Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa
File: m0gCK6p47EbynJETYt-r3yetuas.roa (raw, json)
Hash identifier: uby+tl0/tnOrePvk48+VS7c8cZRWf/6wBPNsKq217Mg=
Subject key identifier: 9B:48:02:2B:AA:78:EC:46:F2:9C:91:13:62:DF:AB:DF:27:AD:B9:AB
Certificate issuer: /CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Certificate serial: 019DE4FE
Authority key identifier: 33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa
Signing time: Sat 01 Jan 2022 02:55:07 +0000
ROA not before: Sat 01 Jan 2022 02:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:1080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27124990 (0x19de4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Validity
Not Before: Jan 1 02:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b48022baa78ec46f29c911362dfabdf27adb9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:eb:fc:90:1b:c9:2d:29:db:e6:49:9c:0e:
50:2e:ec:1d:c9:bc:2b:d2:64:a2:bf:88:a0:de:77:
e9:e9:3b:3f:27:4d:30:c0:f4:ff:a9:5d:07:53:2d:
49:0c:79:db:7f:c0:1d:f5:ce:9d:20:9a:34:b8:43:
ce:4c:12:ee:52:88:bd:68:02:49:9a:1c:fa:ef:a5:
7a:83:0e:e1:6a:f7:4a:af:48:f0:89:fc:c3:96:93:
53:38:62:3d:99:72:02:64:2d:e3:97:5f:91:f0:14:
d7:f7:4a:57:71:88:15:79:cd:af:71:37:4b:6c:60:
f5:cb:1f:f2:8d:f2:d5:5b:78:ff:0b:88:69:90:0c:
df:bc:51:ac:a5:41:12:22:60:3b:3e:c2:b2:f0:36:
7d:d3:87:ab:2a:56:43:be:84:d5:18:28:64:9d:9c:
0d:8e:5b:1a:b1:06:59:4d:62:6c:bf:eb:7d:d8:af:
e1:73:6c:d8:67:ca:c2:98:79:f4:5b:dc:af:a6:c4:
1e:92:80:36:bd:41:f2:0a:ea:61:f7:99:41:05:8b:
32:9b:8a:8e:be:4a:51:40:30:4d:2f:f1:52:5e:08:
fd:94:44:c4:36:ec:54:70:5e:2a:51:bf:24:de:2a:
77:5a:2f:d0:30:a7:48:11:8b:06:00:35:43:f9:a7:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:02:2B:AA:78:EC:46:F2:9C:91:13:62:DF:AB:DF:27:AD:B9:AB
X509v3 Authority Key Identifier:
keyid:33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1080::/29
Signature Algorithm: sha256WithRSAEncryption
37:48:b4:7d:ba:aa:77:48:5a:1b:5a:d1:c1:9a:ee:38:3e:88:
91:e0:57:45:2c:2e:20:f0:1f:29:f7:9f:06:5a:7f:ff:a2:1a:
c0:77:28:26:4a:1b:59:34:29:00:c3:12:f5:5f:22:7c:56:52:
ef:06:7e:0a:0a:e7:f1:3f:f9:dd:20:97:2a:f0:ba:1b:a0:dd:
f9:2a:41:70:df:18:a3:b6:14:7c:18:39:70:70:ee:7c:4a:d7:
b8:e4:6d:2f:b1:24:86:f7:0e:49:23:66:8f:96:44:dd:17:e3:
02:a7:c3:46:7d:bd:bc:bf:3c:02:a9:f3:0d:3f:40:cd:d3:77:
cc:e2:08:03:95:36:29:8a:b7:77:35:8e:a4:cb:81:a3:eb:18:
2f:22:5b:93:88:49:11:61:ca:b6:e4:fe:ee:e8:32:69:d1:bd:
fe:1e:48:31:27:ff:48:5a:34:48:37:40:86:d3:45:8a:32:de:
45:bb:ca:29:64:b4:d8:0c:f6:af:2f:e0:05:4c:17:02:e2:3f:
32:9a:04:f1:6f:12:c5:a4:d1:43:9e:92:cd:7b:b3:c1:63:93:
cb:25:d0:5d:95:f4:3e:4a:78:b9:cb:c7:ea:b7:b4:35:a3:fd:
e0:48:12:48:a0:94:ff:44:c4:f0:1c:ab:0e:70:71:1d:04:fe:
20:1d:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:49 2025 by rpki-client