Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MNEUfOgsZtul9BCavGcS4RwiQ7M.roa
File: MNEUfOgsZtul9BCavGcS4RwiQ7M.roa (raw, json)
Hash identifier: JChO8js7hZODt0jyzmBi6t+Lp60JF9RjWOUxvgVBlLY=
Subject key identifier: 30:D1:14:7C:E8:2C:66:DB:A5:F4:10:9A:BC:67:12:E1:1C:22:43:B3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0193D404B442B0ADC04D7A00F34232FF4214
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MNEUfOgsZtul9BCavGcS4RwiQ7M.roa
Signing time: Tue 17 Dec 2024 09:48:18 +0000
ROA not before: Tue 17 Dec 2024 09:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12389
IP address blocks: 2a04:c106::/32 maxlen: 32
2a0a:3545::/32 maxlen: 32
2a0a:3546::/32 maxlen: 32
2a0a:f200::/29 maxlen: 29
2a10:d8c0::/32 maxlen: 32
2a11:b85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:04:b4:42:b0:ad:c0:4d:7a:00:f3:42:32:ff:42:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Dec 17 09:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d1147ce82c66dba5f4109abc6712e11c2243b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:1e:87:c7:36:eb:b1:a2:6a:69:a0:69:19:
b4:d4:86:e9:3d:31:4d:0f:be:fb:2e:7a:3f:65:a6:
6d:34:6e:0e:a2:72:0e:64:1c:a3:26:ce:8e:02:a6:
30:24:d4:39:f6:6b:75:ac:56:61:b6:08:82:34:ae:
60:5a:8a:4b:fb:2a:a5:d1:62:43:40:b2:44:69:40:
f1:b6:43:51:fb:2f:72:24:cc:1c:a9:01:12:61:d4:
5e:fb:ef:27:b6:a3:86:34:a7:98:43:f4:97:a8:6d:
8d:2d:a0:3c:31:03:a4:5b:87:4b:8a:67:b3:8e:03:
40:1a:05:e5:0c:6e:10:ab:1b:13:8f:52:5d:f8:28:
19:77:b0:49:0c:de:31:bd:d4:71:a4:ab:05:5d:e7:
bd:23:47:37:f1:25:93:aa:3d:2c:03:61:c5:66:e1:
a2:b9:76:55:4e:f3:89:05:7d:e8:c7:01:75:68:93:
a0:30:01:4c:51:85:70:df:4e:58:42:b0:85:4b:b5:
c1:cb:6e:24:81:24:37:67:a1:14:e9:33:2e:d3:0e:
70:a5:b3:4a:75:55:8f:5d:d4:ec:7b:96:b7:3e:cb:
4f:0a:95:db:b0:89:37:22:9c:cc:79:0c:48:21:79:
64:89:b5:de:53:69:c7:6f:ec:b4:46:96:3b:7c:c2:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D1:14:7C:E8:2C:66:DB:A5:F4:10:9A:BC:67:12:E1:1C:22:43:B3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MNEUfOgsZtul9BCavGcS4RwiQ7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:c106::/32
2a0a:3545::-2a0a:3546:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:f200::/29
2a10:d8c0::/32
2a11:b85::/32
Signature Algorithm: sha256WithRSAEncryption
80:50:c8:ad:63:81:ad:59:26:0d:38:28:a9:64:68:bd:6a:73:
9d:e5:ca:e3:df:df:38:5e:92:51:ca:e3:4d:30:95:28:ed:91:
07:ed:90:7b:f0:7a:51:10:f8:9a:6a:ac:a0:ed:18:65:d1:b6:
91:bc:4f:b5:04:bc:c4:d7:11:ad:a1:14:23:d9:cd:de:d3:11:
bd:9b:bb:3c:a1:c0:ec:5f:09:c5:ad:01:d4:cd:f7:6f:d9:59:
e9:01:ae:64:8b:67:c7:02:2a:62:67:77:37:8a:8e:fa:de:a4:
e3:54:92:4d:0a:cf:62:78:d6:f1:a9:31:ca:cc:13:fa:6d:92:
7e:49:ca:43:43:19:f9:94:70:90:18:9d:55:33:9d:1d:e3:16:
3a:52:b3:53:ce:10:95:94:91:0e:41:8e:03:83:a4:59:43:35:
32:16:f8:75:89:4e:d6:03:8a:56:84:b8:cf:d8:cf:6c:2a:35:
5a:f9:e8:a3:90:7d:b3:16:35:78:3b:c0:30:41:2a:cf:47:3f:
3b:de:a0:36:3b:cb:4e:a0:44:4a:5c:4b:a0:4d:9f:e6:39:12:
b8:24:ef:a1:b9:dc:65:b1:29:43:55:4f:92:06:e6:86:01:62:
80:d7:4a:50:c9:fa:c2:69:54:cb:32:b7:57:bc:42:5c:59:02:
de:0b:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:31:20 2025 by rpki-client