Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/MdxC1FpXyou6qJ-H7tes_6P5FSc.roa
File: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (raw, json)
Hash identifier: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=
Subject key identifier: 31:DC:42:D4:5A:57:CA:8B:BA:A8:9F:87:EE:D7:AC:FF:A3:F9:15:27
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 01942825EFD85D1329F5D17EA71903E39724
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/MdxC1FpXyou6qJ-H7tes_6P5FSc.roa
Signing time: Thu 02 Jan 2025 17:52:42 +0000
ROA not before: Thu 02 Jan 2025 17:52:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44973
IP address blocks: 2001:678:594::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ef:d8:5d:13:29:f5:d1:7e:a7:19:03:e3:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jan 2 17:52:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31dc42d45a57ca8bbaa89f87eed7acffa3f91527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:84:fb:5c:62:73:0d:90:66:e2:3c:a9:6a:
0b:87:b3:d2:94:63:94:07:fa:c5:c7:b9:65:36:de:
3c:97:4d:45:5b:2c:2e:6b:69:3e:26:eb:c6:77:07:
10:e6:82:e3:a7:6f:45:09:7c:bc:22:1b:d4:8f:ab:
71:0f:88:55:28:93:62:7c:b5:85:ad:87:ac:19:15:
a9:2b:d2:2a:2e:29:01:5a:18:b5:49:ed:49:24:8b:
3d:9a:cc:3e:1b:80:b7:0a:92:6b:2c:05:7b:63:76:
4f:a1:64:6f:08:0f:6c:ee:fb:af:41:7a:a7:06:2a:
80:19:15:48:9f:5a:65:2a:9e:c9:42:34:8d:5f:4d:
e7:eb:73:94:d3:02:26:a2:da:5c:4b:21:b7:2b:25:
eb:03:ce:c9:46:7b:07:16:19:3e:61:b7:8c:36:bb:
af:e2:d6:34:93:be:12:cf:96:e8:12:80:12:6c:44:
b1:de:33:ef:b0:66:f8:18:33:b9:99:67:e4:cb:21:
ce:3f:25:5c:0d:2c:ee:7a:69:b3:83:e4:7a:2e:be:
0f:44:74:b8:e6:5d:bd:78:ac:54:75:48:d2:37:c9:
49:dd:67:46:19:7d:8a:53:69:0c:75:ad:1a:78:dd:
91:28:51:1b:6a:19:26:5d:21:e5:7c:f4:9e:cb:f8:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:42:D4:5A:57:CA:8B:BA:A8:9F:87:EE:D7:AC:FF:A3:F9:15:27
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/MdxC1FpXyou6qJ-H7tes_6P5FSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:594::/48
Signature Algorithm: sha256WithRSAEncryption
bc:e5:8d:6c:14:b4:1b:3d:e7:ee:59:58:e5:eb:9d:02:03:47:
d6:b2:dd:e2:ea:69:be:e1:46:df:36:9f:07:5e:6d:40:35:88:
b2:b4:6d:77:8e:b7:60:5e:34:f6:bd:ac:06:13:25:9d:7a:82:
30:51:e9:40:70:fd:ce:13:13:cf:3b:08:f1:77:ed:70:d3:84:
72:5e:56:66:5a:f3:96:6d:d5:20:a3:1d:82:47:77:d9:35:e2:
28:e1:27:48:b5:0f:9d:54:97:23:14:80:c2:c0:d1:53:e8:3b:
07:f8:8d:35:55:e6:cb:3c:1e:7f:bd:05:99:ef:68:13:60:7c:
d5:f6:de:da:a5:73:9b:1e:a5:12:42:2c:12:d4:d2:45:d7:5a:
ec:82:02:bb:a9:96:7e:e9:54:7c:c8:21:62:9f:98:f1:b5:8d:
7b:d8:07:b5:b8:20:a0:4a:de:78:ea:6c:2e:07:54:9c:d1:97:
ef:a8:88:8d:79:6d:72:1d:fc:1f:8f:31:c5:56:98:97:36:42:
69:95:cb:83:1b:51:2c:f0:b3:08:a3:2a:20:6b:5d:40:c6:0b:
78:37:f4:d0:af:15:5e:c3:3b:06:7f:fd:52:f7:8f:a9:ed:06:
80:90:b5:21:ba:fe:af:9a:be:21:65:6c:c8:04:a0:6e:58:d4:
6f:83:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:07 2025 by rpki-client