Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa
File: Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (raw, json)
Hash identifier: M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=
Subject key identifier: 31:FF:3F:7E:BD:1E:98:CF:55:CC:A5:F1:69:20:A4:95:AD:20:A5:EF
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 019425215C4E015CD4FC6E1321C0477A87A5
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1724
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5c:4e:01:5c:d4:fc:6e:13:21:c0:47:7a:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31ff3f7ebd1e98cf55cca5f16920a495ad20a5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:5d:cd:50:62:2d:53:99:65:9e:6c:cf:97:
9a:48:bb:24:d7:0e:5b:97:55:f9:6a:b6:9b:7b:38:
5e:63:1f:af:dc:38:5f:b1:91:0c:b2:f0:26:6d:86:
9f:d0:f4:fd:4c:dc:60:09:1a:fb:44:55:2e:7c:ff:
08:d5:54:08:19:ca:f0:15:d2:00:c6:48:82:8a:f2:
27:9d:5c:c6:a2:aa:d3:bc:9a:64:ef:e7:d7:e0:a8:
ed:d7:7b:65:77:ba:73:fd:bb:0d:c3:a1:eb:10:59:
c1:d1:f3:0f:11:c6:9a:d4:0f:81:dd:b4:ee:3b:16:
ab:12:60:b7:45:b7:de:5c:96:e2:c0:cf:c6:fe:31:
07:cc:49:4d:23:6c:02:1b:ae:0e:d6:7b:db:66:67:
67:59:03:82:84:dc:04:cf:ec:e4:13:18:ba:56:65:
7f:a7:a1:86:46:1f:a9:9b:59:7f:45:17:f0:ee:80:
05:7c:a1:3f:57:e1:50:2a:8c:8c:45:33:20:bf:14:
be:4c:b4:ec:f0:70:6c:5a:f1:02:96:1f:c6:b9:fd:
9c:f3:ef:dc:ea:ea:7b:b0:40:71:e9:38:6a:9d:ea:
e9:9c:33:cb:f9:8f:1d:28:70:87:1c:a5:24:63:48:
73:02:20:0e:c8:a2:81:6e:3d:a9:17:54:13:34:ea:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FF:3F:7E:BD:1E:98:CF:55:CC:A5:F1:69:20:A4:95:AD:20:A5:EF
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Mf8_fr0emM9VzKXxaSCkla0gpe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:89:e9:a7:b0:49:c1:4f:57:6d:cf:a8:be:cc:57:b1:2e:65:
f6:9d:b6:6d:27:60:6d:b4:d9:bf:f9:30:73:56:a9:c1:bf:c0:
f5:82:65:5b:05:5c:de:03:b7:69:03:a2:0a:de:79:35:0d:85:
b5:10:3f:05:e3:e7:96:6c:ce:7a:9e:0b:99:e8:8c:b5:27:cb:
1e:68:fb:a1:1d:9a:07:f3:a8:16:55:50:e8:22:ff:e4:bb:6d:
59:72:40:b2:9b:c5:3a:01:0a:88:de:5e:ce:b0:4a:13:39:bb:
f2:77:8f:18:aa:f6:98:41:f2:78:a1:93:51:c1:0e:59:e9:13:
8b:cd:83:11:23:08:93:e8:5a:a8:2f:ab:73:18:8f:7c:88:e0:
25:91:1a:a9:1f:dc:66:a3:fc:25:38:83:27:92:af:23:07:7e:
0b:ce:b4:c1:b0:c9:86:ef:81:00:62:30:d8:94:cf:bf:03:8f:
69:09:1a:c0:51:13:0c:3b:29:83:77:df:3f:c2:57:5d:be:9d:
58:35:0b:2f:b5:51:3e:dd:e7:5f:8c:c1:05:59:3e:31:97:8f:
7c:f4:36:88:f5:38:55:5a:cc:82:03:cf:57:96:65:f2:cb:ed:
86:d6:b3:af:87:fd:5e:05:27:a0:bd:b3:85:a0:bc:95:5d:18:
6e:db:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:53 2025 by rpki-client