Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa
File: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (raw, json)
Hash identifier: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=
Subject key identifier: 9B:3E:DE:84:05:2A:3A:CA:D1:A9:B2:7D:56:F3:D6:C2:A9:36:5C:86
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 01941FFA09161CF7F654E6753A341D5F85FF
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47504
IP address blocks: 2a13:cc87:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:09:16:1c:f7:f6:54:e6:75:3a:34:1d:5f:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b3ede84052a3acad1a9b27d56f3d6c2a9365c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fa:6e:24:ff:b8:be:8f:b7:b0:c8:44:23:17:
19:73:d6:2b:54:23:12:7f:38:73:24:ae:03:be:9a:
6a:6e:36:da:df:a3:98:0c:37:b5:41:6e:84:ac:13:
5d:01:d6:73:61:f2:7f:ed:c6:49:1a:a3:ef:93:4f:
79:43:df:26:13:6b:5b:f3:e1:28:95:86:94:c5:f2:
82:4f:3c:29:cc:75:1b:4d:b3:bf:00:c1:2f:da:ef:
d1:43:39:ec:c6:1c:dc:8d:cd:a2:ad:fe:c3:3e:b5:
ca:75:82:7a:54:b4:7e:59:20:46:0d:0f:07:b3:b0:
c0:e5:61:63:f0:e7:4a:1e:94:3c:af:a5:df:3a:a1:
3d:3e:94:bd:e9:6c:8c:08:65:3f:87:ce:1d:f4:ee:
12:89:3e:cc:96:bf:b1:94:18:66:e6:9e:48:85:a2:
c5:f7:0b:7b:03:60:f1:ca:a3:ea:30:e3:6d:ab:39:
e9:e4:12:40:5c:cc:be:41:71:0e:99:b4:b3:23:89:
59:b1:7d:1b:49:69:90:e9:5c:21:88:0a:a1:71:ce:
f4:9c:66:87:be:1c:60:86:4b:e4:45:40:72:29:b1:
26:7e:89:3a:67:62:b3:29:22:e9:97:bc:64:fe:e8:
85:80:76:8b:a7:97:06:02:48:f9:d7:64:c3:b7:70:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3E:DE:84:05:2A:3A:CA:D1:A9:B2:7D:56:F3:D6:C2:A9:36:5C:86
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
d3:3d:43:c7:4f:4f:10:1e:35:4b:be:8a:ec:6c:98:16:c4:d7:
82:17:f1:ae:15:91:4a:ac:f7:13:d9:47:cc:f2:4c:4d:2b:5d:
3d:be:cc:cd:36:ae:19:5d:40:1b:86:99:03:ef:64:b7:c8:91:
f4:b7:dc:00:b7:bf:89:05:3b:b3:b4:41:74:45:0c:28:a4:8a:
2c:6f:3b:3c:aa:0f:89:34:ea:3b:cb:8e:5f:fd:be:39:53:d7:
48:cd:3f:4f:eb:51:1d:6f:03:47:b9:7f:12:54:95:b9:c0:66:
b4:32:e3:0c:da:ca:9c:d6:e4:a4:67:67:52:87:45:44:2f:6f:
5b:82:53:48:38:ae:85:34:d2:38:87:bf:af:0a:be:f9:64:1f:
9d:bf:99:57:b8:07:fc:0c:7a:5d:86:e1:08:09:18:39:5d:4f:
0e:da:bf:7e:e6:0d:c6:16:59:1f:20:f8:c7:6f:ab:6f:19:99:
62:25:80:2d:33:42:df:42:0f:6a:5a:a2:1b:28:ee:c3:dc:b3:
63:6f:0a:5a:1f:94:a3:ff:0c:f7:fc:1b:e8:c1:36:dd:48:79:
71:9e:3c:7d:85:18:4d:30:74:1a:1b:5d:6b:5a:f3:ac:cb:91:
3b:3a:fd:73:3a:15:b1:e2:8b:2e:b0:6f:61:05:5d:e7:7c:8e:
bf:26:eb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:27:42 2025 by rpki-client