Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mcHOeXnFFh8AST46_iyLNnpXILI.roa
File: mcHOeXnFFh8AST46_iyLNnpXILI.roa (raw, json)
Hash identifier: G7FepxSIKT+zmQA76glhJV8cb/GhmT4it5rjZOKw++o=
Subject key identifier: 99:C1:CE:79:79:C5:16:1F:00:49:3E:3A:FE:2C:8B:36:7A:57:20:B2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184E3073216B3EE5C14BECE6473CA5206E6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mcHOeXnFFh8AST46_iyLNnpXILI.roa
Signing time: Mon 05 Dec 2022 16:03:30 +0000
ROA not before: Mon 05 Dec 2022 16:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200879
IP address blocks: 2a0a:6040:f200::/40 maxlen: 48
2a06:a005:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:07:32:16:b3:ee:5c:14:be:ce:64:73:ca:52:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Dec 5 16:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99c1ce7979c5161f00493e3afe2c8b367a5720b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:4d:1a:57:38:ad:83:fb:ab:8e:6c:9c:9c:
54:30:b5:6b:47:dd:fd:0b:74:a0:2e:ca:6e:44:e7:
95:79:be:3b:2f:33:d2:9c:60:c7:72:b6:98:10:84:
b9:9d:33:94:59:25:97:49:88:46:0f:02:15:da:ab:
1f:b5:af:ee:ac:e8:a0:2c:65:c2:06:71:d7:75:43:
2b:3d:c3:2c:9b:be:8b:e5:1e:59:4a:cd:c0:9f:17:
14:dd:01:11:5e:2a:50:f8:6c:f2:9d:a5:19:5f:3c:
66:11:69:45:ba:c6:7b:fe:a2:00:a7:35:e6:2f:83:
b9:d7:86:ca:6b:1b:ea:e2:85:a7:01:f4:aa:d8:25:
ae:be:7f:78:ff:53:8a:8f:87:1d:bb:16:f9:d9:49:
5d:5e:a7:c5:9b:39:a8:8b:2a:41:06:cb:f9:09:04:
94:60:fa:88:2f:00:83:ba:f5:b8:30:72:6a:98:cd:
9d:fd:d7:32:62:25:ca:4e:ad:68:32:87:5b:1b:e4:
54:95:cb:f9:64:f3:96:61:a9:34:77:e7:21:6b:2f:
1e:0d:85:68:ee:2c:ce:6f:be:c7:86:34:fc:87:9e:
3d:56:cf:9a:f7:63:92:04:f3:b2:4e:d8:e5:15:47:
20:b7:b0:bc:c4:39:d5:49:38:f5:1f:f3:40:4b:44:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:CE:79:79:C5:16:1F:00:49:3E:3A:FE:2C:8B:36:7A:57:20:B2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/mcHOeXnFFh8AST46_iyLNnpXILI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:6::/48
2a0a:6040:f200::/40
Signature Algorithm: sha256WithRSAEncryption
37:80:ce:fb:b5:e9:82:69:6c:6b:67:76:2e:13:a3:6e:94:0d:
1b:7e:37:2a:56:14:6c:a1:49:07:d1:d8:e7:65:65:ec:8b:62:
37:02:6c:fa:fb:af:75:30:1b:b2:d7:5b:0b:a6:4c:71:ca:63:
0d:8a:ec:9c:21:22:0a:77:75:8b:3a:d6:62:19:08:80:a9:21:
66:8d:7d:0f:4a:7d:b9:2c:e4:9f:4b:11:9d:a2:fa:d5:95:5f:
22:26:95:6d:21:44:8c:5d:f7:f0:10:3f:74:c6:fa:82:47:ce:
ac:65:c1:2e:2c:09:f3:ba:77:d8:f0:bc:fe:7d:89:aa:23:01:
eb:f5:02:a1:97:fc:f0:77:d0:7b:3e:82:99:4e:33:ac:83:dd:
84:b8:19:6d:b1:8a:05:d2:8d:fa:62:71:dc:0e:e8:f9:74:a8:
25:d9:7e:2b:07:64:83:0a:67:de:8c:97:c8:6d:52:a9:e6:d4:
ed:ac:1d:68:05:f3:ef:1f:24:5f:f4:72:c4:94:eb:94:ed:f0:
41:7d:ed:fb:1c:af:af:0d:8e:e7:3c:60:6a:23:4a:ec:db:ce:
f0:67:bf:64:e0:e9:9f:98:da:96:c4:58:9f:69:60:70:4d:db:
7d:20:42:d2:4d:ce:32:52:c4:4f:64:9a:02:b4:ab:78:78:f5:
68:4f:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:37 2025 by rpki-client