Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQC6dBL-81yM6XD4Un0O4Yzc7eI.roa
File: MQC6dBL-81yM6XD4Un0O4Yzc7eI.roa (raw, json)
Hash identifier: zskZigteorTK9OLfxNO5L6izOKC55dCQcuLHIHZcOk8=
Subject key identifier: 31:00:BA:74:12:FE:F3:5C:8C:E9:70:F8:52:7D:0E:E1:8C:DC:ED:E2
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF13F98016C0E620B0C46A797C920
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQC6dBL-81yM6XD4Un0O4Yzc7eI.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215410
IP address blocks: 2a0e:aa07:e180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:3f:98:01:6c:0e:62:0b:0c:46:a7:97:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3100ba7412fef35c8ce970f8527d0ee18cdcede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:78:d1:32:59:09:38:d5:4d:0b:17:9e:fe:
80:f6:1e:41:b4:12:b7:97:c3:d0:5d:0d:0e:2f:12:
d4:33:95:f4:16:0b:17:17:cd:9f:0d:3e:2b:f2:b4:
00:f5:dd:2e:5a:ea:c4:fc:c5:f9:86:40:04:2a:ad:
2d:4a:e5:b5:d0:0e:91:aa:91:e7:9a:7f:74:74:3d:
3d:79:a5:88:4b:0f:91:1e:62:6a:26:f6:c4:a0:28:
a8:d1:18:ae:cc:7c:d0:3d:1d:d9:bb:b2:51:69:78:
9a:84:62:e2:5d:38:7d:97:32:00:15:b3:0c:99:b9:
45:45:2e:6e:61:bb:f7:5b:58:24:22:5d:c0:f2:5a:
97:5d:a3:92:8f:a2:38:c1:8a:5b:a0:a3:1f:2e:79:
aa:29:bb:e0:4f:c6:15:0e:22:47:6e:68:f1:e3:71:
e4:de:07:93:a5:c8:69:73:74:d2:9e:14:5c:49:97:
24:0a:09:48:39:54:77:1e:40:97:1a:7b:f2:e2:0b:
fc:95:9d:e8:88:46:36:41:06:04:ef:5f:5d:7a:fb:
f2:72:28:b8:3f:37:2e:d5:35:c1:8a:6e:8d:16:f1:
d7:d5:c2:5c:f7:f3:4d:5a:9a:94:a4:e5:60:d9:a5:
0e:46:3f:f6:e4:83:53:71:cb:94:df:df:1f:57:f1:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:BA:74:12:FE:F3:5C:8C:E9:70:F8:52:7D:0E:E1:8C:DC:ED:E2
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MQC6dBL-81yM6XD4Un0O4Yzc7eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e180::/44
Signature Algorithm: sha256WithRSAEncryption
8b:d9:37:fa:ea:86:00:88:65:a8:3e:2f:75:7f:6c:f9:9b:65:
18:43:71:01:6e:9e:b3:b7:ee:95:d3:86:d0:f8:e8:07:26:31:
cb:34:1b:5d:0c:34:2a:97:ce:de:b6:2a:5a:cb:c6:0d:3a:41:
e6:86:d7:ad:76:98:ea:a2:60:4b:9a:56:57:5e:19:c6:97:b8:
ab:45:38:a5:3a:b3:a5:b4:d6:25:5d:7f:e7:ed:02:9b:7d:75:
e9:b3:a7:64:d0:96:f7:f3:e4:e9:d8:4e:ba:24:24:49:34:b1:
1d:d8:79:52:ec:8d:27:e0:5d:aa:be:dd:2e:fe:ea:8d:d3:45:
ee:97:a0:18:e5:7a:00:98:5b:87:fc:14:4a:f7:4b:0c:d7:50:
93:20:fc:49:46:95:70:a5:0e:e8:6c:46:3d:14:b5:d1:5d:3f:
a9:04:c7:69:30:39:5b:26:77:bc:22:95:8c:0d:4d:d2:0c:c5:
da:e5:b3:6c:36:2c:2a:f7:8d:20:3a:13:44:11:6e:a5:55:90:
60:33:d4:ca:f8:4c:2b:99:4d:2e:26:53:d2:38:a2:57:6a:ab:
bc:64:88:44:fa:20:da:77:ad:37:f8:7a:55:87:46:06:33:f1:
eb:a0:10:40:76:64:42:22:96:e9:13:b0:a3:26:c9:d1:b5:45:
ca:a0:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:58 2025 by rpki-client