Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa
File: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (raw, json)
Hash identifier: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=
Subject key identifier: 32:9D:5F:19:D8:03:9F:73:C9:29:0C:E6:5F:43:97:68:AC:33:B7:0F
Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial: 0194236A4760B1F56F8F3C756E7BF93AEDB6
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 2.59.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:60:b1:f5:6f:8f:3c:75:6e:7b:f9:3a:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329d5f19d8039f73c9290ce65f439768ac33b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:ae:31:eb:2e:84:d3:59:2d:dd:f5:9e:aa:
fa:d5:af:93:4f:33:a3:2f:64:5f:1a:5f:91:55:53:
95:1d:79:af:c1:bb:ce:ff:0d:6a:e3:23:62:2c:0b:
35:fc:37:26:10:22:99:64:4b:20:c1:b0:60:c0:67:
a6:64:b3:37:a1:a3:77:11:27:03:d5:b8:89:e3:ae:
07:12:68:ae:03:2f:4a:d7:4e:ca:5e:fa:1f:84:0f:
54:ff:42:1c:a9:98:17:78:fa:6c:e1:d0:c3:7b:af:
2d:67:70:75:65:d1:04:93:a8:62:33:94:1f:97:e5:
64:7a:ff:7a:1d:d5:96:5e:b9:7a:08:aa:dc:8a:33:
e6:61:a1:cc:d6:7a:9c:0a:43:1d:e2:1b:6b:48:52:
4f:a9:15:db:c7:9c:7d:d4:b9:d9:dd:20:19:ed:47:
6f:46:66:7e:ab:e2:86:30:2d:57:15:ab:25:4c:3a:
e0:5d:d7:60:4d:7e:50:7e:cc:8c:aa:50:db:ad:4f:
f7:25:42:2f:84:9d:7d:65:41:72:b1:0b:74:9f:0c:
7e:ad:82:87:9e:b4:f6:6c:f9:b2:49:0f:ee:28:68:
6a:7a:82:09:9f:80:a6:40:56:37:9f:78:38:07:3b:
9a:58:b3:25:e3:29:12:c0:2f:90:d2:cc:f0:dc:57:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:5F:19:D8:03:9F:73:C9:29:0C:E6:5F:43:97:68:AC:33:B7:0F
X509v3 Authority Key Identifier:
keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
68:a8:32:b8:0e:4d:26:92:de:21:d6:b6:3e:83:dc:52:28:94:
09:d3:99:49:f3:7b:d5:a1:85:a5:e3:b9:ac:04:e6:78:72:0b:
8b:2d:4d:ce:49:40:38:04:43:55:46:9a:a4:30:0f:25:fa:9b:
7b:b3:29:e1:74:df:83:28:c7:88:a0:0d:d8:30:57:4b:83:dd:
2b:d4:4a:88:66:9e:1a:b5:0e:3e:90:84:cd:cb:5b:ed:09:3e:
49:ab:70:5d:9e:12:74:0d:d5:0a:36:3a:19:19:eb:71:d4:64:
bf:36:42:64:88:ec:8c:77:cc:68:fa:46:31:cd:32:ad:96:a4:
36:49:aa:67:7d:3b:96:7f:03:95:42:5e:03:96:9f:3c:36:29:
b0:d5:e1:08:23:c9:94:1b:59:11:4e:d3:32:40:82:08:7e:be:
a5:68:ca:38:f6:b5:8b:9e:09:00:b8:6b:5c:46:e7:6e:27:d8:
c9:6d:6d:e4:96:bf:9c:fb:38:d5:17:58:77:df:a9:9f:5f:27:
8d:00:65:5c:75:46:9c:a0:b0:13:e0:e3:53:1a:6c:3e:38:f9:
4b:c1:19:63:16:85:ec:8d:ea:68:94:34:ce:9b:4c:0f:6b:8c:
d4:a0:01:44:0e:35:bd:62:42:ee:60:78:e6:ca:b8:b9:ea:1e:
d2:9f:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:15 2025 by rpki-client