Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MTLpQ5g1N7nfjZZOAk2NJ2LBiD0.roa
File: MTLpQ5g1N7nfjZZOAk2NJ2LBiD0.roa (raw, json)
Hash identifier: J8bJ7q4yf1hHf93QQbu2SkgvA74N95HHAkiApI7dfAU=
Subject key identifier: 31:32:E9:43:98:35:37:B9:DF:8D:96:4E:02:4D:8D:27:62:C1:88:3D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EED1EC2E7440A1967E2278BDD39C6
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MTLpQ5g1N7nfjZZOAk2NJ2LBiD0.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214483
IP address blocks: 2a0e:aa07:e1f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ed:1e:c2:e7:44:0a:19:67:e2:27:8b:dd:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3132e943983537b9df8d964e024d8d2762c1883d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:3c:7d:a0:6d:3c:a1:dd:d6:06:1c:82:b2:
d6:27:fd:77:5c:12:a2:07:52:65:a6:ea:eb:d1:e1:
3e:0f:96:5b:30:e5:fa:ba:27:51:01:8f:80:96:c2:
a0:84:0f:42:24:30:8f:06:2c:10:dd:e5:e0:73:47:
60:14:3f:9b:72:5b:c3:c1:4f:5e:38:55:28:bb:83:
49:b2:ef:c3:67:b7:93:07:61:cf:8f:bd:e5:56:f4:
f9:12:99:21:c2:82:e2:f4:3e:b3:f5:22:1d:25:63:
8d:90:c9:1b:ef:6d:4b:34:20:73:ee:1a:17:cb:4d:
8b:13:a0:0a:f8:23:6c:20:92:47:06:96:84:3c:07:
5c:da:34:11:de:77:9d:9e:65:1b:93:2e:88:1e:74:
49:84:6a:0f:13:e1:24:20:b6:4b:7a:00:29:60:ad:
06:a2:b9:12:73:8f:19:df:80:9d:2b:81:b1:92:b0:
bf:bb:49:ce:24:b4:b1:3a:b0:87:00:bf:c0:06:b2:
3e:e6:8f:f3:62:5e:a8:c1:9c:ac:49:2a:16:94:60:
03:f0:ba:e6:e2:86:d4:4c:9e:e1:05:cd:b0:ea:fe:
9f:a3:88:62:14:91:e8:12:f4:c2:d8:b3:e6:e1:52:
7b:71:99:e7:84:ed:7a:55:59:7a:0a:74:44:aa:76:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:32:E9:43:98:35:37:B9:DF:8D:96:4E:02:4D:8D:27:62:C1:88:3D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MTLpQ5g1N7nfjZZOAk2NJ2LBiD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e1f0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:be:1b:01:e9:f7:c7:a1:a1:45:dc:50:bd:11:f6:08:37:e4:
c1:47:80:6f:b4:e2:c5:19:16:a1:a4:02:3f:a6:c6:10:53:d9:
b3:93:c4:bf:41:36:b6:ca:b8:53:e1:37:90:4f:30:2d:8a:30:
cd:52:63:9b:0c:cb:5d:d4:ce:a7:84:31:0e:0b:99:bb:29:ed:
55:f0:8a:c9:81:e7:a4:bc:13:05:af:40:7a:9d:c5:90:89:04:
c9:4b:7f:17:81:3a:eb:45:f7:ce:6e:4e:f7:b1:2c:71:d7:bb:
7d:ad:5d:1c:90:46:6e:c5:78:71:13:3c:9f:bf:76:ca:99:ba:
10:d5:17:b8:c7:19:54:40:b4:17:b8:19:b3:48:65:89:54:25:
33:1b:97:89:a7:55:34:66:43:ed:3c:c4:dd:54:09:fb:7a:b1:
aa:6b:53:e0:48:63:95:03:38:19:4b:18:a0:47:85:59:b2:2b:
79:36:1e:17:92:25:ca:9f:5f:a3:1c:a1:7d:24:68:0d:29:eb:
97:a8:2b:fa:86:6c:93:c7:c6:f2:c8:cc:aa:ee:f8:3f:5d:7f:
c9:c2:2e:c1:43:f9:bd:04:84:94:5c:65:9a:8f:93:8d:30:66:
b6:fd:d6:47:2f:46:bd:dd:31:0a:04:02:bc:bc:72:15:32:03:
bd:43:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:46 2025 by rpki-client