Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mRAm37Q4RDP7D_TxhBSyD1tDJ3s.roa
File: mRAm37Q4RDP7D_TxhBSyD1tDJ3s.roa (raw, json)
Hash identifier: FdK8+l8HOg0NBcLIgJBKsda2vg3GZNub3MT42Vz/ZxA=
Subject key identifier: 99:10:26:DF:B4:38:44:33:FB:0F:F4:F1:84:14:B2:0F:5B:43:27:7B
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: F870E6
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mRAm37Q4RDP7D_TxhBSyD1tDJ3s.roa
Signing time: Sat 01 Jan 2022 07:56:57 +0000
ROA not before: Sat 01 Jan 2022 07:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210738
IP address blocks: 2a11:29c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16281830 (0xf870e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jan 1 07:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=991026dfb4384433fb0ff4f18414b20f5b43277b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:b9:6c:ab:1c:32:ad:e9:a5:bf:4a:24:49:
8b:47:e9:2b:56:d1:a9:d7:ca:dd:19:9e:f9:16:c2:
92:68:a7:28:77:bb:da:ad:99:e7:b1:ce:67:d3:14:
18:58:30:0d:3b:a7:7d:7e:2f:39:47:f4:2b:7f:f3:
21:2a:21:c3:06:30:1f:9a:c8:68:e3:17:85:22:52:
41:92:57:2e:33:af:6d:56:23:46:5f:d0:68:76:fe:
fa:7e:76:dc:b3:51:f1:fa:c1:a3:42:8f:f9:99:dd:
f7:48:78:30:6e:ea:03:06:30:cc:86:e4:24:48:05:
ef:bc:31:8b:c0:c3:26:39:cc:5c:11:06:f3:7d:b8:
d8:79:41:34:01:1f:08:7b:24:45:49:b9:7c:c0:e9:
63:52:bd:c9:77:65:e3:4f:e6:bf:99:53:49:23:b4:
97:cc:07:cd:b0:d0:57:d7:29:1a:d9:04:0a:5f:f1:
ae:b6:8e:f9:5a:e9:34:51:19:25:87:ee:ec:90:6a:
77:2e:1f:55:55:c1:4a:8a:e3:d2:f0:5a:8b:39:98:
a5:8a:f1:ea:49:31:dc:72:c6:75:7c:93:4b:50:2b:
f0:99:10:8e:c0:12:da:5d:f6:7c:c8:71:57:15:bd:
8a:64:c1:50:9e:f1:4e:79:9f:69:f8:e1:a2:a3:c5:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:26:DF:B4:38:44:33:FB:0F:F4:F1:84:14:B2:0F:5B:43:27:7B
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/mRAm37Q4RDP7D_TxhBSyD1tDJ3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
00:7d:c3:25:c2:fc:ca:2a:a1:e2:f3:d2:2b:47:6a:94:97:41:
55:cf:39:0f:d7:9b:65:81:a0:da:4c:5d:0e:d8:7f:d8:55:fa:
4b:24:0e:a9:13:aa:db:f3:64:a3:50:74:57:fe:53:40:fb:e7:
00:b8:8d:ec:32:d1:f0:13:1e:b9:3a:e5:a6:a9:cf:22:ad:32:
ef:bf:31:ff:4a:54:18:36:99:80:45:76:80:a6:08:3f:ee:a6:
0b:4a:8b:d7:39:88:76:83:c9:fc:a4:d5:13:a9:43:7f:9a:4e:
fc:28:1c:5b:45:bf:ff:6a:7d:f7:e4:df:5f:3c:e5:f5:2b:27:
d0:4c:89:b6:7a:7d:dd:17:e9:87:9b:f2:b9:1a:79:a6:52:31:
5d:51:c7:7f:01:24:b8:bc:00:4b:33:69:f4:05:76:6f:e9:7b:
6d:21:3d:6b:01:fc:fd:6e:68:af:32:1b:89:07:b0:dd:f9:3e:
ee:9f:0f:8f:45:e5:8f:09:e4:4e:d2:74:bb:dd:95:21:e9:a0:
e8:cb:f9:4e:4f:d0:36:42:e8:a5:15:b0:d6:ac:7a:a8:3d:e7:
27:77:52:56:cb:87:5d:bc:df:0f:ae:56:f2:77:75:64:2b:7a:
3e:2d:5b:70:a3:4e:93:36:92:3a:43:c2:4e:34:0d:67:a2:c4:
91:ac:6a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:02 2025 by rpki-client