Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/MQiGNWbAlQR27bMbQEHKZB--EhI.roa
File: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (raw, json)
Hash identifier: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=
Subject key identifier: 31:08:86:35:66:C0:95:04:76:ED:B3:1B:40:41:CA:64:1F:BE:12:12
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 0194266BAB49DF4E1EAE150A6F544050F1E6
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/MQiGNWbAlQR27bMbQEHKZB--EhI.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209347
IP address blocks: 2a0a:4587:2030::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ab:49:df:4e:1e:ae:15:0a:6f:54:40:50:f1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3108863566c0950476edb31b4041ca641fbe1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:5b:fb:97:3b:e4:5c:12:dd:53:82:13:23:
85:9c:fd:e3:12:7c:eb:c4:7a:ce:d6:41:a6:42:77:
15:bc:3a:76:2b:c1:07:c2:5f:18:4e:79:6c:02:23:
84:20:a7:c4:0b:bd:90:82:56:12:fa:fc:06:d6:f0:
4c:fc:e8:d7:02:34:29:b0:1b:fc:8f:f9:33:d6:53:
63:7f:af:48:93:28:60:73:1e:5e:5d:16:bc:3f:21:
1c:aa:0f:e1:c0:ec:e6:5b:81:2d:0f:30:e5:92:11:
5c:28:e9:f8:84:c4:3e:55:b9:1a:9b:04:d3:ff:6e:
3e:4e:2c:b4:85:1e:ed:d6:5e:16:09:06:a5:58:1e:
1d:05:3a:fb:cb:09:36:95:a5:7f:81:86:49:45:ae:
92:b9:53:08:ef:70:3e:37:ed:11:3c:89:e6:e3:d5:
25:a0:61:ea:ba:c7:bb:60:7e:a0:52:b0:be:65:19:
48:63:0b:bd:e8:d9:4c:56:4b:e7:d1:66:d5:b8:29:
84:56:90:b6:5f:ba:d2:44:4c:63:67:83:e8:b5:eb:
c8:18:7f:56:97:8e:6a:4c:46:b4:f5:97:b4:a0:c8:
d3:0c:6c:82:d7:fa:4b:4e:ac:3f:cd:28:39:56:74:
5a:0a:ec:0f:5b:a1:ff:70:e9:32:eb:a7:6f:f0:d8:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:86:35:66:C0:95:04:76:ED:B3:1B:40:41:CA:64:1F:BE:12:12
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/MQiGNWbAlQR27bMbQEHKZB--EhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4587:2030::/46
Signature Algorithm: sha256WithRSAEncryption
05:e4:b5:5e:6f:b9:87:cd:06:70:d4:df:de:8e:9a:30:fa:10:
8c:68:6b:c5:0a:6c:e6:55:74:c9:c3:e3:3c:70:8b:1f:df:8d:
cb:cb:46:b9:60:8b:ee:b2:55:a0:be:e7:de:a9:09:53:fb:89:
29:d8:0c:56:6c:dd:08:73:a7:c4:25:f9:07:71:a8:55:f2:6d:
9c:28:13:2c:73:ae:41:ec:bc:e3:6c:75:bb:87:30:a1:4b:fc:
83:ad:76:64:ad:a7:ad:56:b8:99:62:23:fa:6f:3a:37:e8:61:
fc:2f:9e:6e:69:d0:1d:c4:94:b2:11:4b:87:3f:4d:fd:38:b6:
c0:6f:67:29:ef:91:e8:f7:5d:e9:61:f2:4c:35:65:19:92:cf:
08:f1:4b:bb:b8:8b:78:db:30:63:61:dc:48:26:97:2e:68:4c:
55:94:53:bb:1f:4c:92:32:28:c4:7c:b5:11:0c:61:8b:4d:6d:
a4:20:d9:78:5b:f4:ce:62:cf:81:c0:ed:9f:37:7a:8e:65:7a:
7b:73:f9:a1:5d:df:b7:21:8a:7d:4e:4e:66:85:cd:e6:83:57:
53:b1:34:fb:c7:1a:87:f6:2b:19:48:16:99:2d:fc:5f:e8:ec:
b0:7b:4a:02:c2:a7:fd:9b:1b:01:a7:85:66:50:11:21:2f:13:
92:45:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:28 2025 by rpki-client