Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mHmI8M6zBWh-PXtOFMv1BXhPTp8.roa
File: mHmI8M6zBWh-PXtOFMv1BXhPTp8.roa (raw, json)
Hash identifier: +BtO7+C/q4nMXLVwrcKv/iNA6lq+fUc8xeN5QWbdqCo=
Subject key identifier: 98:79:88:F0:CE:B3:05:68:7E:3D:7B:4E:14:CB:F5:05:78:4F:4E:9F
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F6C540CD5450BD2093A1C584BDAA
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mHmI8M6zBWh-PXtOFMv1BXhPTp8.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214911
IP address blocks: 2a0f:7803:dd00::/40 maxlen: 48
2a0f:7804:da00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:c5:40:cd:54:50:bd:20:93:a1:c5:84:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=987988f0ceb305687e3d7b4e14cbf505784f4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:cf:1a:d7:56:ef:a3:41:e3:a3:6d:43:ac:
00:77:20:05:eb:09:91:ab:63:36:23:f6:d0:5a:72:
31:e9:af:3b:58:2c:c2:d3:dd:62:04:20:66:a0:ef:
00:8d:af:72:8c:07:05:bc:9e:2e:d0:7d:77:3c:e3:
70:d4:b1:ab:47:0f:3a:30:89:f8:6f:6f:2a:8f:5b:
50:cb:a0:59:08:8f:9e:56:5e:0d:dc:52:b7:15:9e:
3e:e4:ed:d9:c4:42:cc:b9:ed:a4:da:3b:8c:ec:8a:
23:41:22:ea:00:31:3b:7c:1e:c7:f2:44:5c:46:63:
2f:42:a9:12:c4:30:a7:bc:c4:76:89:a1:da:8f:3b:
72:26:89:e1:7b:d7:03:63:eb:2a:9c:6a:f3:61:a6:
45:59:2a:cd:8d:39:cf:1a:10:95:f5:78:3e:56:18:
54:2f:ab:f8:19:d4:de:18:43:54:2a:98:19:7d:b7:
c4:0f:67:e2:eb:62:72:98:4c:45:e2:c0:db:21:37:
1b:53:d5:5b:e3:d9:2d:16:72:af:4e:49:47:66:d7:
53:a4:e2:58:d8:78:cd:21:8e:6a:32:30:f2:e3:c6:
d6:b4:f4:52:40:f8:96:41:f4:09:5c:b3:0c:d3:aa:
5b:5a:6c:73:24:6f:07:19:56:e0:dd:a8:47:5f:91:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:88:F0:CE:B3:05:68:7E:3D:7B:4E:14:CB:F5:05:78:4F:4E:9F
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mHmI8M6zBWh-PXtOFMv1BXhPTp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:dd00::/40
2a0f:7804:da00::/40
Signature Algorithm: sha256WithRSAEncryption
0a:a5:57:dc:a6:2e:13:89:5a:51:9f:97:45:7a:45:9e:e5:54:
c3:8d:6f:69:2f:27:82:fe:6b:12:22:4f:c4:93:fc:8c:a9:3e:
6f:fd:11:76:6d:93:eb:f8:92:07:6d:3d:6f:a9:5b:f4:0a:95:
0d:b6:46:6f:56:70:13:bc:d8:7c:43:33:e0:4c:b7:3a:d6:c4:
5f:eb:e2:5b:de:25:6a:41:71:1e:f6:6e:c1:e0:cf:28:40:46:
84:a7:f0:5c:0b:aa:2f:e6:01:28:83:ac:3d:a1:6b:58:a6:2c:
95:29:07:e9:ab:c7:c0:6d:a6:ee:74:b7:56:2e:08:58:04:48:
ea:70:c3:7d:f6:de:6c:f2:68:2e:86:12:05:99:15:8c:f0:3f:
36:a9:a6:4e:ee:66:9b:5b:56:d8:6d:1d:00:0b:42:55:2a:ce:
de:e8:3d:7a:fb:51:82:65:50:19:4e:fc:b4:2b:b2:29:83:77:
ce:98:76:c0:82:6f:76:fa:c3:cd:c0:f0:7d:91:a9:69:bb:fe:
f2:55:d6:1b:8a:c8:25:08:f5:71:4c:4c:95:25:5b:3a:39:bc:
6f:6d:ec:03:bd:31:f4:4a:7e:e9:41:a5:29:eb:75:e7:b2:33:
4f:3e:e4:0e:8b:c4:28:71:9e:78:2b:f5:27:1e:8a:bb:59:2d:
3b:ea:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:12 2025 by rpki-client