Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/MR0ONrQJYror_aow1uURiKS1lc4.roa
File: MR0ONrQJYror_aow1uURiKS1lc4.roa (raw, json)
Hash identifier: 7VVeRBOmHESI66jqoq7XpQepTKqxCC48y8WxmFBmQmI=
Subject key identifier: 31:1D:0E:36:B4:09:62:BA:2B:FD:AA:30:D6:E5:11:88:A4:B5:95:CE
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 0275C69F
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/MR0ONrQJYror_aow1uURiKS1lc4.roa
Signing time: Thu 02 Jun 2022 10:13:26 +0000
ROA not before: Thu 02 Jun 2022 10:13:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211891
IP address blocks: 2a11:29c0:3df3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41272991 (0x275c69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:13:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=311d0e36b40962ba2bfdaa30d6e51188a4b595ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:9a:ec:6e:cc:b4:24:c3:34:e0:9c:a5:af:
06:62:64:be:4c:4b:9e:3f:32:70:cd:cb:ae:35:ce:
ec:9b:a8:ac:6b:aa:b1:10:a4:bd:38:ce:ec:e0:65:
07:82:0e:07:22:8a:de:c2:6a:8b:21:17:99:6a:ee:
ee:aa:55:16:a7:8e:3e:08:78:4f:8e:47:64:4a:97:
8c:a2:b1:18:1d:31:d0:0a:dc:6a:ec:ee:0f:8e:79:
af:bb:e1:7a:9c:5d:1e:e8:0c:ba:43:2f:e1:a4:92:
58:21:58:24:82:b9:ba:6d:78:e2:65:95:98:0b:4f:
3d:7d:01:32:6b:b5:b8:d2:b2:13:ce:cd:38:6e:1b:
82:17:08:30:d4:53:71:94:a3:cd:a4:fd:44:cb:49:
65:f0:8d:d9:0b:13:38:bf:02:ff:94:79:5e:f6:77:
57:09:ff:20:db:6d:f5:7c:2f:a1:c6:0d:1a:3e:a3:
03:4c:6d:11:30:14:db:ce:82:08:3f:54:69:b9:85:
be:cb:38:b8:15:6f:72:57:10:f1:48:38:25:c2:60:
7b:1d:b1:b1:66:f3:08:a9:b8:dc:65:ea:b5:fa:fc:
3e:40:59:64:4c:6a:d3:f5:00:33:f2:4e:e9:00:a8:
6f:ed:79:bd:37:8d:81:5d:3d:ab:2b:5c:d1:64:32:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:0E:36:B4:09:62:BA:2B:FD:AA:30:D6:E5:11:88:A4:B5:95:CE
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/MR0ONrQJYror_aow1uURiKS1lc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df3::/48
Signature Algorithm: sha256WithRSAEncryption
00:8f:67:39:8c:07:da:a5:9b:97:a5:b4:7e:dd:1d:82:df:9f:
37:d1:f1:ae:50:17:a0:44:36:1f:11:73:4a:fc:cd:30:ae:5c:
82:b0:cc:19:40:24:05:22:c0:43:8a:ff:cc:5c:e8:09:83:d6:
ab:46:31:49:81:db:7b:64:c7:21:20:22:d2:60:35:04:bf:76:
dd:45:22:c6:e5:ff:9b:68:25:a8:e5:c4:3b:5c:33:60:01:91:
5f:3c:be:5b:ee:34:da:f0:e7:32:7f:19:4c:e0:91:b3:6c:ed:
06:81:00:40:3b:62:21:6d:38:3c:a7:82:99:50:af:f0:7c:fb:
17:05:7d:49:ea:48:29:cd:49:92:bc:69:7e:26:e8:0f:20:dc:
19:85:45:e4:3b:f3:76:62:e0:db:c0:ee:d9:eb:cf:88:56:38:
8d:df:9f:35:24:8a:81:05:40:0b:e9:fe:e2:5a:33:3d:ad:f5:
8f:e9:ee:6a:94:7e:f0:99:f1:46:30:58:cb:f9:3e:5a:68:93:
b6:36:86:11:28:56:41:02:99:cb:82:a2:cc:d8:e3:b6:17:41:
b4:3e:9d:30:ac:b1:a0:1d:6f:22:0b:5d:9c:9d:08:9d:9d:78:
9e:9d:53:b9:be:f3:1d:5a:ea:51:15:12:de:fa:34:78:65:9e:
5e:c8:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:58:46 2025 by rpki-client