Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/mj4UpOOYclM_JjTHAP2KswbbaQE.roa
File: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (raw, json)
Hash identifier: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=
Subject key identifier: 9A:3E:14:A4:E3:98:72:53:3F:26:34:C7:00:FD:8A:B3:06:DB:69:01
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 01942143BD450C8075133A24684245D6EE5E
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/mj4UpOOYclM_JjTHAP2KswbbaQE.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199297
IP address blocks: 2a13:79c7:1520::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bd:45:0c:80:75:13:3a:24:68:42:45:d6:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3e14a4e39872533f2634c700fd8ab306db6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:1e:ef:03:95:ae:ee:ea:8b:de:68:d2:fc:
7f:03:72:9b:a0:f6:12:21:25:00:1c:a7:0f:9e:3b:
78:55:cf:a4:76:6a:ba:dc:76:74:82:d4:ad:db:68:
6f:82:2a:80:94:86:bc:1c:d8:81:a0:24:2f:5a:27:
f7:ca:62:12:99:58:4f:9e:19:76:ad:53:cb:4f:49:
b4:7d:7b:67:c8:55:8b:04:ef:f9:e7:4e:ac:f0:4f:
f6:3f:a4:4c:eb:fe:46:69:7b:c2:e2:0c:b6:70:eb:
5c:f0:fe:ad:ba:7a:e1:7f:0d:27:01:83:78:05:27:
68:a4:12:2a:bb:44:af:d8:9d:75:5b:45:dc:9a:c4:
0f:46:be:6f:fa:a0:98:04:12:c2:37:8e:3a:48:df:
31:59:51:c4:fe:27:33:3f:e8:84:ad:42:92:87:50:
28:1e:cf:05:d8:33:52:d4:a1:df:83:83:44:36:87:
d2:10:62:be:28:1f:61:37:83:76:7e:7d:19:fd:72:
58:ca:dd:63:78:5d:5c:47:61:57:2b:57:c2:dd:9c:
f2:52:c3:fb:fd:4b:d0:57:8d:8e:c7:a0:8b:5c:fb:
cf:12:b5:32:78:21:ab:e9:30:4c:f9:42:2c:64:62:
95:7e:53:6b:4a:bf:86:df:f4:ad:63:c8:36:5c:f8:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:14:A4:E3:98:72:53:3F:26:34:C7:00:FD:8A:B3:06:DB:69:01
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/mj4UpOOYclM_JjTHAP2KswbbaQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:79c7:1520::/48
Signature Algorithm: sha256WithRSAEncryption
b3:11:be:ee:b2:29:ac:0b:3c:c8:8d:e4:67:f9:90:67:dd:73:
35:0b:83:ac:e1:93:42:7a:51:31:d9:96:a2:2c:15:4d:5a:93:
88:ea:9a:94:28:8d:3e:f3:13:3c:04:bf:2a:38:0a:10:88:aa:
55:1a:cd:8c:40:5c:29:11:2b:5f:de:cb:1c:61:65:a6:84:24:
86:e0:f4:e3:d6:0b:0e:dc:52:8b:0f:22:c3:ee:62:34:f0:bb:
47:44:77:2a:01:bd:dd:4a:c7:7f:17:bf:81:ba:33:56:ce:88:
fc:9b:c1:7c:bc:7f:81:15:4a:f9:30:80:3a:77:6e:81:44:fb:
93:4e:ef:c7:06:76:0d:40:ed:8a:a8:52:1a:74:1b:97:d3:1b:
82:21:d1:50:73:72:11:c0:1e:84:51:b5:d6:b8:eb:7c:d7:65:
e9:d9:c0:e3:d8:62:1e:45:94:fc:f1:01:86:29:fd:d0:bc:1e:
c6:17:38:8e:e3:94:c4:2e:7f:ad:f7:af:7f:fe:23:2a:3d:21:
df:96:15:41:37:db:0c:6b:a8:3e:18:b6:ad:16:1f:4d:c3:b9:
f9:e4:e1:48:53:ab:15:db:06:dc:99:7e:1f:8b:79:a8:6f:3c:
26:da:4f:c5:5d:7f:ef:2d:c8:23:70:1c:6d:e9:71:9e:63:cc:
b3:d5:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:32:03 2025 by rpki-client