Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mx0B6pXKu_tb6LjbkzQvtFmh6_I.roa
File: mx0B6pXKu_tb6LjbkzQvtFmh6_I.roa (raw, json)
Hash identifier: vLhAhCi/7dUTwDtPp7NimV/vA+Ny5cEgu0PwX0y1ymk=
Subject key identifier: 9B:1D:01:EA:95:CA:BB:FB:5B:E8:B8:DB:93:34:2F:B4:59:A1:EB:F2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C72403F2BBC0DF9C0A8C650D3687A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mx0B6pXKu_tb6LjbkzQvtFmh6_I.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215680
IP address blocks: 2a12:bec0:650::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:72:40:3f:2b:bc:0d:f9:c0:a8:c6:50:d3:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b1d01ea95cabbfb5be8b8db93342fb459a1ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:b9:bd:93:a0:15:3f:b5:b9:29:84:72:fc:
71:64:c8:ed:83:9c:1c:46:c8:52:24:a0:4f:d7:19:
11:11:0b:47:a8:c2:a8:c6:7f:f2:ed:5c:26:84:5f:
e9:56:47:68:1f:92:89:7e:3b:43:c4:0c:24:ac:41:
4b:3d:24:48:6f:82:46:9d:c9:ee:f3:d7:98:0e:90:
cd:18:ae:61:98:60:10:d8:e9:c1:0c:94:e8:9e:84:
95:a8:56:d1:f2:1d:7f:6f:1e:2f:fa:c9:07:4a:e6:
f6:9f:48:7c:20:df:58:54:0e:db:47:d4:ad:fb:81:
d4:ba:c3:cf:c1:fa:33:46:33:37:c5:b2:6d:b0:3c:
37:8b:e5:e4:95:ce:d3:3e:6e:36:fb:78:7d:e8:5d:
b5:6f:08:8f:83:44:00:43:d2:6e:f9:4e:2b:00:b0:
93:14:2b:3c:cd:60:13:fe:43:24:5e:d9:5d:dd:f7:
66:64:e6:cf:18:b2:3f:18:50:c1:0e:c7:56:86:b4:
02:40:aa:1d:21:cf:f7:d7:1b:79:e6:24:86:21:f9:
f9:3f:e9:41:8b:68:b7:80:b2:73:4e:42:b0:fd:3b:
a4:a1:88:9a:16:b7:a0:35:57:6f:53:03:6f:22:36:
ad:e9:a9:25:39:a3:4a:b2:00:5d:f9:16:a6:b3:3b:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1D:01:EA:95:CA:BB:FB:5B:E8:B8:DB:93:34:2F:B4:59:A1:EB:F2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mx0B6pXKu_tb6LjbkzQvtFmh6_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:650::/44
Signature Algorithm: sha256WithRSAEncryption
8e:ae:53:af:ea:01:e1:c9:c1:96:ca:05:98:5e:dc:cd:fe:06:
7a:ea:e9:8b:f8:73:00:0e:0a:c1:e7:fc:27:7b:7a:e9:c8:24:
d4:de:d2:95:37:9a:db:3a:97:75:a8:67:cd:41:43:98:c1:de:
39:bf:4d:54:96:1a:29:70:60:e3:b8:27:13:2a:62:d3:67:09:
b0:d1:9f:db:e2:6b:34:dc:e9:7c:26:5a:d6:89:ab:92:92:7b:
38:fe:97:d7:63:ed:25:a6:84:f2:fa:90:5a:fc:79:b6:24:82:
c2:79:0a:6c:ce:2e:9c:60:d8:a1:b5:15:47:53:1c:3e:87:23:
eb:0b:86:42:6d:43:72:cd:47:b5:7d:bd:66:05:10:8b:0f:6d:
5d:35:58:75:95:7a:72:1b:6a:44:41:68:69:ea:ff:3f:31:81:
17:fa:59:de:7d:55:cb:29:8d:d6:70:81:3f:9e:16:67:ff:37:
13:18:9d:f9:b2:44:13:d6:3e:34:7e:8e:5e:d0:0b:51:36:3d:
ac:bb:cf:a4:b6:ed:c7:b6:b5:f7:7e:a9:e1:fb:9a:50:2f:9f:
b5:f3:81:43:79:79:c7:4c:5a:2a:78:a5:0f:2a:65:ea:bd:cb:
1d:4f:f0:eb:71:ad:b4:05:34:26:c6:d2:1e:68:76:96:cb:5b:
db:7e:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:19:09 2025 by rpki-client