Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mhn0KhwxRyOmGwH81hiOHy88Ajc.roa
File: mhn0KhwxRyOmGwH81hiOHy88Ajc.roa (raw, json)
Hash identifier: 42vUv8PgBeq4MnVq8Pm2LxKpwjkFPJknCZj3tceCvSA=
Subject key identifier: 9A:19:F4:2A:1C:31:47:23:A6:1B:01:FC:D6:18:8E:1F:2F:3C:02:37
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274806470D3C153450684E214F820075
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mhn0KhwxRyOmGwH81hiOHy88Ajc.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211526
IP address blocks: 2a01:5a8:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:47:0d:3c:15:34:50:68:4e:21:4f:82:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a19f42a1c314723a61b01fcd6188e1f2f3c0237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:b5:6c:45:40:94:4d:07:1b:db:55:f7:46:
31:05:b9:34:10:ce:b5:53:d6:0a:60:7a:15:f8:d3:
19:01:2b:bb:22:a4:84:e9:04:40:a3:87:f0:91:bc:
65:e2:b6:88:a9:34:b7:fd:31:c0:c2:d9:db:47:6f:
9a:37:bf:2f:b6:28:9c:f5:5a:b1:75:ce:3b:e4:59:
50:11:0d:d2:1f:67:68:41:7e:93:85:dc:bf:31:28:
3d:7e:a0:7c:6b:6a:cf:56:0f:a3:15:99:da:59:ed:
15:fa:ed:02:9a:85:4b:a4:8d:a8:79:63:85:37:50:
c7:32:2a:a8:f3:24:df:7b:c3:a3:b8:b7:80:89:ec:
64:ec:c1:bd:40:45:e7:00:53:65:f0:00:be:1b:f5:
01:84:9f:2b:03:5f:f9:94:74:75:dc:36:c6:18:1c:
31:1d:68:a6:71:77:f9:43:72:85:a0:3a:98:c9:c8:
56:1b:51:a1:51:02:8d:5a:1c:0f:33:93:2c:ab:ab:
66:20:a6:5f:6f:75:db:dd:df:3d:5f:69:d2:e7:3a:
58:58:1f:96:35:7a:c1:6a:7a:b6:93:a2:58:99:30:
55:ce:8f:95:47:39:a6:a8:11:c0:04:21:8f:e4:81:
fe:a6:45:27:77:74:3d:7b:79:e3:4d:a2:ad:4c:5a:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:F4:2A:1C:31:47:23:A6:1B:01:FC:D6:18:8E:1F:2F:3C:02:37
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mhn0KhwxRyOmGwH81hiOHy88Ajc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5a8:8::/48
Signature Algorithm: sha256WithRSAEncryption
08:fa:2c:41:24:77:dd:d7:23:c3:82:be:e1:ec:0e:6d:21:3d:
f4:30:e5:f7:53:e5:e8:bb:ec:d4:09:f0:05:c4:a5:af:ef:4b:
70:ff:5e:47:a6:2d:50:be:97:8b:51:e9:28:bb:95:c7:39:8d:
7b:ed:5f:61:f6:04:5a:d3:4a:f2:d1:33:df:af:e7:a2:31:0e:
6c:57:10:71:ba:88:5d:df:92:48:f0:e1:01:aa:59:18:19:f2:
a6:0f:28:b5:d6:03:d5:0c:d8:35:8a:e1:8d:1f:ae:b6:6b:09:
5d:ad:49:83:a5:b5:ef:76:40:69:15:59:79:26:53:ef:15:23:
14:2a:6e:75:cb:7f:d2:5e:05:57:21:b1:c9:7a:0d:8b:9f:1b:
5b:cb:ab:04:b0:33:cb:53:c3:81:bc:61:28:8d:a3:8d:6c:ed:
ba:54:42:28:9e:dc:9d:4a:cb:d1:00:2b:00:c5:e4:87:b8:96:
33:98:39:36:ff:25:27:6f:a7:63:a9:8f:dd:d4:94:79:a4:ac:
6f:92:78:1d:14:e6:51:08:ea:8e:ea:bf:fc:9d:16:3a:13:23:
9d:3e:d6:fb:a4:9e:6b:c3:39:20:76:bd:ab:d5:43:60:36:49:
a4:08:b8:40:23:62:10:cd:6f:e5:2f:b7:02:b6:5e:1c:57:13:
6a:f4:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:44 2025 by rpki-client