Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/MBPuW0pCdoE27mcTarwCxJOcl0Q.roa
File: MBPuW0pCdoE27mcTarwCxJOcl0Q.roa (raw, json)
Hash identifier: YEUs/arUcZV/nic4XPWhvdmwMlBlDW7ohpW4jTH5q/0=
Subject key identifier: 30:13:EE:5B:4A:42:76:81:36:EE:67:13:6A:BC:02:C4:93:9C:97:44
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 01941F8C2A13BBC4C724D482F3CB34FD27E9
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/MBPuW0pCdoE27mcTarwCxJOcl0Q.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211180
IP address blocks: 2a03:a80:bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:13:bb:c4:c7:24:d4:82:f3:cb:34:fd:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3013ee5b4a42768136ee67136abc02c4939c9744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:df:24:b6:5f:d9:e1:94:16:7d:4f:8f:5c:
a3:9f:8b:1a:9c:c7:a1:f3:86:c4:c7:78:25:aa:ef:
01:94:b1:89:6e:37:c0:c9:48:e9:1d:b7:d6:b0:39:
09:50:56:0d:b6:72:d6:a4:12:48:07:3a:d5:39:04:
7c:e8:6c:3a:42:a8:3f:6a:b2:3c:a5:d4:5f:59:e0:
62:37:b3:c9:52:a6:86:b4:da:40:55:a8:5e:46:a5:
b1:8c:07:07:86:d0:48:e3:13:e0:db:80:6e:0c:ec:
fa:a1:e5:dd:8c:40:8d:f3:f8:b8:7b:42:16:48:6b:
25:da:40:50:9e:bb:8f:f4:82:84:e4:a4:20:3c:12:
0d:4e:93:68:cb:48:0c:70:34:c2:1e:64:78:83:84:
46:16:75:c5:6c:86:35:d2:21:ed:f2:c6:60:4b:f5:
cb:e0:3b:2b:82:c3:ed:c2:95:b1:5e:fd:88:11:17:
44:44:00:d7:b5:46:e8:fb:4d:25:5d:64:96:5e:a2:
d1:b4:98:18:bf:12:2e:70:d8:45:a9:57:b3:30:b4:
24:79:51:77:a3:f9:2e:7c:ac:ea:44:6f:b6:35:7a:
2b:41:43:2e:b0:66:50:2b:ec:3b:0c:28:e5:d4:0d:
3f:b2:61:71:d9:42:c2:fa:0d:ae:3b:05:3c:f3:98:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:13:EE:5B:4A:42:76:81:36:EE:67:13:6A:BC:02:C4:93:9C:97:44
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/MBPuW0pCdoE27mcTarwCxJOcl0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:a80:bc::/48
Signature Algorithm: sha256WithRSAEncryption
d1:86:68:a7:f3:0c:f7:26:51:cc:ea:36:25:02:b6:35:b6:dc:
ef:ad:3e:53:6f:ac:58:39:70:b6:5b:bc:35:4a:77:62:3b:0f:
6e:62:a6:23:f3:0e:83:0f:48:21:d7:fb:62:14:0c:99:99:d6:
c7:9c:3a:34:ba:10:ed:98:b4:7e:3e:dd:dd:1f:6c:98:43:a5:
58:14:92:d7:fe:b9:d4:ca:0e:27:c0:69:2b:25:1d:73:7b:87:
a8:b9:55:a0:3c:33:7f:72:bb:10:00:bc:fc:0d:d9:44:64:89:
4b:de:3b:6c:b9:bf:3a:4e:f2:6f:40:c4:4c:70:0d:7e:0d:00:
fb:9d:04:e0:aa:48:8e:33:7a:8d:e7:74:25:c2:71:c2:29:29:
63:5d:0c:be:2c:b6:29:49:ab:40:53:29:ab:b3:22:48:96:da:
3f:28:42:52:2c:4c:e6:bb:df:b3:a3:ee:9b:c1:bc:c5:7a:c1:
c4:68:65:fe:88:1a:88:cb:5a:54:32:f2:26:15:dd:7a:d6:13:
f1:d3:28:6a:0d:d1:fd:c3:d1:0f:f4:a9:cc:64:fc:d2:1d:75:
e0:56:21:32:58:8a:6a:91:e5:fe:76:c1:91:24:64:fa:f6:54:
c1:81:c9:66:a6:fa:3c:f6:d5:df:88:39:a6:ce:eb:98:6b:71:
95:e1:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:55:12 2025 by rpki-client