Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/N2MMA2ajHovb9op5fyA_qeAVz_M.roa
File: N2MMA2ajHovb9op5fyA_qeAVz_M.roa (raw, json)
Hash identifier: n+Qd6FGkBgmtsqN4tvP533FkHH2YOTsZsw1S1MXov80=
Subject key identifier: 37:63:0C:03:66:A3:1E:8B:DB:F6:8A:79:7F:20:3F:A9:E0:15:CF:F3
Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Certificate serial: 0194214459EE804DB3F4B060877A4CE85FDC
Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/N2MMA2ajHovb9op5fyA_qeAVz_M.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202886
IP address blocks: 2001:678:158::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:ee:80:4d:b3:f4:b0:60:87:7a:4c:e8:5f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37630c0366a31e8bdbf68a797f203fa9e015cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:a1:6b:fa:04:03:7f:e2:da:45:27:a0:d7:
3c:f8:7d:43:08:dc:10:7c:50:82:e4:b0:61:07:bc:
59:92:60:16:95:6c:49:b3:bb:9b:60:68:68:60:39:
c2:60:91:0c:d9:16:33:79:3a:9a:22:74:1b:80:9e:
81:01:51:5f:60:06:82:3d:e6:e1:c4:0b:4e:25:60:
68:3d:e9:8a:6f:d8:e7:9a:13:0e:4e:40:9d:92:5b:
54:48:9c:e6:46:09:36:d6:c3:d6:3c:bf:c8:3c:d3:
48:63:59:77:48:e3:33:27:53:e7:1e:55:fe:73:78:
3a:fd:0a:b7:69:cf:f6:9a:77:55:4b:c0:32:ef:7b:
4d:13:03:66:e6:0a:b1:4a:02:57:70:9e:94:9d:10:
83:68:b1:b7:03:36:e3:f3:63:e7:d1:2f:8a:53:22:
18:15:f4:a9:5a:a2:2a:9d:bc:55:eb:81:8d:75:db:
f7:e5:a9:7a:9b:75:b8:52:56:2a:b6:5d:49:9a:3e:
9c:f3:1d:96:56:18:b3:ec:2c:5f:90:3b:83:42:12:
f7:e1:f2:49:b3:6d:b4:6b:ab:a0:e3:d0:d3:6c:46:
c6:15:69:c5:57:d9:17:a8:cd:07:d5:3e:e7:d8:1c:
f9:54:9d:2a:2d:61:d2:ad:31:01:3d:89:6d:23:55:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:0C:03:66:A3:1E:8B:DB:F6:8A:79:7F:20:3F:A9:E0:15:CF:F3
X509v3 Authority Key Identifier:
keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/N2MMA2ajHovb9op5fyA_qeAVz_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:158::/48
Signature Algorithm: sha256WithRSAEncryption
63:a3:6a:51:14:79:7c:4a:9e:59:c6:18:f4:1c:db:4e:49:7e:
ca:16:74:52:49:fc:ec:69:19:b9:08:ee:3d:15:a8:a3:df:8c:
78:f6:08:5c:d6:85:51:ef:4b:2c:a0:38:0e:81:4e:8b:1d:98:
d2:05:dc:13:7b:b4:07:99:4b:5a:89:81:72:2c:2d:25:02:49:
1e:b8:b8:3b:c8:a3:a5:82:aa:23:a3:9e:a5:91:6f:00:84:99:
e0:ce:e1:55:47:ab:c5:36:d1:c7:57:31:01:af:70:71:40:b6:
32:a9:ff:9b:a8:72:84:b0:bb:e5:2d:61:42:58:b7:f0:df:a7:
9c:9b:1f:b7:c1:9f:b1:ed:c4:8f:5e:98:21:09:95:8a:77:f6:
a6:a4:bf:51:b8:3a:50:24:bb:85:bc:f4:b0:66:48:7a:b7:4d:
e7:39:85:6b:ff:bf:09:30:1e:ce:1f:e5:a0:ad:15:23:ec:b4:
89:92:3a:b4:8e:47:d0:94:8f:ee:90:22:e6:29:5b:75:6f:7b:
60:0e:1b:56:5f:80:61:ed:ba:0c:14:93:bb:84:5a:d6:7b:71:
de:8d:67:ad:0f:9b:f5:4e:b6:db:a7:16:d6:e7:24:29:cb:c1:
46:5e:b3:45:db:13:8a:ac:d3:bd:60:f9:9d:41:a5:5d:13:65:
07:89:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:04 2025 by rpki-client