Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa
File: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (raw, json)
Hash identifier: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=
Subject key identifier: 98:96:51:44:56:B7:4F:16:E3:05:CC:B9:4E:78:5A:4C:43:3F:5A:59
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DA98CC294548468E038A8DC1D154
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44817
IP address blocks: 2a0a:280:3300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:da:98:cc:29:45:48:46:8e:03:8a:8d:c1:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9896514456b74f16e305ccb94e785a4c433f5a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:81:70:81:5b:4c:08:95:fa:b9:22:76:36:
98:8b:a5:f7:5a:2a:43:47:57:f1:b7:8e:0c:f0:92:
3a:ce:f5:a4:13:b9:a2:ba:d7:25:f3:c7:c0:52:2a:
d8:bd:28:4e:f1:2c:6e:92:07:fd:3f:53:c5:8d:5a:
dc:93:5e:72:d4:90:5a:27:85:97:32:56:4f:0d:8b:
33:57:bc:83:a8:d3:c0:f5:d8:92:29:36:fa:61:99:
d0:70:e7:9a:c5:75:2c:0d:08:c8:44:54:c3:69:44:
2c:0b:09:b8:93:61:cf:45:bc:76:e8:40:dc:20:4d:
66:55:2f:c1:28:c9:d8:67:ac:e3:53:7b:d2:94:5d:
c5:d4:cc:de:a0:49:90:bf:ce:f2:2e:9f:ae:8d:4b:
6a:9f:c5:eb:f3:e3:2a:ba:03:ac:ae:29:37:5c:bf:
9e:b2:02:ba:db:3b:0f:c3:42:42:10:aa:24:13:53:
ce:95:15:85:c7:59:87:b0:6c:66:77:e4:e8:2e:d1:
02:e7:93:78:f9:f6:3a:09:4d:59:aa:74:32:aa:53:
02:ff:fd:53:ee:24:b6:d5:41:3a:0c:00:52:ee:a2:
60:e4:95:b0:70:e6:15:de:80:be:74:35:3b:6e:40:
a9:2e:7d:49:e1:e8:3d:b7:d9:0e:75:60:75:5c:7f:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:51:44:56:B7:4F:16:E3:05:CC:B9:4E:78:5A:4C:43:3F:5A:59
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3300::/40
Signature Algorithm: sha256WithRSAEncryption
39:a9:46:e6:3a:9d:b5:84:3b:e7:1a:b7:15:20:5b:a0:f2:f7:
ba:83:98:c7:23:75:29:2f:87:7a:13:ef:bb:1f:45:62:bb:9a:
80:f4:2a:4a:40:09:07:ac:88:2a:a5:98:2c:98:bc:36:49:c4:
c2:bb:be:71:2a:22:39:5d:dd:3e:dc:05:02:00:a9:ec:f2:0e:
18:a8:fa:15:3d:32:cf:b6:e6:18:dc:ab:72:c0:2c:ed:2b:f5:
57:87:e0:96:71:65:61:05:b8:22:11:c9:3f:84:1f:c2:34:99:
37:26:d8:cd:13:c6:cb:3d:f4:e5:38:30:73:28:de:7e:18:10:
81:37:5b:73:87:87:61:a6:9c:a0:b4:ff:a3:05:ac:33:48:d4:
d3:20:2c:fb:4d:89:dc:19:43:87:b0:29:a4:d8:75:29:a6:b0:
e2:1f:f2:ab:23:bc:cb:48:48:17:d1:66:cf:ab:2b:7a:a7:29:
85:b5:8c:c2:65:fc:d6:8b:3b:72:ed:58:58:d5:e8:d7:ea:fc:
2f:4d:ff:1b:49:cd:89:1d:c6:04:6b:66:d3:76:34:27:4f:94:
ba:bf:72:d7:7e:69:a1:43:b5:0e:41:e7:f8:1e:4a:d1:24:4e:
1d:8c:e8:fb:e4:0d:fc:58:c0:b4:1f:4d:2f:6b:a0:a1:ef:51:
34:e6:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:53 2025 by rpki-client