Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mudyV3uJ2j5EJpfmqqEHJcIVt5Q.roa
File: mudyV3uJ2j5EJpfmqqEHJcIVt5Q.roa (raw, json)
Hash identifier: pMkijvEvEiFHx9CeIfPa1LRH1v1WHxRZfnTfaYelj44=
Subject key identifier: 9A:E7:72:57:7B:89:DA:3E:44:26:97:E6:AA:A1:07:25:C2:15:B7:94
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194F4689B19B5DF2A79BF7EE82C87B6021F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mudyV3uJ2j5EJpfmqqEHJcIVt5Q.roa
Signing time: Tue 11 Feb 2025 09:48:03 +0000
ROA not before: Tue 11 Feb 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214480
IP address blocks: 2a12:bec4:17f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:68:9b:19:b5:df:2a:79:bf:7e:e8:2c:87:b6:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 11 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae772577b89da3e442697e6aaa10725c215b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:16:4c:8c:66:25:8b:db:80:3c:52:1c:49:
41:66:0e:54:bf:3f:fd:d4:7f:c2:38:b3:8c:e9:18:
53:0d:60:83:e1:4b:69:a7:53:76:19:ff:fa:ea:52:
4d:dd:a5:e1:fd:67:e4:5c:0f:70:ad:e8:35:a8:0d:
e6:5c:47:f3:b8:65:55:03:d0:08:35:33:0c:7b:37:
7d:67:02:85:63:3a:de:92:96:46:bd:ea:12:c2:9c:
38:51:4f:08:67:e1:07:73:c7:85:a3:64:fb:0c:50:
2e:f1:85:13:5e:84:63:23:fc:15:af:10:20:a5:7f:
64:81:8a:f2:db:ca:45:66:18:f7:21:6c:c1:9a:1a:
15:9e:c7:f0:00:0f:ed:68:9c:94:e5:ac:08:b5:6f:
74:33:0c:6e:e8:a1:43:7d:6c:26:97:07:d6:95:1a:
7a:f7:74:b0:1f:19:ef:62:3e:73:58:b2:a9:51:b3:
50:9b:52:0c:45:c3:d1:bb:9a:fe:d3:b1:38:10:7f:
8a:cb:a0:aa:d1:e3:21:be:26:4f:f8:53:55:b5:12:
5b:08:ba:0b:7f:da:60:e4:b8:c9:cb:ac:5b:ee:0d:
0c:66:3f:d7:30:83:7e:50:02:22:62:be:09:5a:95:
0e:d6:37:3e:92:87:64:7a:a7:02:72:cb:db:e4:40:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:72:57:7B:89:DA:3E:44:26:97:E6:AA:A1:07:25:C2:15:B7:94
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mudyV3uJ2j5EJpfmqqEHJcIVt5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:17f0::/44
Signature Algorithm: sha256WithRSAEncryption
b7:0e:f5:e9:56:5c:a5:b6:df:b7:b4:a8:79:8c:08:61:a1:08:
4b:26:ac:85:bd:4b:16:ad:35:64:52:f7:bf:46:47:4e:10:02:
a9:3b:b0:b2:aa:9d:b4:21:61:e1:2d:78:c0:c1:4c:31:82:8d:
20:ce:89:a3:89:cf:93:3c:1e:ea:4e:8d:81:8b:f0:c6:fa:7b:
24:eb:4c:51:02:4a:30:13:16:87:39:dc:6c:7a:5f:41:6a:48:
07:70:85:9d:47:eb:9b:49:e3:51:32:62:f2:0b:b4:1f:4d:58:
64:0d:1d:0d:1b:03:1b:c0:3a:11:c3:20:61:6e:5f:98:1b:04:
d2:0a:96:2c:53:10:1c:7d:1e:56:a7:64:f6:53:89:bc:f0:67:
71:41:b7:b3:62:ba:f5:4b:38:bd:2e:d8:cf:b7:9d:66:07:6e:
47:32:76:07:db:58:1c:82:40:56:32:21:60:88:a9:2d:b5:72:
27:ca:f5:df:a6:5e:66:cb:e6:d3:da:ed:cf:3d:a1:5c:1a:1a:
9a:fe:64:ba:42:ff:21:1c:5d:5f:9b:2f:d9:8d:36:31:32:db:
c4:37:75:03:28:d5:69:61:6f:fa:72:8c:86:d1:9b:8a:7c:5d:
d2:d8:69:01:b2:29:53:3f:46:a5:82:4f:ae:03:60:99:0c:61:
52:b6:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:09 2025 by rpki-client