Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MuGh7vYnmaaQoXPokwSvVPCOIKA.roa
File: MuGh7vYnmaaQoXPokwSvVPCOIKA.roa (raw, json)
Hash identifier: lVRGi/VLNoNqpXvfkJyNc/SAJB8uwBUvZLmErfhX4KY=
Subject key identifier: 32:E1:A1:EE:F6:27:99:A6:90:A1:73:E8:93:04:AF:54:F0:8E:20:A0
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 019425FDBBDC21E36BECC3156F2827A60822
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MuGh7vYnmaaQoXPokwSvVPCOIKA.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34108
IP address blocks: 2a07:3500:1100::/48 maxlen: 48
2a07:3500:1460::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bb:dc:21:e3:6b:ec:c3:15:6f:28:27:a6:08:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32e1a1eef62799a690a173e89304af54f08e20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:cb:54:ae:6a:bc:d5:08:33:3f:a9:c7:99:
a9:8d:5c:0d:a9:cf:17:55:51:04:28:ce:1e:5f:cf:
e8:3a:22:cb:d4:02:95:eb:ce:38:2d:13:2e:aa:2d:
cd:8d:2b:40:e0:18:d4:89:48:10:3d:92:30:97:47:
b5:50:1e:4f:a2:e8:65:4e:d4:01:7a:3d:c9:c0:8a:
46:8d:1c:4a:33:48:b3:59:a9:b5:2b:fd:5d:c0:2a:
26:01:ea:4e:62:da:c4:47:a2:57:48:80:db:cd:f2:
17:e3:c6:d7:d7:e8:a0:19:c7:2a:e1:1a:e8:04:bd:
ea:d7:9d:40:ed:9e:ea:40:b4:21:16:9d:9d:c5:a0:
c5:04:9a:71:7c:a3:b7:70:42:1e:95:c0:7a:3f:51:
47:38:05:d7:ce:ad:1d:d0:4b:6a:8e:06:80:4a:e8:
c6:07:bf:f7:fe:81:0a:40:7b:7f:e7:eb:5e:dd:ee:
1a:60:00:9d:6e:42:2d:ff:d7:51:33:36:d5:f4:90:
87:f0:f8:46:06:6b:a1:29:e7:49:59:8f:2b:36:b9:
a9:92:9b:d4:3a:c9:61:a4:25:59:84:88:07:84:53:
cd:bd:1a:b9:9d:36:d3:28:d2:af:b6:c5:62:b5:6c:
44:27:83:1a:cc:c3:5c:da:c7:bc:47:da:3f:c9:2f:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:A1:EE:F6:27:99:A6:90:A1:73:E8:93:04:AF:54:F0:8E:20:A0
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MuGh7vYnmaaQoXPokwSvVPCOIKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1100::/48
2a07:3500:1460::/48
Signature Algorithm: sha256WithRSAEncryption
5f:45:e1:22:ad:c8:c7:d6:87:72:6f:f8:f3:10:3b:46:42:97:
bc:c6:2c:cf:9c:29:c7:9a:96:cf:fc:f5:26:83:e2:da:bd:f1:
d1:0e:5c:11:26:cd:83:7d:b9:8f:be:9a:1b:01:90:53:67:52:
a6:1e:47:97:7c:c4:21:f3:9e:0b:1f:14:81:b2:99:63:21:ef:
43:35:06:61:90:08:86:5c:92:37:79:51:99:2a:85:bf:3a:9d:
5d:5f:48:a5:83:b7:a3:4c:69:48:71:b6:a9:4d:5c:3e:3c:8b:
51:19:05:68:85:70:bb:45:7a:09:a2:b9:d2:de:7b:d2:c5:91:
6e:5b:4e:16:b3:e1:1b:f1:ba:ae:f5:2b:0f:52:a3:70:29:2f:
c6:22:3f:6a:3e:6a:42:ec:db:29:f4:f0:ab:6f:20:89:4d:71:
46:1d:29:90:cd:62:08:6a:b8:d5:34:2a:9c:99:bb:e2:f5:8e:
c5:2d:ba:53:2f:b2:4b:7c:a9:2b:9c:84:a4:86:dc:04:2b:5c:
9e:84:18:87:1e:2b:85:e3:5b:88:09:4d:42:05:af:79:7c:c9:
f5:80:7f:96:0f:2a:a4:b3:ed:66:36:3b:40:f9:01:a6:20:a7:
c7:1a:31:80:4d:0f:24:42:d5:2b:c5:c9:38:95:9c:37:23:1a:
b9:19:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:08 2025 by rpki-client