Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MajzrIhagMh_kkRZRcSUXtUCeXE.roa
File: MajzrIhagMh_kkRZRcSUXtUCeXE.roa (raw, json)
Hash identifier: VjXRB+CI7RxNu6EhySaRI9RAXwbX15kDocr7RS/0LC0=
Subject key identifier: 31:A8:F3:AC:88:5A:80:C8:7F:92:44:59:45:C4:94:5E:D5:02:79:71
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422202BF2D64D9635E8A27EAC186385ED
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MajzrIhagMh_kkRZRcSUXtUCeXE.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201733
IP address blocks: 2a0e:8f02:f051::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2b:f2:d6:4d:96:35:e8:a2:7e:ac:18:63:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31a8f3ac885a80c87f92445945c4945ed5027971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:bd:41:5b:cd:4d:d4:8e:9d:40:20:45:04:
c4:2d:18:05:bf:90:5b:78:44:55:4c:a2:6c:fe:c1:
6d:82:2d:25:d4:25:f1:a4:d5:56:65:9a:fe:14:e6:
80:13:44:da:cd:51:64:a2:a2:ea:d1:f2:1c:1c:ed:
b2:97:e4:d4:d1:e1:51:dc:a0:d0:45:70:33:52:46:
53:13:6b:f6:3e:c0:0f:c0:ac:84:f8:c4:20:9c:e7:
77:7f:7a:a9:1d:2d:02:ff:8a:7a:56:fc:ef:ee:95:
34:42:83:8e:1c:62:84:05:e8:34:2b:9b:b5:08:2d:
a6:bb:01:d3:dd:19:81:3d:15:ff:20:9b:0f:0c:b7:
65:09:df:56:66:49:19:03:97:34:cf:39:06:b9:99:
27:f3:ee:d8:0d:53:af:b9:4d:8d:65:ab:7f:6e:10:
33:f2:5c:78:52:03:ef:a3:fb:bc:92:35:db:ef:90:
4f:8b:dc:70:8f:b1:4a:ef:16:a3:03:c1:5a:ca:d7:
20:9d:48:28:74:a9:6f:e8:4f:b1:82:9f:0d:4f:43:
4c:69:6b:d0:f6:fd:e4:9b:5f:6b:2c:7f:67:74:cc:
87:46:67:be:75:fa:c0:4c:91:ab:29:04:52:ad:38:
89:d1:2d:0d:a5:de:c0:3d:2b:6b:ab:65:de:cf:2b:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:F3:AC:88:5A:80:C8:7F:92:44:59:45:C4:94:5E:D5:02:79:71
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MajzrIhagMh_kkRZRcSUXtUCeXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f051::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4c:ca:19:f2:44:72:4c:9b:ca:ad:7f:71:20:87:8d:18:36:
de:0b:ab:40:ea:17:0e:6f:ed:2b:f9:00:9f:0f:d3:5f:41:e5:
e9:81:af:1a:79:eb:74:f3:ed:42:70:58:a4:40:e0:c2:3d:b7:
7c:50:05:04:31:16:60:c4:2e:c9:6d:1d:43:d4:5b:c7:8d:0b:
2f:20:ed:0f:1e:c2:ad:33:d3:ba:e2:22:e9:a6:d2:2d:c3:bb:
22:92:96:f9:a3:69:e3:61:10:84:58:cb:4f:15:2b:e0:98:0f:
ff:78:2b:e6:72:6b:da:4f:fa:b7:50:f7:4f:7d:e3:ed:cb:04:
41:ac:4e:4d:6e:ab:5c:05:7e:65:86:6a:54:a7:35:a5:39:41:
b7:de:0d:c7:ca:39:87:3c:02:ae:c9:68:ed:3b:8f:e5:d1:ae:
e5:dd:ad:71:a8:3a:0d:43:cf:b1:db:28:09:a8:a6:ff:24:91:
b6:42:de:bf:e2:4a:68:d0:27:97:33:07:69:f2:ab:14:a4:45:
22:d7:1a:89:5c:09:35:5f:84:fa:6f:27:c8:7a:a8:2a:3a:76:
c4:d0:08:49:a2:7b:15:6e:e3:c6:7b:79:83:b7:5b:63:f2:15:
d3:8a:38:55:6f:31:c8:3e:02:a1:b2:4a:35:f2:1b:f6:1c:f6:
89:26:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:22:32 2025 by rpki-client