Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MGAJtndIL2Zkck_RVFiKK_Egp5c.roa
File: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (raw, json)
Hash identifier: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=
Subject key identifier: 30:60:09:B6:77:48:2F:66:64:72:4F:D1:54:58:8A:2B:F1:20:A7:97
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA45B10760F3297386F9DE3AD8BB33
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MGAJtndIL2Zkck_RVFiKK_Egp5c.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212144
IP address blocks: 2a12:7700::/29 maxlen: 29
2a12:7700::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:b1:07:60:f3:29:73:86:f9:de:3a:d8:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306009b677482f6664724fd154588a2bf120a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:10:01:a3:75:ce:96:c1:3f:d5:75:d8:61:
f0:20:9d:f7:5e:6d:5e:27:40:f8:bd:0d:cc:35:91:
a9:ae:90:f2:35:47:e2:19:70:01:05:eb:59:f4:06:
54:3a:ac:d0:69:a4:d3:eb:4b:72:0a:90:75:cf:ea:
77:1c:bc:fb:70:0a:5e:3d:e7:a4:5f:e4:8d:84:84:
c6:7f:da:a1:69:78:83:88:46:86:5d:fe:36:4b:70:
27:54:fe:a8:de:ab:1d:64:bc:c3:d8:33:ba:63:26:
34:ff:7f:a3:c9:32:8f:f8:30:0e:8e:e7:93:2c:06:
d5:c1:ec:9d:ab:53:de:9c:6e:27:35:5b:b0:70:c0:
f9:5a:d1:3e:c4:4a:54:a3:82:73:1c:17:2f:82:61:
8b:12:ba:27:d1:16:05:8c:de:ef:fa:34:95:fe:37:
74:de:b9:7c:c6:bf:96:69:ae:db:38:2b:15:f9:1d:
e0:20:ee:bc:01:98:01:0c:a9:c7:86:e9:22:19:b6:
40:b0:74:d2:5d:f8:ce:7a:21:dc:a5:84:1d:88:ca:
cb:a1:e6:a3:0c:dd:9f:6b:e3:97:de:0e:01:5e:c7:
69:10:09:a2:33:28:0c:c9:f3:3d:c0:3a:2a:5a:25:
53:08:3a:28:1e:86:04:ed:00:dc:6d:41:3a:37:95:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:09:B6:77:48:2F:66:64:72:4F:D1:54:58:8A:2B:F1:20:A7:97
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/MGAJtndIL2Zkck_RVFiKK_Egp5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
e2:66:5d:20:15:a0:12:75:94:38:b8:1c:37:b9:b3:b4:53:e2:
25:8c:f5:0b:72:47:2d:97:8e:5e:af:25:05:29:c1:c3:d8:e0:
1d:77:e2:41:bd:db:c5:b4:92:3d:44:f1:a9:d1:bf:e6:27:93:
e6:fc:a6:4d:6e:99:41:e7:70:1c:13:3b:82:2a:16:f8:8b:6d:
36:b9:c3:b5:70:db:02:a8:44:62:4a:14:99:86:80:64:29:28:
40:65:48:69:bb:0a:7c:d5:05:c7:0a:0c:8c:87:1c:a6:8e:0d:
d2:b2:1c:62:7d:09:95:23:ce:e7:f0:3c:46:28:b3:52:e3:b5:
e7:70:65:f7:ba:5f:8b:6f:eb:5d:76:de:68:61:c6:60:07:12:
db:1f:1f:c0:52:03:61:76:c1:00:8a:4d:f4:e5:47:02:be:42:
f8:68:e0:cb:f2:39:df:32:d3:e1:35:02:e1:81:ae:ee:63:c6:
61:c3:c1:ff:19:36:d8:db:e0:e1:9c:ce:76:2d:87:fc:0f:ab:
21:6a:ce:be:ce:84:59:40:b3:35:8e:d2:78:27:4e:07:7c:cf:
d9:ad:67:a9:d3:87:ca:c8:dd:61:9b:3b:98:52:b0:53:3a:c3:
75:03:63:08:1f:40:d2:dc:f4:25:a8:25:ff:2a:e5:77:55:8a:
19:ee:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:54:56 2025 by rpki-client