Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mvQVO07wJKLrMjleKx4kGmoJpkQ.roa
File: mvQVO07wJKLrMjleKx4kGmoJpkQ.roa (raw, json)
Hash identifier: 3C3yQHJZhuSQSv7eXEK7mlyHlrscWHNLX3+0SaFcw3Y=
Subject key identifier: 9A:F4:15:3B:4E:F0:24:A2:EB:32:39:5E:2B:1E:24:1A:6A:09:A6:44
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F1C15E7C18220BADA52C9EE80541
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mvQVO07wJKLrMjleKx4kGmoJpkQ.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212718
IP address blocks: 2a0b:b87:ffba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f1:c1:5e:7c:18:22:0b:ad:a5:2c:9e:e8:05:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af4153b4ef024a2eb32395e2b1e241a6a09a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:a6:a2:75:92:2a:3e:65:c9:f1:c3:88:63:
c4:cf:14:12:ff:89:65:ea:39:2a:fa:7d:a8:63:52:
e6:ee:8c:df:95:e1:bd:22:c6:85:01:10:4c:9f:3d:
a1:20:ec:50:99:d7:53:c8:b4:d0:53:b0:f1:59:ce:
c9:82:62:a2:58:a3:5b:c4:5a:68:1f:45:b3:8a:cd:
09:72:02:52:57:c3:7d:e5:e1:5c:59:ad:f1:e7:26:
7d:ea:e8:32:a9:9e:08:28:ac:65:d4:61:b7:5a:37:
6b:0c:84:2c:2b:b0:5b:be:6c:24:98:5c:27:9e:ef:
7b:c3:48:46:21:89:df:d3:4d:db:23:f6:28:ca:f6:
ce:9f:41:10:f2:27:2a:00:fc:42:75:c6:06:d0:db:
64:bd:f6:cd:27:35:ae:e3:a1:ad:42:00:a9:ca:b6:
80:ef:1e:05:3f:07:56:b1:0f:d1:72:2c:71:02:7d:
53:79:21:7a:32:53:7b:00:50:c7:fd:35:49:09:f8:
84:f5:8c:f8:34:87:97:4b:ff:e3:ca:64:70:52:b3:
16:f5:92:fb:cb:ce:10:8f:b4:e7:f2:f2:8a:ee:d9:
95:39:33:56:7e:c2:f4:9a:ce:de:2a:ea:8f:8e:a5:
69:42:a0:0a:ea:c7:bf:71:50:49:73:57:70:ad:2a:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:15:3B:4E:F0:24:A2:EB:32:39:5E:2B:1E:24:1A:6A:09:A6:44
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mvQVO07wJKLrMjleKx4kGmoJpkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffba::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d6:33:e8:d8:0b:7c:c9:43:27:13:62:86:e7:22:9a:ac:2a:
b3:62:00:5f:43:12:0f:ae:f8:94:5d:4e:91:6c:fd:1e:2d:01:
5b:c6:cf:01:81:c9:6a:ae:0d:fb:e7:81:0c:d9:1e:89:d6:55:
5e:c0:9d:84:a3:b6:a5:73:4b:04:4b:ca:3d:d8:ca:c6:01:75:
06:97:f7:93:4e:db:fd:82:35:c5:e6:60:c2:d7:70:72:be:2b:
46:d2:1d:36:ca:3c:8c:4a:a0:8a:01:97:ce:51:ab:ce:2e:ef:
d2:3a:b5:fd:b6:5f:83:47:b8:2a:a8:3f:12:27:01:eb:ac:b3:
58:50:f9:d0:05:83:ac:37:3e:9f:f3:71:53:a9:69:4f:94:90:
0f:0e:a1:50:f5:91:16:a7:d8:f7:a0:8a:21:67:ee:44:d7:28:
31:07:08:45:08:6f:79:1a:aa:7d:42:3b:fa:73:2a:fb:56:a3:
9d:ad:8e:d8:f0:80:a9:04:6f:63:8d:e9:cd:d3:1c:0f:af:bf:
86:bc:47:6e:33:ec:5b:b8:81:bb:35:74:05:ba:db:bd:f7:a2:
d2:cc:69:f0:47:a8:8d:43:b1:af:c6:8a:8d:b3:28:69:22:63:
89:70:6e:3f:d2:bd:a4:5c:3d:af:ad:70:7b:68:2f:a9:7a:2d:
79:8b:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:13 2025 by rpki-client