Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa
File: MBYGEcPfa5Kz6wQiwTNqK-meds4.roa (raw, json)
Hash identifier: Q6G+ihZM0yBsQDVhuqHoL6hnc9stDAWDyME3U16Ope4=
Subject key identifier: 30:16:06:11:C3:DF:6B:92:B3:EB:04:22:C1:33:6A:2B:E9:9E:76:CE
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19F3DBAB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa
Signing time: Fri 20 May 2022 05:56:29 +0000
ROA not before: Fri 20 May 2022 05:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395332
IP address blocks: 2a06:a005:5e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435411883 (0x19f3dbab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 20 05:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30160611c3df6b92b3eb0422c1336a2be99e76ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:8d:80:17:08:a1:a6:f9:a6:f8:ec:c1:f4:
99:81:22:22:9f:25:1d:3f:c8:73:5b:10:e6:f8:f8:
ae:60:3e:33:fb:4a:5c:fe:e6:db:5c:86:f9:0e:f6:
4a:68:d1:57:64:0f:7d:74:b9:ad:4b:f2:44:0f:44:
1e:b5:aa:6c:6b:1e:27:26:46:8f:a6:ba:6b:b9:05:
73:7e:1e:ae:33:4b:0c:b0:69:56:03:c7:59:ec:aa:
e5:0f:07:a2:d1:e6:be:fa:c7:40:47:7b:7a:ab:bd:
7f:b9:91:13:5d:54:e0:80:8d:08:2e:1a:e4:a2:20:
de:60:37:4d:ce:94:65:ee:34:82:5f:97:07:12:5b:
e5:1a:8d:19:3f:23:28:af:83:d1:af:97:dd:0e:61:
56:03:91:de:6f:b0:78:3c:3b:5c:27:52:02:17:11:
c1:a1:42:0f:46:e8:d2:7b:33:82:45:0a:57:f6:38:
fe:8a:ad:18:e5:e7:7a:16:42:bb:d7:43:90:3a:ca:
8e:d4:93:48:b8:c7:48:55:93:c0:23:3d:05:97:56:
d2:81:9f:37:0d:9f:44:ce:0f:81:d9:1a:6a:c5:d6:
3c:fa:09:1f:f2:33:0c:55:b9:0f:78:33:35:ad:ab:
c2:c3:48:bb:f8:a6:6e:83:c3:77:a3:2e:9f:97:52:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:06:11:C3:DF:6B:92:B3:EB:04:22:C1:33:6A:2B:E9:9E:76:CE
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MBYGEcPfa5Kz6wQiwTNqK-meds4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5e1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:90:48:1e:7d:51:1a:5d:4c:8d:b8:2f:c5:6e:e1:b4:15:2a:
20:e2:d5:7f:06:e5:06:87:92:b4:9f:ef:42:8b:77:ba:0a:fd:
ba:ea:67:ae:de:88:0b:ce:e6:13:e2:6c:31:44:72:a0:1e:17:
c8:dc:15:62:c7:ec:5e:6d:ed:33:8a:09:3f:4b:c8:b8:4c:3e:
b8:a3:98:92:24:a2:f5:74:a1:8a:ca:2e:ee:f4:77:6e:ac:29:
20:4a:91:6d:e6:c8:69:68:00:51:29:23:9c:8c:35:cd:43:0a:
63:ef:23:2d:16:9e:14:17:99:48:5f:be:7a:bc:ef:e1:a3:f7:
f9:8d:37:f0:84:1f:35:cc:ad:cc:7d:17:01:d5:04:e9:da:be:
2f:56:4e:e6:e4:fe:bf:fe:de:e0:6d:37:3f:10:af:2c:79:d1:
ee:a8:04:66:a9:a3:9d:c5:6e:c0:bd:74:38:d8:c0:62:15:fe:
fe:e3:89:59:b9:6c:ad:8f:d7:89:3b:90:25:60:af:ed:58:f6:
9d:9c:12:a4:51:9a:f2:6d:2b:39:19:aa:2b:dd:65:a6:ac:1f:
42:4a:b2:f9:17:8c:cf:da:6b:23:4e:83:cc:c6:36:a3:f3:c9:
13:b8:74:a8:3a:1c:8e:b0:65:90:29:96:11:f6:14:bf:59:b3:
ce:7d:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:13:45 2025 by rpki-client