Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MI2MLphBpmPMjSMPt-CUURdJC0U.roa
File: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (raw, json)
Hash identifier: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=
Subject key identifier: 30:8D:8C:2E:98:41:A6:63:CC:8D:23:0F:B7:E0:94:51:17:49:0B:45
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823C779401251D01094264D0551379D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MI2MLphBpmPMjSMPt-CUURdJC0U.roa
Signing time: Thu 02 Jan 2025 17:50:20 +0000
ROA not before: Thu 02 Jan 2025 17:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3305
IP address blocks: 2a00:ec81::/32 maxlen: 32
2a04:800:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c7:79:40:12:51:d0:10:94:26:4d:05:51:37:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=308d8c2e9841a663cc8d230fb7e0945117490b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:a0:4f:e3:58:fc:80:99:48:c8:8c:5c:26:
cf:cd:5b:07:18:a0:d8:f3:59:c1:64:1e:07:cf:f4:
55:17:96:1b:6b:34:8f:b2:db:4b:16:38:fb:b2:fa:
fa:6c:ed:f6:09:77:03:0a:0f:a4:25:13:e9:cf:19:
ab:4c:a0:6a:2a:d0:77:57:31:24:c3:f1:29:5f:08:
d8:7a:e7:6a:01:b1:0f:65:c4:e1:6a:83:8f:86:00:
4a:32:b2:d1:f2:32:bc:31:fc:4b:9f:df:99:9a:84:
c3:7a:4d:6c:81:a7:ff:ac:35:44:95:b2:35:98:c6:
b0:84:d8:82:c3:21:9b:fc:f4:a2:94:23:9f:e9:1e:
e8:12:4b:82:f3:6e:47:9e:7b:79:e0:91:f9:46:ba:
2c:11:7b:d8:36:e5:74:15:b5:50:a2:ca:1d:64:2b:
1b:56:ab:ac:08:3e:58:d6:89:0f:70:78:4a:86:9d:
72:b4:55:67:f2:ed:c3:f0:36:46:b9:db:ee:1c:8c:
06:6a:30:17:16:08:18:6d:0e:ab:60:40:51:8d:52:
9a:64:81:60:d2:60:b0:bc:91:d1:13:c4:10:73:77:
68:4a:e9:fd:f9:38:fd:e4:b0:2d:45:67:7e:4d:6f:
72:af:98:1f:af:89:fb:be:00:dc:7f:6e:45:8b:2e:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:8C:2E:98:41:A6:63:CC:8D:23:0F:B7:E0:94:51:17:49:0B:45
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MI2MLphBpmPMjSMPt-CUURdJC0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec81::/32
2a04:800:3000::/36
Signature Algorithm: sha256WithRSAEncryption
38:7e:29:d3:2f:44:60:5e:b3:23:d0:b2:54:81:fa:b0:5b:8f:
91:c7:54:2a:8d:2e:1e:13:ac:92:49:aa:6f:7b:30:d8:fd:c8:
c4:c9:ca:a8:33:ee:a9:1a:a0:4d:29:9a:ec:7c:41:a4:e2:3d:
0a:17:10:f4:2d:69:15:07:92:38:be:da:ac:1b:89:11:88:e5:
c7:bb:4b:ba:0b:62:2b:9e:6e:b2:6a:2b:73:43:73:33:d2:81:
a2:06:62:71:2e:e8:9d:b3:26:27:9d:f1:bc:54:79:42:fa:bf:
ad:be:74:c2:89:e9:60:c2:14:c3:d2:da:31:9b:8d:13:76:53:
87:05:b5:84:6f:06:a2:4d:23:01:bd:24:53:ed:68:a2:38:fc:
43:4b:16:36:41:70:e7:6b:72:41:01:b4:49:d0:80:18:2b:63:
00:88:93:df:7d:55:81:f6:f8:c2:a3:65:af:cb:4e:78:96:be:
94:9a:99:f7:5b:a2:1e:88:2f:6c:3c:23:d1:94:c9:50:fb:a8:
83:0f:2c:9d:53:f8:c3:3e:5c:c7:0e:79:71:b1:42:18:7a:f0:
b3:77:90:fb:98:e2:3d:9e:85:76:33:93:99:17:70:c4:06:40:
db:3a:d5:9a:65:7c:8d:ad:c0:5f:95:c2:5f:ad:64:73:1a:5d:
3d:4a:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:05 2025 by rpki-client