Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/MpAhSV5_JYGm73KDLYsRhjMMngA.roa
File: MpAhSV5_JYGm73KDLYsRhjMMngA.roa (raw, json)
Hash identifier: I/TPMBAXObvOasW2mYRrnWqkuLDeYNgwfZaEC70a/SQ=
Subject key identifier: 32:90:21:49:5E:7F:25:81:A6:EF:72:83:2D:8B:11:86:33:0C:9E:00
Certificate issuer: /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial: 0194236961FB55FCE81D74F1E68BD0F29C54
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/MpAhSV5_JYGm73KDLYsRhjMMngA.roa
Signing time: Wed 01 Jan 2025 19:48:16 +0000
ROA not before: Wed 01 Jan 2025 19:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49704
IP address blocks: 2001:678:924::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:61:fb:55:fc:e8:1d:74:f1:e6:8b:d0:f2:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Validity
Not Before: Jan 1 19:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329021495e7f2581a6ef72832d8b1186330c9e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:ee:f0:5c:2c:29:f6:d6:e1:7a:f9:e4:4a:
a2:98:30:46:03:b7:14:dc:0b:8e:ca:e9:4a:a1:6d:
4f:be:3b:9e:d5:af:8d:28:6e:e8:9d:76:7c:a0:bf:
da:bb:e0:97:8f:a6:20:15:ff:d0:89:36:c5:dd:03:
d1:c6:7f:94:89:3e:22:11:90:44:8a:b2:6e:4c:79:
f1:75:74:af:af:d3:ca:28:b0:dd:99:82:a5:2a:e8:
63:56:26:e0:db:52:b2:c3:40:ca:07:38:06:bc:c1:
d0:99:2b:ea:a6:50:5a:cb:d4:11:37:35:16:d2:44:
92:bc:2d:ac:e3:96:26:df:ba:61:75:98:3c:95:d7:
27:a7:b6:f7:48:b8:95:c6:b9:9d:48:20:b8:03:ba:
87:08:e3:2d:50:ef:14:58:64:12:e3:4b:99:68:1b:
2d:32:53:30:0a:87:16:b0:1a:a1:e1:e7:ba:86:fe:
9c:cf:b9:ec:18:ae:63:4c:64:b1:3a:34:0c:3c:6f:
1b:8a:98:1a:b0:16:8b:03:7a:fe:00:a3:71:41:79:
82:05:6f:9c:b6:55:9f:a3:f3:6f:fb:c2:d7:f5:c7:
18:dc:74:c4:19:53:55:71:27:b0:63:53:7e:ef:38:
fc:78:0a:75:67:5d:d3:2b:1c:a8:5e:f3:52:70:df:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:21:49:5E:7F:25:81:A6:EF:72:83:2D:8B:11:86:33:0C:9E:00
X509v3 Authority Key Identifier:
keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/MpAhSV5_JYGm73KDLYsRhjMMngA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:924::/48
Signature Algorithm: sha256WithRSAEncryption
77:16:db:1b:6d:ee:1b:10:b1:a3:6e:30:fc:7b:fc:07:fd:7e:
ee:f8:b6:41:98:4f:2f:4c:2f:51:43:db:85:66:fd:8f:3b:ca:
3a:e1:ab:63:5c:a9:d4:d0:7f:de:d0:e8:54:59:dd:b2:97:6e:
8e:69:21:40:81:e3:40:ea:fc:67:26:8b:a5:f0:97:2d:1a:86:
47:97:22:dc:a2:2c:54:87:44:08:c0:c4:47:a8:ff:9d:71:6e:
f4:c2:7c:ed:10:2a:e8:97:5e:3a:85:22:29:26:21:d0:8a:d4:
9c:ac:e0:74:bd:39:67:e1:57:00:4c:c1:ae:bc:f7:af:11:49:
db:3d:53:94:3e:96:ec:8b:cc:0d:45:cb:a5:d4:d1:41:f6:e1:
79:80:9a:86:fc:f8:35:bc:d1:09:0b:c4:f0:81:77:ef:ea:33:
38:32:7c:de:f4:f6:ae:48:41:21:dd:15:56:92:45:e1:e1:71:
0d:37:69:fa:06:b5:b2:4d:19:a6:c0:6d:58:2c:f3:c1:db:b4:
e4:04:d1:39:b9:55:ae:76:df:de:1c:ae:63:f1:fb:cb:14:0b:
a4:86:ff:7d:af:f0:b3:41:21:2d:a5:9c:48:62:b2:3b:86:b8:
fa:43:88:a4:6d:8e:37:56:d9:a7:46:f1:4a:2f:90:83:f5:e8:
5f:d0:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:42 2025 by rpki-client