Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cMU8VvUmjbwv8fW28N13UafJfMI.roa
File: cMU8VvUmjbwv8fW28N13UafJfMI.roa (raw, json)
Hash identifier: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=
Subject key identifier: 70:C5:3C:56:F5:26:8D:BC:2F:F1:F5:B6:F0:DD:77:51:A7:C9:7C:C2
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01948E60A77303EF0B2D01FE814492A316F7
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cMU8VvUmjbwv8fW28N13UafJfMI.roa
Signing time: Wed 22 Jan 2025 14:18:06 +0000
ROA not before: Wed 22 Jan 2025 14:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215772
IP address blocks: 2a10:4646:3e0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:60:a7:73:03:ef:0b:2d:01:fe:81:44:92:a3:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 22 14:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70c53c56f5268dbc2ff1f5b6f0dd7751a7c97cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:fc:f8:24:10:3e:af:be:37:93:59:c0:74:
7e:c3:1c:0f:80:d4:e7:ae:29:d3:10:aa:6a:47:14:
e7:00:c6:68:25:c0:f2:a9:0b:b8:48:46:85:53:16:
85:c6:2d:14:0f:5d:38:6d:77:35:9a:7a:99:02:f0:
ee:2f:39:9f:14:51:89:22:17:9f:b2:5a:e1:71:5c:
57:20:e8:2e:24:1b:d5:ca:9f:45:81:57:5f:64:3c:
6b:a9:86:bc:e4:48:c8:97:b7:2e:98:c0:49:3d:00:
4b:fa:ef:ad:9f:3a:f6:b5:4e:ad:33:8e:dd:b7:19:
42:51:a3:fd:05:3d:a4:9a:ad:38:49:30:a6:9e:ce:
51:92:ff:43:61:ec:d6:2c:a6:16:be:5c:11:71:24:
62:6e:c7:4c:2c:91:c0:03:a3:d7:ec:d6:aa:c0:83:
82:37:04:ba:d5:e3:5c:f2:e9:38:ae:ba:33:00:a0:
fd:25:7d:fc:25:ef:40:4e:5f:cb:d4:54:a1:f6:a7:
9f:aa:a1:35:3e:b9:2b:29:b9:e3:c0:69:72:64:f0:
05:6b:ff:7c:74:da:db:44:d3:f5:a0:97:06:46:02:
f8:a7:e9:89:38:99:73:bf:56:13:98:4b:66:70:cb:
79:de:68:19:ab:4b:6f:ed:9d:a4:e3:9c:70:6c:47:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:3C:56:F5:26:8D:BC:2F:F1:F5:B6:F0:DD:77:51:A7:C9:7C:C2
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cMU8VvUmjbwv8fW28N13UafJfMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3e0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:55:e8:97:c7:d4:9a:93:18:8f:9b:5a:1e:49:3b:de:9a:1d:
ba:e7:07:5d:3d:c5:b5:18:50:84:fa:7a:9d:06:b9:f6:15:10:
e1:74:78:f9:e0:ac:8e:4a:4a:27:e2:d1:95:fc:3d:c3:86:b8:
13:a6:70:b9:fe:84:15:b7:db:84:18:0a:9c:15:87:d7:5a:22:
73:ef:f1:91:a0:e8:91:55:f1:a7:c8:00:15:90:63:df:08:cb:
a1:63:ff:b8:b9:8e:fd:ce:ef:68:22:2c:65:0a:e2:b9:d5:12:
b8:0a:92:45:7f:0e:a4:57:5a:43:a6:c8:0c:f9:1f:a4:e6:b2:
33:cb:78:36:63:c9:42:0e:e0:a3:97:12:bf:a3:b6:07:50:ec:
b0:a6:90:ee:fd:f6:b0:a6:ec:ad:6f:d6:53:00:a8:76:98:e6:
1f:5a:29:91:d2:d7:c1:8e:cb:cb:d3:cc:d8:1a:77:9f:2d:ba:
b5:61:d6:4b:8e:60:de:a3:91:d1:e9:eb:b8:3d:c6:35:7a:65:
49:af:d8:cd:07:b2:67:69:fb:8f:c9:7a:ba:61:25:7c:a6:ca:
3d:0d:25:d0:ad:21:48:2f:98:1b:0f:7e:98:ca:3d:a0:45:be:
3f:b4:f6:30:df:68:9b:dd:36:21:63:97:d1:87:5b:ec:e0:d9:
86:c9:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:38 2025 by rpki-client