Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/bMiFWbEVmjXACwoqhdLryOI7ecM.roa
File: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (raw, json)
Hash identifier: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=
Subject key identifier: 6C:C8:85:59:B1:15:9A:35:C0:0B:0A:2A:85:D2:EB:C8:E2:3B:79:C3
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 01941F8C02110DA824EB360BEFC4C7896AB1
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/bMiFWbEVmjXACwoqhdLryOI7ecM.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198468
IP address blocks: 2001:67c:e98::/48 maxlen: 48
2001:67c:1330::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:02:11:0d:a8:24:eb:36:0b:ef:c4:c7:89:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cc88559b1159a35c00b0a2a85d2ebc8e23b79c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:ee:3b:80:b3:12:7a:9e:a7:37:d1:ae:26:
ed:65:6a:86:69:a1:c3:56:b1:de:f3:0d:f0:15:a8:
6d:02:f8:f0:9c:89:4f:6a:bd:a0:22:d1:85:20:80:
8f:06:f2:06:36:f8:29:59:2b:fc:82:a1:a7:31:59:
72:43:bc:ed:3d:14:f9:27:bc:a5:ba:f1:cf:62:a4:
39:50:5a:16:ce:5e:86:1c:87:8b:ca:af:01:fc:80:
e6:59:0b:d5:d9:5f:db:03:9f:c7:57:ca:74:3f:c8:
0e:7c:4f:3d:b4:51:34:25:81:e2:df:9c:e1:a2:29:
bd:06:aa:06:e4:90:16:6e:b5:0a:25:c5:17:5f:63:
cf:b9:75:27:60:ea:a6:92:17:76:5f:d1:ac:d2:9c:
af:46:0d:8e:55:bb:7e:d9:b6:48:74:fe:7a:69:b9:
6c:a4:06:da:7d:23:f1:ec:5c:07:63:d3:e9:b4:f5:
f7:19:05:ef:e5:45:30:98:75:1e:2f:f2:b9:d0:a4:
d7:4d:23:2f:89:bf:c0:ae:45:0b:5e:b2:38:b9:66:
dc:f3:57:50:5f:db:d5:e7:8e:ab:c5:d2:63:41:eb:
c9:b1:0b:a6:23:99:77:40:49:5e:d1:2a:8c:bb:93:
90:d8:d0:7f:90:1d:ad:e4:6f:e1:e1:48:9b:78:32:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:85:59:B1:15:9A:35:C0:0B:0A:2A:85:D2:EB:C8:E2:3B:79:C3
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/bMiFWbEVmjXACwoqhdLryOI7ecM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e98::/48
2001:67c:1330::/48
Signature Algorithm: sha256WithRSAEncryption
a5:9c:1a:fe:99:19:20:f8:b1:86:aa:31:36:ee:9f:57:cd:e6:
95:f6:f3:c0:5b:b5:cb:85:2e:48:2d:a8:c2:02:cc:32:cf:2e:
53:cf:ce:70:71:0e:95:fb:81:a7:07:7b:70:e9:52:2e:43:88:
e4:2f:d5:c3:74:23:77:21:71:2a:48:ee:7a:82:f4:2b:01:b5:
b5:80:e1:b5:8b:00:20:b1:f2:19:56:d4:29:b5:b0:40:ed:a5:
45:6f:cb:7f:07:8f:3b:ef:84:c5:dc:1d:3d:84:1a:90:45:6e:
99:2b:2b:67:f6:6d:59:b8:a6:2c:c9:7e:e1:9c:fa:76:88:84:
a6:04:ce:77:e6:6b:94:a4:f1:99:51:46:74:1e:3c:5a:c9:df:
a1:22:1d:37:19:ad:72:99:82:8e:2d:a3:c5:d8:69:02:f8:d9:
8f:72:2e:d9:40:45:f5:0e:46:93:77:1e:43:a6:46:f8:50:b5:
f8:69:b4:8d:a8:24:2c:a7:26:bd:15:b5:ec:9c:5c:ce:9f:1a:
93:be:36:45:28:3f:22:3d:69:c9:74:f1:30:be:7d:52:ba:af:
18:ca:d7:c4:ab:42:55:0d:41:30:14:c3:96:1f:4d:9b:43:e3:
35:5d:b0:fe:57:b3:5d:70:de:b7:b5:8b:34:61:96:c6:41:68:
8c:43:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net