Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa
File: MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa (raw, json)
Hash identifier: l1OVDxtg0CoOASKjwgQu29p5CMY+5ES/VliOBwP9wAQ=
Subject key identifier: 32:98:1F:CC:16:5C:0B:0A:46:98:21:D0:5C:E1:A0:54:2D:12:05:BC
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 01942067CF3DCCA04D1D7B1E6EC9F53849A2
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209395
IP address blocks: 2001:678:a08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:3d:cc:a0:4d:1d:7b:1e:6e:c9:f5:38:49:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32981fcc165c0b0a469821d05ce1a0542d1205bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:81:af:25:ff:f4:d6:cc:40:93:a6:c9:07:
fb:a9:31:01:6b:9a:0f:8d:14:93:4d:cd:ea:51:f0:
60:41:cc:cb:a7:02:5c:76:4f:e6:f5:56:33:f4:93:
15:e6:1b:f0:85:d7:86:38:b3:f8:6d:08:f8:19:e1:
27:d4:67:fe:ea:08:e1:68:0b:10:17:3c:c6:af:01:
81:a5:be:8c:4c:52:75:73:92:52:b5:4b:b9:ec:71:
b9:cd:8f:a1:01:28:85:7e:ed:44:06:01:33:d8:be:
fb:5a:95:14:23:ec:56:45:fb:81:3c:aa:a7:47:3d:
2f:98:39:62:f6:c6:bb:3b:9b:90:ca:9b:3c:78:d5:
ec:e4:df:af:81:dd:0d:9e:e3:12:3f:99:d4:69:0c:
ac:c9:23:89:67:1b:a1:87:f5:0b:73:7d:ee:b9:8d:
8d:73:9e:01:c6:62:21:0f:7c:1c:8f:7f:1c:ea:95:
d5:3b:3b:e7:be:2d:dd:d8:72:e4:44:36:ae:d4:a4:
aa:af:79:db:1d:a1:06:c5:97:4b:3e:48:ee:32:5d:
1e:f0:7b:30:13:0f:8b:94:e0:f9:29:94:17:03:fd:
94:78:f7:e9:8f:ee:88:8d:2c:97:26:56:dc:dc:47:
25:8e:36:05:2b:3d:d4:61:f2:22:c6:07:99:96:4e:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:1F:CC:16:5C:0B:0A:46:98:21:D0:5C:E1:A0:54:2D:12:05:BC
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a08::/48
Signature Algorithm: sha256WithRSAEncryption
75:c8:28:0a:8c:4b:ce:b7:43:eb:33:52:d9:44:c5:b7:25:52:
26:da:02:9f:31:c6:f4:20:fd:79:da:e4:a6:1f:67:60:c9:c5:
fa:e4:7f:5e:d1:d6:db:27:ce:8c:fa:12:d5:4e:21:94:74:f0:
59:3b:f5:61:a7:3e:1c:c5:0f:a2:bc:59:e3:32:46:55:27:0b:
95:80:48:46:dc:55:72:3b:f6:dc:c9:b6:b5:a7:df:9d:3a:6e:
3e:77:4e:f3:77:82:5e:bf:bc:20:37:a7:ad:da:e2:80:fb:e3:
4d:b2:f4:77:21:5f:d8:7d:80:fe:ff:ca:0f:a1:1e:02:5f:f7:
63:7c:61:b2:2d:55:62:da:4a:b6:d1:1e:7c:e1:c7:95:ea:7b:
67:5d:84:e0:00:e2:4c:46:47:e6:03:83:ee:13:df:13:86:7c:
66:27:4f:dd:5d:42:19:10:2a:23:d9:74:4e:ab:dd:55:69:82:
36:52:31:57:53:e9:c2:ac:d2:d1:22:8c:98:3e:32:5e:55:09:
d5:92:a8:db:9f:44:e5:1b:26:8b:77:f3:bb:33:e0:81:9c:55:
89:53:a2:b1:8d:db:ed:ed:76:ac:cb:bc:45:2d:fd:88:9f:74:
cc:a5:6c:84:2b:f2:bd:ff:5d:a6:57:1a:01:d2:13:d0:d9:b3:
f9:7b:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:10 2025 by rpki-client