Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bMjMSmNl6rHOPREwR6L9oDrNIW8.roa
File: bMjMSmNl6rHOPREwR6L9oDrNIW8.roa (raw, json)
Hash identifier: CXGPHv6Djtj51SZmNORskLmySO51pMKpK4Vk7lP4Uew=
Subject key identifier: 6C:C8:CC:4A:63:65:EA:B1:CE:3D:11:30:47:A2:FD:A0:3A:CD:21:6F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE0E7090BD846A816D9496377BC6E
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bMjMSmNl6rHOPREwR6L9oDrNIW8.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205602
IP address blocks: 2a06:e881:116::/48 maxlen: 48
2a0a:79c0:b00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e0:e7:09:0b:d8:46:a8:16:d9:49:63:77:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cc8cc4a6365eab1ce3d113047a2fda03acd216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:c5:8f:60:e4:43:9c:42:f4:49:58:46:68:
85:e8:81:95:7c:81:10:ae:84:65:5c:30:50:63:96:
78:ac:8b:b1:be:d8:eb:c0:d8:18:3a:ea:15:71:82:
ac:9b:78:91:07:85:6b:ec:09:a1:b1:b0:ae:97:87:
86:30:01:6e:59:75:c2:98:7f:8a:75:46:08:d5:23:
02:e7:1b:1d:0a:61:e6:8d:73:66:87:12:e1:90:73:
aa:98:8b:1c:92:18:bf:8b:2f:c5:dc:f0:26:50:8d:
d9:bf:40:9c:77:22:89:16:6f:f4:0b:63:ff:af:6c:
18:ea:7a:23:ed:c6:92:77:5f:8c:43:c0:a9:d1:58:
64:47:3b:7a:ce:fc:5c:c5:33:a0:1f:a1:34:89:03:
b6:85:f9:51:ed:7b:0b:e9:fc:a7:92:4c:a7:98:0d:
b7:c5:9d:df:65:af:3d:a4:a7:d1:09:30:7c:0a:1b:
46:6d:f2:30:75:24:e8:30:a0:6d:63:f0:25:a7:48:
9f:a3:af:22:b9:f1:9c:28:08:1e:9a:3b:c5:cc:9a:
33:df:a3:99:b1:07:6c:2b:7a:66:cf:94:a4:44:a3:
0b:72:16:d8:08:b1:d2:31:8a:48:31:93:bb:0d:69:
1f:e9:51:1c:93:37:54:95:32:d9:4f:5e:7b:05:81:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:CC:4A:63:65:EA:B1:CE:3D:11:30:47:A2:FD:A0:3A:CD:21:6F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bMjMSmNl6rHOPREwR6L9oDrNIW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:116::/48
2a0a:79c0:b00::/40
Signature Algorithm: sha256WithRSAEncryption
bb:8e:32:7d:a7:26:5e:53:a0:c7:af:6e:20:6d:e9:a0:b8:59:
a1:f3:8c:6a:c9:ab:e0:95:68:ee:1c:b0:6e:61:89:44:d7:5f:
1b:2a:3c:be:db:6c:c5:33:40:14:40:97:e2:a2:e0:94:8f:8f:
7c:8f:12:4c:cd:4e:27:c5:c4:7f:b2:33:6a:82:08:2a:e9:76:
76:eb:8c:77:37:63:02:12:09:b7:58:2b:0f:72:73:ca:78:f7:
41:54:8a:a1:13:d1:c3:49:10:a5:bf:6d:60:c7:bf:0d:f6:a9:
82:22:ca:cd:e1:8e:de:db:52:44:c0:60:a8:0d:54:78:ff:ea:
7f:10:cc:53:64:2a:3e:6d:e8:8b:83:e0:b6:f5:1a:10:00:64:
3f:01:74:c4:a8:28:19:9c:66:96:50:1b:9f:0a:25:eb:4b:f9:
b6:43:07:1e:36:ee:6b:48:0c:9c:53:47:61:ec:01:e2:6b:14:
eb:a4:4c:e1:d5:7c:09:ed:a1:15:6c:2e:80:75:74:63:78:eb:
43:65:fd:da:48:41:78:e9:94:e5:03:60:8a:91:23:43:c6:85:
4e:aa:89:34:7a:7d:36:94:32:dd:c7:29:a3:b8:d3:cc:41:1b:
cb:8b:f7:dd:f2:6f:7a:8c:5f:9b:7c:97:c1:ce:4e:13:92:49:
8d:67:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:20 2025 by rpki-client