Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mSE5jFaDyQq229roQ5L8OUwLYf8.roa
File: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (raw, json)
Hash identifier: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=
Subject key identifier: 99:21:39:8C:56:83:C9:0A:B6:DB:DA:E8:43:92:FC:39:4C:0B:61:FF
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019421B1EDDD7927B869C3035B485414E892
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mSE5jFaDyQq229roQ5L8OUwLYf8.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12817
IP address blocks: 2001:1578:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ed:dd:79:27:b8:69:c3:03:5b:48:54:14:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9921398c5683c90ab6dbdae84392fc394c0b61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:73:fc:c8:a5:fc:a3:66:69:66:37:29:57:
76:5b:4d:03:0e:1d:f6:4b:27:2d:d6:eb:79:18:39:
74:0f:a3:4b:0d:0b:c0:ee:66:4e:48:12:3d:3e:46:
61:3a:6c:0e:b9:43:72:ec:7b:04:3e:d7:15:84:87:
3e:64:67:c3:21:d3:a4:d2:7a:f5:44:0c:49:d9:36:
4c:22:38:d8:cc:28:ae:3a:49:df:fe:d0:8a:b3:6d:
04:1b:b8:6d:59:e7:84:20:79:56:c1:1a:90:64:8b:
07:ac:a9:fe:ec:2a:d0:1a:bc:e0:ad:18:d9:dc:ba:
3b:9b:35:51:ba:e2:d8:0c:82:1f:88:d7:a5:89:6d:
42:ff:d9:6d:f0:89:d6:eb:96:90:54:8e:6d:5b:6d:
d7:94:08:05:ad:8c:c8:b3:ee:11:c7:fd:09:6b:3c:
af:c9:2c:26:85:97:17:c7:94:2e:d1:dc:51:3b:5a:
5d:ce:79:be:3c:5b:2e:c0:55:e7:6f:4f:11:fe:6a:
5a:a2:cf:a4:60:0d:a5:92:72:b6:17:d8:6e:7f:f2:
b9:9d:a6:46:c1:8b:72:74:5c:6b:98:9c:4f:7a:c6:
ea:50:8d:5a:78:a1:c9:79:c3:45:17:d8:d4:bb:9d:
b3:49:95:63:5e:03:e5:cb:47:19:8a:3f:f1:f1:74:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:21:39:8C:56:83:C9:0A:B6:DB:DA:E8:43:92:FC:39:4C:0B:61:FF
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mSE5jFaDyQq229roQ5L8OUwLYf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1578:200::/40
Signature Algorithm: sha256WithRSAEncryption
0f:aa:c7:99:d6:95:a8:27:e8:e2:0c:77:fb:59:40:d3:63:97:
64:11:7e:51:07:e8:63:17:b7:ae:bc:0d:aa:56:f0:51:78:db:
72:0f:2c:cf:d2:42:34:59:72:44:04:d8:1a:a2:75:6b:49:47:
2f:64:d4:4b:1d:db:d1:15:ce:9a:ea:6d:bf:84:9e:19:aa:e6:
6f:e1:30:dc:63:a1:46:1e:70:e0:d5:86:16:db:5d:ee:a1:c0:
dc:ab:24:dd:0b:4a:3c:a5:a5:a9:cf:e0:97:34:1b:5f:38:fb:
93:00:b3:ee:a4:b4:fe:aa:8a:7e:d5:79:8c:e1:f3:d8:63:56:
0c:bc:1b:c6:0a:a3:9c:72:16:ea:dc:ef:7a:3b:63:60:0a:85:
df:7b:81:34:37:9c:7d:a9:6a:4a:73:eb:81:4c:17:2d:d2:e0:
16:7a:01:04:80:ac:c2:09:77:e4:23:56:99:ee:d7:55:11:44:
74:0a:be:91:83:07:e4:84:14:8a:5e:a5:9f:3a:4f:c3:98:21:
3c:2b:c2:4f:94:1c:37:d4:8e:d4:97:5b:d4:62:22:1f:9f:98:
4d:a2:f0:80:fe:97:e1:dd:b9:4e:00:b0:27:d4:92:7e:14:c9:
4d:ca:4f:26:4a:ea:c4:37:a7:42:95:bc:3f:4f:f4:3f:8e:68:
4c:a0:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:32 2025 by rpki-client