Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/mxTVUqpOL4wnWbrVTklVfLePHRs.roa
File: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (raw, json)
Hash identifier: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=
Subject key identifier: 9B:14:D5:52:AA:4E:2F:8C:27:59:BA:D5:4E:49:55:7C:B7:8F:1D:1B
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0194258F741C54F59AD1384260EDED4EF966
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/mxTVUqpOL4wnWbrVTklVfLePHRs.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215455
IP address blocks: 2a09:d2c1:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:1c:54:f5:9a:d1:38:42:60:ed:ed:4e:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b14d552aa4e2f8c2759bad54e49557cb78f1d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:88:fa:1d:78:73:e5:7e:f6:eb:58:7c:ea:
ce:78:54:d3:2d:c6:e2:a8:57:f3:86:76:8a:fe:a9:
5d:9a:e8:f5:e8:03:cf:aa:92:20:96:b6:95:06:f0:
c1:9a:29:ca:b3:f9:ce:d3:28:db:f7:ae:69:67:c4:
c7:ee:9c:92:5b:43:ac:6f:40:de:e6:58:95:7e:c5:
6d:df:c1:a1:8c:0b:f8:ea:2d:cc:ff:80:d5:e1:70:
e9:40:2d:fc:16:42:7c:36:ab:50:5f:dd:2e:cd:fe:
a2:b9:33:de:1d:41:a9:7a:93:a3:07:20:41:d8:0b:
81:37:dc:19:c1:29:77:54:83:38:f3:c5:d3:fc:96:
7c:ee:38:29:19:0d:be:0a:c7:80:64:38:b4:ad:43:
5f:7f:a8:6a:38:b6:e7:8e:19:2e:a8:fe:2e:d1:5a:
b2:52:43:36:19:ab:d6:8b:ff:4d:b2:9b:fe:ba:5f:
9f:bf:8d:6c:e9:6f:1a:23:c7:04:1d:f8:69:92:00:
0a:d1:d6:84:b3:a4:d5:da:e4:82:5c:9e:a7:7a:99:
15:07:c7:f0:75:39:b6:90:5e:ae:0b:62:53:28:f1:
1f:90:57:75:50:ba:fe:a9:b5:4e:c7:47:eb:41:0d:
57:3c:95:48:cf:ea:72:97:84:95:d3:68:d0:9b:a0:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:D5:52:AA:4E:2F:8C:27:59:BA:D5:4E:49:55:7C:B7:8F:1D:1B
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/mxTVUqpOL4wnWbrVTklVfLePHRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c1:5::/48
Signature Algorithm: sha256WithRSAEncryption
bf:b5:35:03:ce:6c:d5:ec:83:86:d8:71:3d:72:ce:4a:56:f7:
f6:ae:1c:0f:fc:3e:76:f5:ec:a0:74:98:12:53:a0:00:ef:b6:
c1:8d:2b:60:52:15:ca:98:b7:57:43:8c:b9:ed:97:ef:a7:e5:
59:46:28:b3:58:bb:9b:50:d4:55:5a:f1:e8:0e:be:79:8c:f7:
b4:c2:e2:7d:32:7c:b8:6c:de:af:93:ee:a3:f4:66:30:c5:70:
26:d4:76:34:1c:6f:f1:0b:25:0d:a4:57:a5:7e:ee:af:78:d7:
be:03:7c:1c:6b:99:a1:d3:b6:b4:f2:e7:9b:ed:fe:64:80:3b:
45:68:f6:43:9b:55:81:9f:bc:2e:c1:18:96:ba:db:2c:3a:ab:
14:de:c9:21:69:32:78:8b:61:da:7c:cb:75:1f:35:24:00:6e:
12:85:ca:d8:30:1f:15:f3:49:a1:61:e0:2a:4c:bb:79:03:e2:
08:c2:2a:c6:33:5b:81:99:f1:12:25:7e:50:19:09:bf:bf:7f:
39:88:7c:86:6f:5c:cd:d4:43:72:04:f6:22:5c:c6:b4:1a:64:
ef:b1:6c:39:21:df:9e:63:49:e4:ca:3b:b2:e0:df:4e:3a:8f:
1a:ac:68:f2:82:b4:29:c6:55:c2:b7:85:20:e2:ea:5f:e0:1d:
71:68:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:03 2025 by rpki-client