Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/MYDLO2vvDKfPNW5B_jde2eQkJYg.roa
File: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (raw, json)
Hash identifier: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=
Subject key identifier: 31:80:CB:3B:6B:EF:0C:A7:CF:35:6E:41:FE:37:5E:D9:E4:24:25:88
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 0194266BC8FD69BD976ED318BABEBF093C77
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/MYDLO2vvDKfPNW5B_jde2eQkJYg.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216418
IP address blocks: 2001:67c:2dc8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c8:fd:69:bd:97:6e:d3:18:ba:be:bf:09:3c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3180cb3b6bef0ca7cf356e41fe375ed9e4242588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:0f:7a:fa:52:32:2b:f0:76:40:69:57:77:
71:aa:94:84:59:4a:ea:38:da:ba:63:2c:46:2d:7f:
12:f7:17:fd:d1:e6:5e:10:ba:be:42:64:e7:d6:af:
9b:18:43:24:9e:a0:bb:51:d9:e2:88:23:c1:90:8b:
a5:67:06:ae:cd:c9:68:aa:d7:82:44:9e:56:2e:6a:
44:8f:4a:10:ef:9a:08:b3:88:14:ff:6b:4d:00:b9:
78:cf:61:09:e2:5a:5f:76:81:92:75:42:ab:1f:04:
c9:14:00:28:64:83:d7:8f:a2:31:c4:79:ba:aa:2b:
8a:fa:5e:4d:b1:d6:35:b2:be:2a:8e:cd:90:24:6f:
e4:f1:fe:62:a1:f7:b5:b6:7d:94:19:1b:7c:0d:e5:
a9:5c:5f:cc:69:33:6e:3b:77:b9:ca:d1:94:ac:3d:
b9:e7:4a:18:72:79:2c:ba:2a:d9:15:71:78:d4:06:
e4:6a:d8:16:c0:e5:3a:b2:fe:0c:3c:57:9f:fe:22:
9e:72:bd:c8:be:9b:1f:f6:31:1e:25:40:33:de:55:
f7:0d:1f:3c:10:35:e2:0d:17:15:aa:16:76:d7:c4:
d9:7b:9d:df:82:3a:2e:84:8c:74:9d:0a:58:c6:69:
57:58:6a:37:f2:ce:27:af:e8:72:b9:c7:c5:41:2a:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:CB:3B:6B:EF:0C:A7:CF:35:6E:41:FE:37:5E:D9:E4:24:25:88
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/MYDLO2vvDKfPNW5B_jde2eQkJYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dc8::/48
Signature Algorithm: sha256WithRSAEncryption
d5:c3:9e:d5:6c:3c:a2:fb:63:22:8c:94:05:1c:ae:6e:e4:1f:
32:92:2a:cf:f6:78:3a:34:2a:ca:4a:34:ac:4a:2e:dc:c7:6f:
71:2e:e3:cc:4c:b6:11:33:ec:20:7f:e3:61:b6:a9:1f:ab:fd:
c1:a8:12:bd:fa:d7:34:b9:72:8e:0d:84:11:d0:f2:86:4a:ee:
4f:cd:88:b0:72:d4:16:a9:2f:d2:9b:b2:63:8e:1a:cd:b6:a8:
9b:50:a1:83:8e:39:76:f9:09:4e:e0:eb:cd:47:a8:dd:a0:72:
0a:2e:f0:f6:d6:ec:86:62:ea:dd:68:85:0b:44:29:bf:17:6f:
ec:c5:d8:c9:8c:aa:a4:1c:ab:f2:91:b4:71:b5:dc:e5:96:d7:
03:8c:8e:f9:87:7f:c2:1d:df:a4:42:e0:1b:79:c7:a1:a9:93:
b6:c9:3b:56:19:42:a5:5b:40:f7:37:13:33:9f:f9:8e:36:4d:
98:c8:47:13:9e:45:0e:d9:db:21:81:9b:af:9b:5f:55:a6:64:
fe:81:6f:57:b0:52:17:ea:b0:21:9e:95:e7:e5:d7:fa:a4:2d:
a7:8f:25:b6:1a:62:90:80:4f:64:64:e7:86:8d:8c:4f:52:01:
34:d3:90:3b:c6:7f:2f:7e:fe:24:1a:49:40:b3:ba:a5:a2:18:
4b:12:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:53:05 2025 by rpki-client