Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/Mz_0oopSyUD8tIkNMNqzhKplVuM.roa
File: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (raw, json)
Hash identifier: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=
Subject key identifier: 33:3F:F4:A2:8A:52:C9:40:FC:B4:89:0D:30:DA:B3:84:AA:65:56:E3
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 01954303E21270C64BB62605B1BBA7E1AEBF
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/Mz_0oopSyUD8tIkNMNqzhKplVuM.roa
Signing time: Wed 26 Feb 2025 16:08:02 +0000
ROA not before: Wed 26 Feb 2025 16:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:aec3:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:03:e2:12:70:c6:4b:b6:26:05:b1:bb:a7:e1:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Feb 26 16:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333ff4a28a52c940fcb4890d30dab384aa6556e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:89:20:a4:2b:f2:0e:79:43:27:d8:7e:a8:
53:ea:25:42:f6:3e:59:a2:d2:29:c0:bd:a7:98:64:
6e:22:54:5a:87:20:e4:df:58:53:63:a9:46:81:b2:
f7:28:04:48:ff:77:07:e3:1e:c4:9e:82:61:1b:1c:
fe:67:0c:19:14:96:2c:07:ad:27:af:97:b1:0c:9b:
da:ea:2f:66:43:c4:8c:8f:86:49:ab:95:cf:9e:12:
67:a7:6b:5b:26:1f:cb:13:59:44:10:9a:6f:b1:3a:
1f:e7:37:c7:84:8b:5d:c2:72:a8:59:d3:62:61:ae:
21:68:9d:6e:01:ce:29:c3:a8:00:73:ba:b3:66:9d:
52:19:bf:ce:d0:b2:8d:65:3c:71:b6:3b:7e:24:e7:
19:cc:d6:d5:91:9e:38:31:a4:3a:76:17:7b:bb:8b:
02:86:d8:38:02:7e:9e:1b:e8:af:26:29:bd:96:23:
3b:a6:67:bd:75:29:36:bd:c3:cf:10:85:cd:80:7a:
6f:b2:1d:72:3a:86:14:bb:3c:9f:b4:31:cc:0c:ce:
d4:2b:b4:98:b9:87:9f:e4:0f:9d:5f:59:3c:ff:5d:
c6:dc:3d:33:0c:61:ae:62:e3:89:ec:a1:4f:70:9c:
2a:0d:cd:14:8a:93:da:33:93:a2:ab:f4:b2:a8:10:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:F4:A2:8A:52:C9:40:FC:B4:89:0D:30:DA:B3:84:AA:65:56:E3
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/Mz_0oopSyUD8tIkNMNqzhKplVuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:aec3:100::/40
Signature Algorithm: sha256WithRSAEncryption
04:f0:51:f0:52:38:9c:d1:e7:e5:1a:f7:00:50:5b:25:f2:6e:
b2:94:e7:3e:96:16:4e:7b:54:54:de:1c:ba:ce:72:07:da:1b:
a8:92:da:ca:61:fc:a7:3d:97:7f:38:3e:89:9e:ba:72:2c:3f:
55:71:8c:85:5f:6a:0e:39:45:7d:20:4d:7c:80:e5:65:74:8b:
6c:e0:e4:97:14:d9:89:4d:d4:d9:9c:c7:95:ec:55:74:3c:4b:
6d:b6:18:9d:e9:66:78:40:ba:77:68:e7:60:21:3b:cd:c7:48:
7d:73:18:22:05:aa:2b:df:d0:d5:19:a4:a4:8d:04:55:c7:1d:
a7:44:73:f4:6b:bf:52:8f:15:87:03:11:05:07:55:2f:d0:9f:
4a:ec:c4:eb:a2:a2:c6:b9:45:b2:63:18:0e:89:b0:a9:0b:1c:
08:5a:51:ff:e1:ba:1a:a7:c2:b7:a3:b5:3a:4d:0d:47:de:4f:
9a:27:84:dd:24:4f:35:31:79:c0:8e:64:3b:36:d6:bc:ff:67:
bc:be:8c:b2:55:04:5d:b9:44:88:2b:ef:58:45:22:1a:08:93:
82:b5:41:10:e1:66:57:73:1c:50:18:c8:f4:61:b8:8a:f2:06:
06:74:c1:7c:f4:74:e8:cd:a7:04:97:7e:70:11:6a:6c:5a:51:
cb:e6:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:24 2025 by rpki-client