Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/M6-0ilcboil8V3qdXWtXp8FSrwU.roa
File: M6-0ilcboil8V3qdXWtXp8FSrwU.roa (raw, json)
Hash identifier: WRf8o79b0NMGHVx92f3msPfTUcZhCgsvW5xiza5z8ZI=
Subject key identifier: 33:AF:B4:8A:57:1B:A2:29:7C:57:7A:9D:5D:6B:57:A7:C1:52:AF:05
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01942444AC147B40914EBC5DD104CAAF9C8F
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/M6-0ilcboil8V3qdXWtXp8FSrwU.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9384
IP address blocks: 2a12:e100:100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ac:14:7b:40:91:4e:bc:5d:d1:04:ca:af:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33afb48a571ba2297c577a9d5d6b57a7c152af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:b1:dc:4b:96:d0:4a:62:3f:7f:db:a2:37:
25:2c:c7:18:5a:19:66:63:a3:e2:bf:8c:bb:67:71:
23:76:a2:a8:4b:eb:a5:7f:21:dd:38:05:51:a0:e7:
08:76:6e:47:fb:3a:2b:0d:b7:88:f2:0d:ea:fa:5c:
01:89:d9:a2:b4:de:9d:84:e2:dd:62:a3:47:f8:7c:
ed:12:86:0d:de:27:5c:9f:5b:ed:b8:5c:c3:fa:80:
7f:e9:5e:d5:30:99:b2:1d:4d:83:8b:24:63:59:a9:
ff:5b:81:27:5f:8f:41:bf:a9:33:ca:d0:80:5a:d6:
7c:e5:2a:15:5b:9e:9b:5d:fe:25:2e:a1:4f:10:5d:
67:b6:79:7d:4a:78:e7:ac:e1:7b:0a:9a:2d:44:cf:
62:0b:84:50:ff:37:49:eb:a1:a8:31:8a:21:24:d4:
83:2a:cc:17:4b:5a:3b:ab:22:e2:26:6a:db:2e:66:
e7:99:56:e0:65:71:9f:08:e4:98:ec:69:14:05:b1:
f7:bc:e9:8c:b2:65:b0:22:0c:a3:67:03:b4:b3:3e:
45:ff:ec:8a:83:c2:e0:29:34:54:39:38:72:f5:5f:
db:92:82:2a:e8:2d:d6:33:20:f6:6c:b1:44:32:6d:
19:a5:40:1c:5a:17:1b:44:ef:b0:02:37:29:c6:17:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:B4:8A:57:1B:A2:29:7C:57:7A:9D:5D:6B:57:A7:C1:52:AF:05
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/M6-0ilcboil8V3qdXWtXp8FSrwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:100::/44
Signature Algorithm: sha256WithRSAEncryption
76:69:62:e6:83:4f:6a:96:f9:47:ed:a3:95:f5:39:ea:20:d7:
d5:70:36:70:78:78:4e:3f:79:f8:4c:8c:66:db:22:57:71:32:
f6:a1:e9:52:b0:85:ea:87:db:73:9b:87:bd:e0:46:3d:aa:d6:
4b:20:07:5c:3a:0a:be:f1:0f:5d:e2:d3:92:64:18:e1:52:1e:
34:ec:52:51:ac:ad:05:9c:1c:5d:ae:ac:14:f0:d0:26:35:10:
5a:97:42:fd:05:b4:e6:4d:cf:c1:08:d3:fb:eb:90:ac:a7:db:
7e:0e:3d:05:e0:5b:a3:0e:4c:74:4a:f7:f7:f7:c8:28:00:0d:
56:39:25:45:e2:9e:bf:f6:37:c9:6c:3a:57:58:b6:8e:c7:5c:
5c:5c:58:4e:ce:70:06:2d:01:7d:9d:38:a4:3c:f6:34:f5:d1:
b9:81:32:11:a6:f1:7e:36:04:5c:c1:17:c6:cd:07:fa:02:4a:
a9:ad:05:9e:8b:1a:0d:4e:fa:6f:0d:94:a2:71:6c:82:b6:00:
ea:2b:fd:40:19:70:0d:47:d5:b3:28:c8:04:61:63:60:08:47:
38:a4:8d:47:b7:8d:f5:29:6e:f8:03:e7:7e:95:41:6f:19:11:
6c:bb:c0:8a:ee:41:98:16:09:ee:48:d0:2d:f6:25:fe:6f:6a:
79:df:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:53:25 2025 by rpki-client