Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/MYPH5XeE38V6Lca3I4JfxaSm6js.roa
File: MYPH5XeE38V6Lca3I4JfxaSm6js.roa (raw, json)
Hash identifier: KCwgIglSq6OXzW0Yf00xDQiEWJ8/6OWeQR2JaZURpCw=
Subject key identifier: 31:83:C7:E5:77:84:DF:C5:7A:2D:C6:B7:23:82:5F:C5:A4:A6:EA:3B
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 018F385B46F63014D5E4DE752AAD2C4066EC
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/MYPH5XeE38V6Lca3I4JfxaSm6js.roa
Signing time: Thu 02 May 2024 08:10:57 +0000
ROA not before: Thu 02 May 2024 08:10:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214992
IP address blocks: 2a13:9644:2220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:5b:46:f6:30:14:d5:e4:de:75:2a:ad:2c:40:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: May 2 08:10:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3183c7e57784dfc57a2dc6b723825fc5a4a6ea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:25:d6:16:ac:27:95:0e:5e:81:d0:28:9e:
82:d8:41:4e:11:f0:77:bc:c1:5b:e4:3f:a7:af:71:
8c:42:0c:71:04:b0:dd:13:96:86:59:ae:1d:f3:f7:
8c:84:3a:9a:4a:42:cc:1c:10:cf:1a:85:62:bc:6c:
4e:7f:6e:35:50:46:2f:8f:78:4d:a5:5a:46:76:a1:
45:13:81:f8:eb:ee:e8:90:02:d0:93:69:a7:66:00:
11:0a:ab:03:f8:6c:ea:ac:80:21:06:3b:70:54:5e:
24:e9:50:5b:c6:cf:6c:87:2a:62:3d:a3:e3:e3:df:
e4:4a:06:e2:29:08:aa:a4:a0:9d:9a:70:0c:b1:c6:
ee:d1:3c:b8:89:5b:05:b2:77:df:9b:f1:d2:b3:00:
c2:21:74:3f:14:c1:19:e6:2e:e8:dd:ec:01:a3:4d:
4a:9d:c3:ee:b6:d3:80:88:9e:24:6f:b5:5b:ec:64:
b4:ea:da:38:09:65:f6:8c:d0:c2:82:8b:f7:ec:3a:
ad:1c:d0:ee:2c:cf:f6:49:da:4a:74:eb:f6:8f:f4:
8e:13:97:a3:24:f8:92:ed:10:b1:79:80:15:b4:15:
d4:c3:85:97:1b:b0:b2:4b:6c:16:8c:cd:5b:f8:04:
45:d9:82:d1:68:a2:59:0f:54:b6:97:7e:08:21:03:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:C7:E5:77:84:DF:C5:7A:2D:C6:B7:23:82:5F:C5:A4:A6:EA:3B
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/MYPH5XeE38V6Lca3I4JfxaSm6js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:2220::/44
Signature Algorithm: sha256WithRSAEncryption
5e:c8:01:38:40:c9:46:8f:58:46:ee:0a:a2:07:b5:18:eb:f0:
39:67:9d:94:a9:a6:7a:c4:4d:e2:e3:03:a2:be:bb:02:9f:79:
87:d1:32:7c:96:dc:2f:2b:56:9b:f1:a3:82:04:80:92:80:e6:
08:fc:09:67:7e:c3:ed:5f:33:c6:fc:2c:e2:9d:1d:0f:08:7b:
04:74:63:84:b1:4f:a0:c6:aa:34:eb:d5:07:a3:1f:83:1a:d4:
b2:00:8b:e0:c6:b2:08:d2:5d:d8:f4:b8:a2:b5:af:97:bd:26:
e4:f7:76:7d:51:35:ed:6c:fb:35:63:4a:b3:18:f4:f0:7d:71:
ea:c8:b1:66:ff:c2:ee:74:40:98:31:b3:42:8a:f4:e1:9e:41:
3d:fd:8e:99:35:67:02:ea:43:c0:85:c3:fa:96:c5:a2:aa:05:
7a:4d:f4:f0:7c:4e:08:53:94:ae:2e:1f:f5:eb:ca:f3:f5:fc:
58:e1:bd:52:a4:c2:49:dc:7a:0a:7e:ac:9d:9f:01:07:fa:bd:
89:27:85:29:68:94:2f:fd:74:5f:d6:bf:d0:54:41:03:c0:b6:
b5:69:43:30:af:b7:e6:44:2b:9f:ca:58:ae:f1:9b:bf:04:d5:
10:a0:51:f1:e6:8f:46:ef:c5:92:91:1c:23:61:c7:ba:70:03:
9b:35:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:26:33 2024 by rpki-client on console-ams.rpki-client.org