Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MaqTebH-sU7PRkt0TyByc5ox3m0.roa
File: MaqTebH-sU7PRkt0TyByc5ox3m0.roa (raw, json)
Hash identifier: 85IMRaMVM7b2De7zjDBHjt/D8mV1dMzQR9stBYZq5yk=
Subject key identifier: 31:AA:93:79:B1:FE:B1:4E:CF:46:4B:74:4F:20:72:73:9A:31:DE:6D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EBF90AF0F8FF93DB5DB38A4B9733A
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MaqTebH-sU7PRkt0TyByc5ox3m0.roa
Signing time: Thu 02 Jan 2025 05:48:19 +0000
ROA not before: Thu 02 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4842
IP address blocks: 45.9.11.0/24 maxlen: 24
2a0e:aa06::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:bf:90:af:0f:8f:f9:3d:b5:db:38:a4:b9:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31aa9379b1feb14ecf464b744f2072739a31de6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:1d:ad:8c:b0:3b:b1:c9:e6:14:2a:bd:5a:
cf:4a:cb:dc:91:94:19:ae:9f:d0:22:66:74:d1:b9:
b3:83:9f:04:ba:a7:53:14:87:4f:1c:52:03:7c:11:
b3:05:b4:0a:4e:26:93:07:5b:34:41:71:be:51:41:
db:bf:8d:0f:40:7b:66:25:49:b2:e9:97:3d:25:bb:
ea:91:f1:4b:c5:32:7d:c3:75:dd:48:5b:da:88:ea:
28:2a:ca:ea:92:d2:fc:60:73:7c:6c:b7:08:14:d6:
06:0e:ce:9b:60:6f:65:d1:16:13:b3:73:55:b4:71:
a8:46:d6:3f:b7:4d:30:0f:72:9b:64:b9:f5:68:92:
f0:de:f1:8b:2c:67:80:de:27:c6:0e:cf:d5:00:fa:
2e:de:5b:94:6b:18:10:6d:76:5a:59:f6:b0:cc:36:
aa:67:d7:60:a3:ca:fe:27:aa:cf:60:00:58:8b:87:
3c:87:73:96:6b:1d:af:ce:5d:4d:ad:50:f4:ee:8c:
42:08:b1:8b:a8:96:53:c5:73:8c:ea:e8:e6:bb:d4:
00:7b:ea:8c:fb:9e:ad:75:7f:6f:73:f7:b5:b6:6b:
dc:3b:43:ba:8e:6b:86:50:57:1e:9c:e5:6a:32:0e:
b5:cf:43:74:aa:3d:15:d0:a7:07:62:9a:6e:b5:ee:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:93:79:B1:FE:B1:4E:CF:46:4B:74:4F:20:72:73:9A:31:DE:6D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/MaqTebH-sU7PRkt0TyByc5ox3m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.11.0/24
IPv6:
2a0e:aa06::/40
Signature Algorithm: sha256WithRSAEncryption
8e:17:c6:85:e5:d1:21:6c:be:d3:1e:76:0d:fd:e7:eb:1d:a6:
94:bb:8c:c6:c0:56:24:00:f4:b4:81:73:ff:e1:76:aa:f4:02:
71:d3:fa:48:14:98:df:ba:5e:78:d9:61:52:cf:72:37:54:11:
12:3e:a1:ff:95:fb:97:da:e6:09:07:25:21:c8:d4:a6:97:d7:
f3:46:af:5c:01:ba:14:ad:e0:03:7e:89:71:06:e5:a2:db:80:
a1:fd:9a:04:94:2f:e5:e9:72:eb:6f:50:d2:3b:b8:88:b2:03:
61:72:60:3e:86:b0:65:f4:90:0c:64:4a:b1:f3:12:aa:3c:90:
fa:b3:c1:08:1d:11:2d:22:56:3c:c8:b2:c9:93:c8:49:b3:51:
bb:a2:eb:ff:36:70:f3:26:4c:e2:5c:5f:71:bf:5b:a8:86:be:
5c:12:d8:c6:d3:38:5a:26:c9:9a:aa:85:50:43:9d:b3:00:49:
24:e3:53:54:0a:f0:b8:6e:ea:ef:aa:79:83:ae:2c:f6:1c:b9:
38:d3:f9:a4:d2:09:1b:05:58:67:15:7f:c3:97:16:68:01:34:
1b:f2:72:54:35:2e:73:f2:2e:47:5d:d1:4e:ba:25:a4:8b:bd:
36:51:2a:77:12:5b:af:b4:3c:d3:05:7f:8b:3f:aa:5a:9c:f0:
d3:0f:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:50 2025 by rpki-client