Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa
File: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (raw, json)
Hash identifier: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=
Subject key identifier: 99:FB:3C:62:BA:BC:4C:64:77:8B:54:B2:D8:48:7A:15:57:F8:9A:14
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 0194214461AD3AB6ECA39E741701565BFB67
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215869
IP address blocks: 2001:67c:23bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:61:ad:3a:b6:ec:a3:9e:74:17:01:56:5b:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fb3c62babc4c64778b54b2d8487a1557f89a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:a2:eb:9e:1d:c4:e4:3e:1a:f6:91:e0:f6:
23:06:a3:88:9e:ba:44:f5:15:35:69:68:80:42:36:
b4:09:6a:f5:98:93:68:b1:9d:d9:39:e7:4a:9e:2e:
c5:1c:8e:8b:25:b5:6f:fb:cb:3a:4d:9f:f9:f2:a2:
87:3a:71:df:c3:40:d1:c3:32:8a:e3:56:a6:9d:69:
14:40:36:5c:cf:db:ef:7f:9d:7a:f0:15:cc:6c:f6:
c5:14:cd:87:bd:63:af:ff:61:7e:30:92:72:1a:14:
cb:30:1a:f3:a9:2a:cb:7d:9b:8a:3b:f2:f5:65:8d:
83:71:7c:40:4d:fd:14:70:d3:5b:ee:e7:1c:b8:2c:
b8:d7:a4:31:36:2e:d7:95:c5:37:b8:6f:9f:cd:44:
3a:dc:bf:89:8c:50:b1:3a:4b:c3:c2:b0:e4:24:ab:
2d:3c:bb:d0:00:dd:4d:77:e6:8b:6d:da:06:b1:7a:
ec:b9:b9:c4:31:04:2c:2d:1f:5a:92:a8:3b:80:7e:
41:5d:cd:f7:d8:cc:f2:8a:f3:80:83:33:c7:93:c4:
c1:c5:bf:4d:50:c9:18:87:ca:9b:33:00:72:ac:f3:
a2:39:cd:49:5c:dd:f7:36:ad:91:61:49:6b:52:04:
38:02:36:40:7e:ad:39:41:b4:84:49:25:9e:2b:b7:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:3C:62:BA:BC:4C:64:77:8B:54:B2:D8:48:7A:15:57:F8:9A:14
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:23bc::/48
Signature Algorithm: sha256WithRSAEncryption
39:a9:ff:65:9a:71:b0:e0:02:cf:93:58:83:25:95:20:d9:d9:
9a:81:de:40:da:b8:36:a7:0c:42:81:ac:9a:b4:6b:66:eb:8f:
b6:d9:ec:01:60:d1:dc:92:f1:09:34:ee:28:af:f0:38:47:f2:
d9:05:1b:90:32:c8:bd:db:32:2c:71:96:2e:f2:70:49:f3:6a:
fc:82:21:ba:4a:27:cc:39:60:78:e1:36:e7:98:56:01:d8:2e:
d9:41:8c:27:d6:1b:43:2c:99:0f:10:eb:81:9d:9c:25:1a:10:
44:a2:fc:24:98:44:f9:28:a7:48:6f:cc:b7:9e:78:97:a5:85:
67:b2:b3:c0:ae:33:c6:a8:d0:7d:79:e1:cb:6a:55:ba:c4:05:
f8:e9:de:e6:b6:fd:ee:47:c7:e0:d9:7a:90:92:c6:5e:62:c1:
70:95:80:88:f7:46:45:f2:1c:56:68:30:a6:aa:80:c5:70:5b:
d5:b9:28:eb:8f:98:aa:7f:ed:50:3c:13:c4:71:e5:9d:1a:a7:
0e:41:3f:3b:1d:b6:89:1c:3f:be:82:dd:87:fb:de:87:9a:9d:
96:1d:36:fe:02:8c:90:2e:91:06:02:7f:05:eb:3c:e0:cb:d5:
37:2f:d2:e4:77:04:32:e1:10:09:29:e5:e0:13:2b:90:10:ab:
46:cd:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:57 2025 by rpki-client