Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa
File: mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa (raw, json)
Hash identifier: ORm5qRABgNl1N4KGsHAqufuM1fGQIyB3FsBRWB7Oy2E=
Subject key identifier: 9A:03:A0:22:0E:5B:7D:6E:6A:F7:F9:02:49:33:CF:37:47:F4:1C:9E
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3AE6AC480040BC5D1CEA600941F1E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50375
IP address blocks: 2a01:d0:a::/48 maxlen: 48
2a01:d0:3a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ae:6a:c4:80:04:0b:c5:d1:ce:a6:00:94:1f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a03a0220e5b7d6e6af7f9024933cf3747f41c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:aa:8f:75:d2:c2:7b:f2:d7:16:91:ac:c5:
8a:19:54:b5:91:fd:f3:8a:30:dc:89:e0:88:ee:50:
d9:9c:0b:c3:75:af:1e:3e:92:f1:2a:bf:ce:48:0a:
ec:df:7b:89:e6:cb:3e:e3:ed:95:e3:f4:21:0d:f5:
8a:1e:f1:6d:18:9e:87:b2:36:6a:b8:41:95:4b:ef:
d9:8e:5f:e5:6a:a5:62:91:2f:3a:f0:69:24:ab:75:
c3:14:5c:49:71:c7:82:86:9e:b1:ec:94:e5:b4:f9:
48:c0:da:2d:0f:1b:da:93:42:21:78:33:5c:7d:14:
88:21:bf:0e:5d:d2:5e:30:86:fe:15:08:f2:fd:eb:
9d:9b:db:f7:96:81:b4:8d:12:0a:55:f3:3c:96:95:
06:db:54:73:32:2b:d7:c3:37:c9:70:7a:c6:d7:d6:
7e:2a:0b:83:98:67:42:dc:29:29:b6:97:ca:41:3d:
8f:62:fe:94:c6:bc:ad:b0:6d:e6:52:fb:e3:48:7e:
99:70:54:08:e6:bb:44:0b:55:03:98:2a:3b:99:a7:
92:3c:ca:df:13:7f:c4:6a:fd:44:6e:be:80:c6:1b:
9b:85:0a:ff:ca:42:62:ee:72:38:4e:1a:e3:51:54:
2f:3a:17:35:49:eb:8a:45:39:14:41:33:8b:12:07:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:A0:22:0E:5B:7D:6E:6A:F7:F9:02:49:33:CF:37:47:F4:1C:9E
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:d0:a::/48
2a01:d0:3a::/48
Signature Algorithm: sha256WithRSAEncryption
50:09:db:3d:ab:c9:ce:fb:2f:a7:1a:df:cb:32:cb:6a:48:bc:
75:ff:91:dc:c1:c6:5b:06:0f:c2:5f:0c:d1:0b:69:c3:62:36:
9f:38:1d:36:89:3b:fb:af:f8:a4:26:b8:10:28:c6:3c:76:bf:
72:d4:e4:18:90:c4:12:6c:d4:68:f9:94:cf:95:91:ea:82:05:
11:1b:0b:63:62:5c:97:7b:b8:56:48:ae:69:19:69:57:d1:28:
41:48:aa:0f:50:99:af:2f:cb:34:56:5b:62:d4:22:3a:77:a9:
c3:cd:9c:3e:ba:89:93:ea:f5:3e:2d:40:5b:41:2c:5a:f5:b0:
70:3b:01:3b:b7:f8:10:5a:f5:13:74:aa:67:36:7b:c0:ad:1c:
d2:c6:99:5f:f4:ad:af:2a:9e:1a:cf:92:3a:29:94:5c:14:22:
57:10:ce:7d:6c:55:a1:b7:a7:61:bf:20:9b:a6:cc:cc:5a:4c:
e0:31:ae:a5:5d:bb:97:f5:bc:4f:e8:87:d4:5b:9f:4b:94:74:
99:2b:ac:d4:61:6f:33:62:c2:63:03:23:93:95:0e:96:87:2c:
f0:ff:27:4a:7c:c3:8d:18:d6:fe:52:1e:f4:9e:5d:80:3e:0a:
2d:89:b3:cc:97:73:b7:40:c1:61:2e:44:e5:13:83:c1:ea:d6:
ef:10:a6:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks65qxIAEC8XRzqYAlB8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMTAyMDE0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTAzYTAyMjBlNWI3ZDZlNmFmN2Y5MDI0OTMzY2YzNzQ3ZjQxYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz6qj3XSwnvy1xaRrMWKGVS1kf3z
ijDcieCI7lDZnAvDda8ePpLxKr/OSArs33uJ5ss+4+2V4/QhDfWKHvFtGJ6HsjZq
uEGVS+/Zjl/laqVikS868Gkkq3XDFFxJcceChp6x7JTltPlIwNotDxvak0IheDNc
fRSIIb8OXdJeMIb+FQjy/eudm9v3loG0jRIKVfM8lpUG21RzMivXwzfJcHrG19Z+
KguDmGdC3CkptpfKQT2PYv6UxrytsG3mUvvjSH6ZcFQI5rtEC1UDmCo7maeSPMrf
E3/Eav1Ebr6AxhubhQr/ykJi7nI4ThrjUVQvOhc1SeuKRTkUQTOLEgccgQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJoDoCIOW31uavf5AkkzzzdH9ByeMB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvbWdPZ0lnNWJmVzVxOV9rQ1NUUFBOMGYwSEo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgEA0AAK
AwcAKgEA0AA6MA0GCSqGSIb3DQEBCwUAA4IBAQBQCds9q8nO+y+nGt/LMstqSLx1
/5HcwcZbBg/CXwzRC2nDYjafOB02iTv7r/ikJrgQKMY8dr9y1OQYkMQSbNRo+ZTP
lZHqggURGwtjYlyXe7hWSK5pGWlX0ShBSKoPUJmvL8s0Vlti1CI6d6nDzZw+uomT
6vU+LUBbQSxa9bBwOwE7t/gQWvUTdKpnNnvArRzSxplf9K2vKp4az5I6KZRcFCJX
EM59bFWht6dhvyCbpszMWkzgMa6lXbuX9bxP6IfUW59LlHSZK6zUYW8zYsJjAyOT
lQ6Whyzw/ydKfMONGNb+Uh70nl2APgotibPMl3O3QMFhLkTlE4PB6tbvEKbe
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:17 2025 by rpki-client