Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/movPWb1NWT7RBf22mFzV6ki-niw.roa
File: movPWb1NWT7RBf22mFzV6ki-niw.roa (raw, json)
Hash identifier: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=
Subject key identifier: 9A:8B:CF:59:BD:4D:59:3E:D1:05:FD:B6:98:5C:D5:EA:48:BE:9E:2C
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 019424B3D9671E79217D145C32536DB2F3EE
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/movPWb1NWT7RBf22mFzV6ki-niw.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207491
IP address blocks: 2001:678:c08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d9:67:1e:79:21:7d:14:5c:32:53:6d:b2:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8bcf59bd4d593ed105fdb6985cd5ea48be9e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:1a:9c:5f:ea:fc:fa:9a:e8:42:02:d0:0f:
65:e4:0e:93:2b:a1:75:93:69:71:3c:1e:83:ec:54:
6e:97:02:6f:93:59:de:f9:3b:cf:85:bd:57:50:7a:
e4:7a:a3:04:3b:c2:49:1b:8d:e8:49:b0:92:81:48:
c0:25:82:94:1f:c3:37:4d:77:bd:36:f4:73:7f:9f:
53:8c:d7:31:33:93:f2:c4:cb:db:58:cd:fb:84:a4:
99:96:c7:55:a6:0c:c1:d6:b9:bd:71:dd:1e:80:34:
54:6c:88:de:74:f5:3a:23:b3:da:45:ca:2f:0a:19:
0f:2b:d3:d7:9c:27:ff:12:93:77:37:19:29:3b:c0:
18:be:6c:06:f1:7b:15:77:4a:2c:b1:87:94:6d:b0:
fa:24:3a:e0:b1:57:90:5f:b5:63:1e:2f:46:14:f3:
48:fd:3f:5c:a6:49:98:df:d8:bd:05:04:5c:48:63:
35:d6:36:67:e7:e4:9a:cd:9e:35:b0:26:fc:99:39:
4d:98:e3:fb:3e:c7:ca:95:64:aa:56:e5:7f:6e:8a:
52:49:17:9e:11:6f:cb:a9:eb:64:34:85:be:57:51:
4f:db:9f:1e:c7:db:a2:b1:00:f8:8d:6a:59:e3:a6:
96:71:d9:89:06:71:22:e9:81:4b:9a:e3:8f:25:b0:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:CF:59:BD:4D:59:3E:D1:05:FD:B6:98:5C:D5:EA:48:BE:9E:2C
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/movPWb1NWT7RBf22mFzV6ki-niw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c08::/48
Signature Algorithm: sha256WithRSAEncryption
2c:70:f8:77:06:36:e0:62:fe:09:7a:08:15:c8:eb:83:27:0a:
ab:71:e7:e1:d0:1a:3d:d6:46:06:17:c7:72:74:02:0d:63:72:
a5:40:fe:41:de:76:a2:59:a4:6f:85:15:81:6e:69:00:5f:c7:
76:5f:17:80:90:e2:31:7c:2b:b8:13:c2:43:73:1e:70:dc:9e:
ef:77:dd:dd:59:6b:10:dd:88:5a:e1:e1:22:02:da:1a:33:7c:
39:da:b2:7c:8f:32:a5:9a:6f:71:f6:52:29:e1:da:06:23:ee:
90:68:9d:00:a0:ca:f1:de:b3:ce:34:c5:61:db:8f:14:ea:e5:
76:63:2c:17:52:48:f9:58:87:f6:32:61:b9:17:9d:ad:59:a6:
a8:5c:e1:b2:16:87:de:64:ca:18:8e:fb:00:c7:ed:fe:08:2f:
b9:62:0c:94:76:22:0d:ba:39:fb:b5:38:06:5c:ea:17:bd:21:
be:f8:10:26:e6:57:34:7e:c7:31:b7:62:09:1a:17:a3:eb:76:
aa:b2:31:4d:21:8c:ab:a9:02:07:8e:a2:62:82:11:2a:0a:58:
fb:6c:03:51:a7:33:16:f7:5b:49:e9:90:e7:3a:f3:5b:05:e4:
63:15:73:c8:fd:83:0d:27:44:ce:5d:fe:22:22:e6:1a:a7:96:
00:22:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:56:59 2025 by rpki-client