Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/mlqmjmdNYXkE-zfZnNLVTR2hV2Q.roa
File: mlqmjmdNYXkE-zfZnNLVTR2hV2Q.roa (raw, json)
Hash identifier: B1EMXFRIJlIkR0jlcYsz9rkhbrwW6eDu9Ao0wLzCQzc=
Subject key identifier: 9A:5A:A6:8E:67:4D:61:79:04:FB:37:D9:9C:D2:D5:4D:1D:A1:57:64
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 01926C6159FB4219A313B2D488A090B2C6F4
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/mlqmjmdNYXkE-zfZnNLVTR2hV2Q.roa
Signing time: Tue 08 Oct 2024 13:46:12 +0000
ROA not before: Tue 08 Oct 2024 13:46:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42909
IP address blocks: 194.0.1.0/24 maxlen: 24
2001:678:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:61:59:fb:42:19:a3:13:b2:d4:88:a0:90:b2:c6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Oct 8 13:46:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a5aa68e674d617904fb37d99cd2d54d1da15764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:0f:c0:85:22:72:ef:70:2b:24:09:e6:1f:
c1:06:4f:99:25:b9:76:14:30:75:34:82:0d:8e:a5:
6e:a1:0e:fe:9e:a8:1c:e4:1c:8d:a8:6b:80:6c:0d:
9a:1a:83:28:78:d2:ad:d8:b4:3e:31:63:96:e2:b7:
29:2a:4b:89:09:e6:ed:b1:72:87:20:59:4b:d2:4c:
76:57:96:b4:b5:40:80:1a:2e:c9:9a:a4:93:b5:d5:
4b:39:8c:9d:9f:eb:6b:08:8e:09:c5:0c:d4:19:c6:
e8:e2:12:48:e8:6c:3b:f4:c3:39:82:a5:5c:c2:75:
ca:72:70:2e:2a:5b:e0:8c:48:c4:e0:be:fb:1b:ac:
dc:6d:77:9f:6f:57:6c:9d:d5:9a:d2:ee:ad:49:59:
0e:87:8c:b0:03:b7:b7:44:3d:4b:2c:bd:7d:30:a3:
dd:75:7f:99:6a:bf:42:4a:1e:90:02:db:6e:f2:e9:
39:12:58:ec:72:14:25:4d:ae:9c:10:e0:af:3b:eb:
6b:91:1d:6f:92:c9:63:9e:ed:2a:9a:9b:93:4e:e1:
05:53:b2:91:4c:0e:ff:e0:be:d5:9b:30:05:e6:ba:
4d:6a:9e:02:18:d5:bb:dd:72:25:01:2d:a7:9e:51:
5b:bd:a8:29:ac:46:01:ef:60:f1:ea:04:ac:b0:4b:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:A6:8E:67:4D:61:79:04:FB:37:D9:9C:D2:D5:4D:1D:A1:57:64
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/mlqmjmdNYXkE-zfZnNLVTR2hV2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.1.0/24
IPv6:
2001:678:4::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3c:2a:38:4d:86:a5:bc:0f:9b:46:2d:a1:bf:9a:5b:ad:c9:
c8:dd:ca:12:34:24:e8:e4:ca:38:a3:58:9d:d0:7d:a4:83:4d:
65:18:3c:88:39:46:9e:26:18:f2:ed:18:34:d8:a2:38:20:42:
d7:82:6c:95:b4:ac:cd:c0:8d:f1:32:12:e2:16:1a:18:44:06:
ee:6d:29:6c:89:fd:a7:56:30:6d:6e:80:7a:b1:54:c2:24:fb:
9d:a8:ef:9f:c1:45:6f:8d:26:88:3e:12:22:55:af:d3:e1:7b:
74:0e:ac:c7:c0:84:8f:ee:09:c7:fc:77:76:a7:22:3b:52:c8:
30:a6:f5:35:66:c1:35:db:f4:fa:2b:c0:b4:bd:96:e8:6c:5a:
2a:62:2e:79:7d:3e:49:2b:01:cc:27:c9:16:f6:30:d3:f4:3b:
f7:19:3d:22:ca:dd:6d:18:48:a6:bc:1c:53:ef:72:80:44:a9:
b1:60:2f:f2:86:2a:52:40:d2:95:ca:52:e5:eb:c0:5d:0f:3f:
f9:fc:dd:47:03:1a:f6:33:7c:4d:30:7c:5b:a4:5a:9b:9e:6d:
82:d5:b6:aa:55:cb:8f:3a:05:f6:ea:66:a4:37:48:2b:03:35:
c5:e2:98:5f:e1:20:73:d0:1d:9f:5b:55:bd:45:48:58:a4:09:
11:62:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:30 2025 by rpki-client