Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa
File: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (raw, json)
Hash identifier: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=
Subject key identifier: 33:5A:C7:E6:29:93:BF:FC:FB:B2:0D:03:05:04:36:65:40:E2:39:D1
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019420D62104E0E59FDC079A26FA1E7C1817
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207748
IP address blocks: 2001:67c:2f68::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:21:04:e0:e5:9f:dc:07:9a:26:fa:1e:7c:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335ac7e62993bffcfbb20d030504366540e239d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:0c:54:33:a3:bc:14:3f:95:c8:0a:ae:34:
6a:61:d3:95:c2:c5:a1:dd:73:7d:f6:0c:66:e7:62:
f9:68:ce:25:eb:fb:79:a4:1f:37:62:3c:f4:0f:77:
fd:48:8a:6f:f7:ff:6b:29:cc:cf:f3:3d:14:c1:79:
3f:a4:79:9b:6e:f8:3f:a7:f6:da:eb:f8:f0:5f:24:
34:01:49:61:63:2f:ca:89:5e:36:cf:b3:d5:7a:a5:
71:7f:2e:af:d0:4f:69:47:7e:ac:20:be:f7:74:fb:
84:58:cd:51:65:54:15:bb:85:d6:03:18:16:4b:86:
86:75:37:4d:72:ca:83:0a:31:a1:cb:8b:d9:4d:98:
81:40:56:08:7d:34:eb:3f:16:2b:fd:2d:3c:25:89:
24:4a:29:7c:0a:b9:df:d5:54:79:11:0e:66:f1:ce:
66:0f:56:1f:f3:86:fe:cb:80:de:b8:b2:cd:17:65:
df:3d:d2:95:6b:71:11:78:42:0f:9b:c2:a2:aa:39:
3d:f1:4f:79:c4:00:6b:54:ef:42:86:74:7c:23:a6:
65:58:57:d0:d1:ee:f2:ad:ba:03:3f:50:43:87:81:
d7:d2:59:f6:cd:61:ca:cf:68:f3:e9:a0:f3:c2:c5:
65:bc:00:35:6e:9c:af:91:ae:eb:ed:a1:fc:f7:3d:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:C7:E6:29:93:BF:FC:FB:B2:0D:03:05:04:36:65:40:E2:39:D1
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f68::/48
Signature Algorithm: sha256WithRSAEncryption
b2:33:f4:1c:f8:13:cb:97:18:1b:b1:15:75:35:e0:ca:0a:41:
88:86:78:6a:51:99:30:65:82:fa:00:a3:3d:f4:2a:f3:4b:4b:
75:79:b2:99:40:9b:8d:d3:db:9b:e2:b7:8d:f3:f5:75:73:0a:
cb:67:9c:51:29:e1:76:95:02:7b:c5:93:1e:10:af:38:24:99:
d6:bb:30:c7:a5:9d:d4:d9:f3:2a:41:a7:54:03:3f:37:4d:96:
7c:0c:e4:fc:2f:ec:9e:c1:31:be:58:e2:32:40:23:f6:b7:b6:
f3:f3:dd:ea:77:34:b0:32:8d:b3:2b:4a:aa:2a:85:03:ef:c0:
36:5b:9a:c3:43:26:4a:a9:d4:fc:03:eb:cf:77:5c:98:ea:49:
77:d5:b4:ce:ec:d1:d9:35:23:67:00:b7:3e:60:6f:c0:c9:01:
0c:1e:32:ae:a0:9b:28:6b:4c:5b:84:f2:f3:7e:04:b3:d1:7a:
6f:20:65:fc:cc:5d:2c:48:22:0f:98:74:5a:2d:99:fc:cd:3c:
96:7c:37:fe:e7:be:88:3f:26:23:e8:38:60:5b:01:46:64:73:
1b:73:fd:17:0b:fe:e9:0c:3e:d8:5c:c2:8d:01:9d:9b:dd:67:
1a:a8:0d:fd:82:b0:3b:83:85:e0:24:57:7d:61:98:84:0f:26:
b9:15:2a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:23 2025 by rpki-client