Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/mRu5c7KrQe4Lzu3l9Z9b04RiHQA.roa
File: mRu5c7KrQe4Lzu3l9Z9b04RiHQA.roa (raw, json)
Hash identifier: UkSlhVHIE8wTIC4MOkQtM5dDWk8qgwaHSqRSkXycOsQ=
Subject key identifier: 99:1B:B9:73:B2:AB:41:EE:0B:CE:ED:E5:F5:9F:5B:D3:84:62:1D:00
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 01856C413F2FB025208F6840F5FC05714E21
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/mRu5c7KrQe4Lzu3l9Z9b04RiHQA.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212149
IP address blocks: 2a0f:8646:b00b::/48 maxlen: 48
2a0f:8644:b00b::/48 maxlen: 48
2a0f:8642:b00b::/48 maxlen: 48
2a0f:8640:b00b::/48 maxlen: 48
2a0f:8643:b00b::/48 maxlen: 48
2a0f:8645:b00b::/48 maxlen: 48
2a0f:8647:b00b::/48 maxlen: 48
2a0f:8641:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3f:2f:b0:25:20:8f:68:40:f5:fc:05:71:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=991bb973b2ab41ee0bceede5f59f5bd384621d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:cf:3f:73:a7:4d:c8:4c:eb:61:74:bf:4f:
6d:d2:5a:e5:34:2f:98:4a:71:e1:0a:ff:da:eb:44:
43:51:29:2b:39:c0:5f:2c:6a:c9:84:e8:b4:cc:70:
40:1b:51:a2:9f:36:7b:cf:6c:c2:fb:f6:dc:c4:18:
57:1f:bf:af:d1:35:1b:e4:34:00:5b:a5:a0:96:98:
30:03:a1:ce:b1:99:31:d8:44:96:ac:aa:bb:01:19:
47:fb:0f:bb:67:9f:cd:cf:88:76:3e:05:cc:a0:ea:
7f:31:bc:90:b2:fe:3b:36:b9:eb:c2:98:dd:3b:70:
3d:61:d5:d6:a4:f1:22:d8:b0:70:80:df:e8:dd:39:
67:89:9b:f3:2d:fc:6b:c7:31:18:c0:7a:e3:bb:74:
72:05:ec:55:ca:2c:56:78:1e:3a:a4:3d:41:3b:09:
93:8c:61:85:4f:e6:01:74:b0:71:5d:ff:20:68:ec:
4d:e9:43:3e:61:8a:69:c5:40:d8:f1:bc:4a:ae:aa:
24:4b:c1:53:09:c5:26:79:bd:b7:a2:bb:8e:a5:f2:
56:32:df:a0:ea:25:81:9c:de:42:2a:55:fe:1c:6a:
bd:f1:67:5a:f9:f1:01:f7:8f:39:6f:56:8f:3b:50:
f6:74:2a:52:1e:aa:3a:7d:8e:c5:c4:28:4c:8a:55:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:B9:73:B2:AB:41:EE:0B:CE:ED:E5:F5:9F:5B:D3:84:62:1D:00
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/mRu5c7KrQe4Lzu3l9Z9b04RiHQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8640:b00b::/48
2a0f:8641:b00b::/48
2a0f:8642:b00b::/48
2a0f:8643:b00b::/48
2a0f:8644:b00b::/48
2a0f:8645:b00b::/48
2a0f:8646:b00b::/48
2a0f:8647:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
09:48:04:ee:7b:db:60:4a:e9:53:f0:fd:b3:3f:e5:a0:d2:7b:
f7:08:86:13:87:ee:d5:10:3c:6f:e3:84:9f:81:f3:62:57:0b:
27:97:ce:1e:2f:5b:13:7f:e5:72:4a:93:23:ab:ef:17:25:5e:
8e:dd:64:31:8a:da:1f:a5:5d:e4:44:f6:9e:23:33:6f:ae:a6:
d7:54:34:b1:e0:07:14:6e:60:4e:77:3d:03:d9:3b:d1:43:97:
8d:70:b8:34:8d:54:be:30:63:b7:96:1b:43:a9:4e:aa:55:76:
6f:4d:97:ec:29:3b:ce:30:1d:c3:07:d7:16:25:cb:9a:ff:db:
da:08:9d:a3:bf:67:ac:20:27:d7:6e:3e:07:6c:2c:77:0d:88:
09:c9:7c:1c:14:60:8b:48:6d:19:18:6a:cb:4d:32:fc:67:7e:
ab:a3:af:1b:f3:43:f4:f4:76:ca:c6:96:0f:46:76:5a:d4:09:
f4:76:21:88:e2:12:03:cb:0a:1d:3a:40:6a:59:41:c9:56:41:
71:2b:09:4e:89:d1:e2:75:b0:51:4f:dd:fb:1e:d3:0c:18:18:
59:f4:6a:ae:a7:a6:1b:3c:c3:5f:c4:5e:2a:84:79:71:c2:7d:
68:0e:40:bb:fb:a4:76:a6:f7:75:71:ee:d3:58:c7:60:be:36:
63:1c:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:38 2025 by rpki-client