ec:a1:50:03:d5:fb:17:8a:46:5a:a4:25:
b2:24:de:97:53:8e:c6:91:7b:f6:8a:16:8b:e4:35:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:E6:7A:26:B0:4B:FA:7B:25:71:94:7F:83:E1:B7:BC:BC:0E:C7
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mdnmeiawS_p7JXGUf4Pht7y8Dsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:12::/48
Signature Algorithm: sha256WithRSAEncryption
9e:18:31:82:4e:f5:98:68:e5:c9:b9:95:f2:c0:fd:c6:bf:5d:
13:e9:9c:c7:9f:56:7b:c6:f3:bb:35:93:ca:ec:88:c6:9c:94:
6e:1b:55:a9:1c:23:91:0b:cd:3b:0e:27:ca:f2:9f:98:51:19:
a8:29:de:6b:3c:d8:5f:dc:8f:28:b8:a5:08:5f:ba:2e:aa:21:
ff:6e:01:25:42:33:bd:32:b5:d7:c4:ac:71:e5:a5:83:5c:7f:
a6:7f:d6:2c:c1:0d:61:67:69:92:d3:01:5d:95:95:61:26:e6:
eb:d0:3d:f4:28:ce:a5:87:16:da:15:c6:56:ad:19:e5:50:30:
c8:72:f6:fe:4c:f0:70:46:05:30:3b:d4:8b:39:f5:b6:a6:70:
87:e4:58:07:3c:04:87:66:d2:59:5f:69:6b:6f:25:f5:c7:40:
5e:ff:07:c2:e4:2f:79:e0:a1:90:e5:ff:e9:ca:3f:d5:da:68:
dc:e2:e4:d6:91:cf:e9:90:62:98:cf:5c:c4:b4:9d:01:44:4b:
1e:23:96:f3:30:0d:4e:5d:d8:8f:f6:34:4d:36:db:1d:93:66:
b3:96:43:45:e9:ff:89:8c:47:93:d4:9b:ff:75:dc:f3:e9:59:
b4:50:b9:c1:73:f8:e1:9b:cd:5c:e0:1b:ce:10:82:f2:20:99:
a1:03:6c:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnR89KsRrc5eOIDoqf/mr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWQ5ZTY3YTI2YjA0YmZhN2IyNTcxOTQ3ZjgzZTFiN2JjYmMwZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ6TbCezzB7XP22ed4l5agmqhwio
EuvdtTY0blMcxNLl2HlE2oD8XoSO/EaKAKxrE+OFORyqn5TnMFAHwT7ZkSkj5Fuu
IKTDJNG6BCPLZdYbLbyQF96cGFUGszzo3odLPMmvNpnSUeHYIYs5e3TKXXr3N7qA
w8ySoy9oba4H2bvOBq0z91IHY3/8KXI5+/A8c9ji/QQAXuimvrMOG8PNu9f1EnrP
Vdhw2DzLrFHQqB6WA0Long90gGvVC8syVNRp3BO1+OHInH6bPrKqmi6hBeuIatgz
2wKvB5AMSs8lUQx1Ss/soVAD1fsXikZapCWyJN6XU47GkXv2ihaL5DU6lwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJnZ5nomsEv6eyVxlH+D4be8vA7HMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvbWRubWVpYXdTX3A3SlhHVWY0UGh0N3k4RHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLhgAS
MA0GCSqGSIb3DQEBCwUAA4IBAQCeGDGCTvWYaOXJuZXywP3Gv10T6ZzHn1Z7xvO7
NZPK7IjGnJRuG1WpHCORC807DifK8p+YURmoKd5rPNhf3I8ouKUIX7ouqiH/bgEl
QjO9MrXXxKxx5aWDXH+mf9YswQ1hZ2mS0wFdlZVhJubr0D30KM6lhxbaFcZWrRnl
UDDIcvb+TPBwRgUwO9SLOfW2pnCH5FgHPASHZtJZX2lrbyX1x0Be/wfC5C954KGQ
5f/pyj/V2mjc4uTWkc/pkGKYz1zEtJ0BREseI5bzMA1OXdiP9jRNNtsdk2azlkNF
6f+JjEeT1Jv/ddzz6Vm0ULnBc/jhm81c4BvOEILyIJmhA2zS
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:01:42 2025 by rpki-client