Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa
File: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (raw, json)
Hash identifier: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=
Subject key identifier: 99:1D:D9:8B:C4:CD:FB:F0:2B:12:8B:85:CB:67:61:D2:4D:50:98:DD
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 019423D6A67661F3A7FA2FC69A49F1D88CCE
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204170
IP address blocks: 161.8.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a6:76:61:f3:a7:fa:2f:c6:9a:49:f1:d8:8c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991dd98bc4cdfbf02b128b85cb6761d24d5098dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:b6:3d:43:58:9f:f9:f7:cc:e7:f8:ee:d2:
12:f7:bc:16:5f:f4:b8:e2:bb:29:3d:5e:b7:45:3f:
c4:06:6f:e1:d1:1b:8c:4f:7b:d1:39:40:19:2e:40:
eb:94:28:7b:2b:b4:bf:65:fd:f2:c9:f4:a1:d2:61:
4e:60:dd:ac:15:5d:78:2a:67:26:69:29:a2:48:9a:
2e:91:e5:71:8d:24:e3:96:2e:76:ab:50:4d:87:94:
ac:be:a2:1f:96:b3:27:66:20:24:9f:c8:15:ed:9b:
d1:14:42:e4:79:4f:69:7c:6b:53:13:f8:40:40:71:
7f:b5:6f:d1:01:be:eb:ff:95:17:21:42:9b:58:99:
2c:9e:c1:cb:cb:2a:b2:15:f8:b8:fc:e2:3d:56:be:
1f:f9:73:27:7e:b1:d2:02:e3:cf:8e:b9:30:30:57:
fd:1e:fb:39:56:05:49:e8:80:14:d6:c6:5c:6a:71:
f2:91:7b:3c:d5:05:1d:a8:61:82:c2:50:92:ae:dd:
37:76:59:a5:fa:82:99:11:4f:33:72:be:47:ea:97:
42:ed:bd:30:41:e6:36:c2:be:22:57:1e:04:05:05:
ae:dc:3a:a1:42:75:5f:3d:0c:b6:5c:5b:33:69:31:
14:84:46:7a:4c:b6:9e:7e:ee:52:84:05:3a:d5:e0:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1D:D9:8B:C4:CD:FB:F0:2B:12:8B:85:CB:67:61:D2:4D:50:98:DD
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:0a:4b:8a:8f:9e:3e:f8:ab:cc:c9:d4:56:8b:08:70:72:bb:
0a:0a:5b:07:35:60:3a:23:ea:30:56:e2:e9:17:f1:40:57:85:
3e:b5:97:47:1c:09:95:cf:28:88:91:fd:d9:7d:64:c5:e3:03:
60:43:59:90:95:f3:f5:48:e0:31:02:2b:07:db:e0:11:ea:10:
97:76:a1:42:3a:09:fe:9e:60:92:4d:12:cf:0d:12:e1:15:e7:
35:38:b0:98:aa:66:82:86:98:3d:92:45:38:f1:99:64:8d:03:
1b:81:d3:14:07:63:91:e7:44:ee:a4:bc:a4:b8:04:6e:a1:e5:
39:d4:5c:64:a5:17:46:17:d5:3c:ff:70:89:d3:03:48:cd:ba:
9c:b6:ed:9c:e0:77:bc:1c:08:a4:0a:7e:fc:60:c2:37:0d:5a:
06:82:61:a1:70:20:9c:f4:e9:20:00:11:2f:3f:91:09:fe:5b:
aa:b1:d5:49:af:49:5d:9e:cc:56:66:ab:a0:66:e6:6b:30:03:
95:51:52:7c:46:0b:cf:a5:4d:f6:45:b5:c3:13:b5:9d:92:98:
9e:c6:76:36:5e:77:2d:43:2b:dc:b6:c9:64:a6:4f:6d:f6:4d:
9d:54:37:64:21:37:a4:20:a2:04:45:42:f5:1f:c2:af:9b:99:
04:51:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:43 2025 by rpki-client