Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mw0de6Xv2RzpyGlyY7DWmNuIerM.roa
File: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (raw, json)
Hash identifier: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=
Subject key identifier: 9B:0D:1D:7B:A5:EF:D9:1C:E9:C8:69:72:63:B0:D6:98:DB:88:7A:B3
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3A5DAEF45B8E112AED1E7B608E74
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mw0de6Xv2RzpyGlyY7DWmNuIerM.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51144
IP address blocks: 2a13:1c47:ffe0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3a:5d:ae:f4:5b:8e:11:2a:ed:1e:7b:60:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b0d1d7ba5efd91ce9c8697263b0d698db887ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a0:7c:9a:bc:a3:d6:0d:a6:73:ce:a6:9c:46:
cc:27:8e:ee:3d:7c:40:01:21:aa:10:24:e4:cf:c1:
29:0f:2f:64:f8:a1:df:c8:c3:64:a2:bf:55:84:ed:
1a:bb:cb:7c:0b:c1:99:2d:10:b0:90:88:53:f2:7e:
ac:81:b3:84:1a:de:4d:f3:45:39:a5:68:37:e5:84:
6a:0c:0a:6d:2d:a8:22:7c:c4:a0:86:7a:6e:55:80:
b7:08:6d:ae:58:3c:71:62:e7:c8:b8:73:5a:b1:a4:
2b:cf:d2:42:5a:fe:0e:25:5f:75:ad:a6:8c:d8:84:
75:63:02:7a:26:1f:d7:a1:c9:72:95:1c:c1:4c:bd:
68:1e:fa:d1:84:69:87:dc:39:e5:e9:03:95:d2:c7:
fe:d9:4c:d2:fc:8d:6d:86:68:89:9f:5c:f1:b6:bb:
6f:67:86:39:ad:6a:72:13:ea:6b:6a:aa:60:52:5f:
89:1b:60:4f:03:37:9b:c3:84:ba:a9:79:f9:39:a2:
e0:f0:2e:2f:34:8f:4a:69:99:04:fc:58:ef:11:9a:
12:eb:fb:76:3f:c4:5d:4f:f0:c4:da:b0:ad:e1:d0:
26:6f:a9:0a:a4:e1:d1:96:78:22:df:c9:b8:a3:df:
16:1e:95:2f:2e:2d:6c:39:f6:b8:18:fe:29:7b:ef:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:1D:7B:A5:EF:D9:1C:E9:C8:69:72:63:B0:D6:98:DB:88:7A:B3
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/mw0de6Xv2RzpyGlyY7DWmNuIerM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
56:f4:27:15:03:36:b7:b8:8d:b3:c6:14:d2:b8:86:70:b0:8a:
67:78:f7:8b:ad:6a:c3:c3:2a:60:07:7e:9d:59:6e:ec:95:92:
9f:82:e2:9a:9d:fd:f5:39:77:2b:4c:ba:bd:c7:4a:be:44:06:
6a:2d:bd:28:a0:e5:31:41:f0:19:61:54:67:7b:75:d3:94:ef:
96:45:ed:1a:88:80:18:84:4b:43:2b:7f:60:cf:15:b6:8d:3d:
e2:6c:a5:e4:0e:c9:43:e4:d6:41:8a:e5:13:ab:98:96:23:d5:
1c:19:5d:66:d9:4e:e0:d1:f4:ae:76:57:00:b9:b2:af:8d:bc:
14:1b:b4:8c:72:96:cb:a2:a4:71:55:c0:f9:b6:d0:a1:bf:d1:
58:9f:57:f5:20:d5:5d:1b:5a:c5:a5:b6:b8:e7:cd:33:a6:2d:
0b:c9:51:27:56:8d:ce:0b:57:46:d0:d0:a2:a3:00:db:b8:78:
84:c0:39:04:5e:44:73:23:02:e2:f0:1f:f0:5b:da:2a:94:1e:
14:09:99:01:d8:22:93:ff:6c:da:ea:29:06:7f:f4:0d:a5:20:
f9:df:93:6b:c2:6e:e8:cd:6f:8a:3f:87:4e:87:e9:8b:6b:b3:
95:d9:89:60:ca:09:f2:66:e5:82:fa:77:e0:d6:ed:d7:a4:3a:
45:59:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:10 2025 by rpki-client