Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa
File: Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa (raw, json)
Hash identifier: PmmY7x5LyJJDD6LlXlPdfzSLFcMHWHakThUWPxHgQkY=
Subject key identifier: 32:0F:2E:05:03:DE:7F:72:F2:26:32:A0:67:13:2D:E1:83:5C:3B:F1
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 0194266BA38B825380BE0F9669D733464CAE
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16189
IP address blocks: 2001:67c:e20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:8b:82:53:80:be:0f:96:69:d7:33:46:4c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320f2e0503de7f72f22632a067132de1835c3bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:b5:3d:9c:42:2d:8b:e4:87:ab:c9:9a:7d:
86:f6:06:5f:f9:8c:d0:fb:7b:3b:04:24:39:6a:04:
69:b3:91:33:03:05:af:c3:a4:c3:99:94:3d:86:c5:
6b:1a:be:e4:f4:ef:f9:7a:de:91:f3:30:df:4b:d1:
68:59:cb:ac:83:03:18:27:50:b4:31:73:89:bc:82:
cd:9e:da:20:20:a0:ef:a6:ca:21:34:1a:43:44:d9:
14:eb:e6:33:6a:7e:cf:82:aa:d8:d6:c7:77:32:1c:
b0:45:31:08:0d:ff:6d:37:32:49:e3:f4:90:ec:ca:
4c:ab:43:b2:9a:39:fd:bc:52:2b:b5:c0:66:2e:a8:
0f:23:a8:59:bf:3b:03:a4:c4:2d:b0:40:a0:be:13:
ce:7e:34:65:46:52:7f:d9:ae:a2:87:fa:18:2a:2e:
9b:fd:e7:0a:d2:f7:de:ba:15:2f:ae:e1:38:32:9d:
68:f1:44:ff:51:38:41:31:5e:f2:99:0c:ef:f4:3b:
8d:16:08:b6:7f:f3:1b:4a:97:39:e4:a9:fc:8f:2e:
0d:46:d6:d1:95:9c:b8:19:e9:e7:e6:3f:61:a5:ec:
62:a9:72:61:32:0e:b1:e2:59:e4:29:76:0d:fd:01:
c7:3c:ea:6a:8b:d2:ea:58:b5:79:e8:58:c3:be:c4:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:2E:05:03:DE:7F:72:F2:26:32:A0:67:13:2D:E1:83:5C:3B:F1
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/Mg8uBQPef3LyJjKgZxMt4YNcO_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e20::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c6:47:6e:d0:5d:b2:65:6a:79:a0:a2:13:98:e7:8b:03:10:
c7:de:f6:24:75:70:ef:6a:15:24:2a:8b:b6:3e:ce:64:bf:21:
f7:4a:89:d7:31:8e:74:40:3a:a8:c4:b9:30:64:cb:fd:cf:71:
6b:19:8a:21:c9:52:35:7f:15:37:2b:93:3a:5b:84:53:82:f2:
a1:74:e2:68:5a:22:b8:d0:2d:f7:6c:71:14:02:e4:a2:70:d0:
6c:a7:2b:f3:1a:a4:c6:bc:42:58:2f:b6:82:3d:b1:e5:62:86:
f1:7b:96:05:00:d6:13:ee:e6:11:b6:54:e5:33:ab:de:53:62:
73:30:ba:91:4e:15:ee:32:92:5d:23:54:10:62:e8:e1:17:82:
4c:b9:3f:71:38:cf:3f:b0:86:83:f5:54:0d:87:98:1b:f9:14:
92:ad:17:4a:22:1f:9b:7f:43:b5:d5:da:43:ed:7e:a1:8e:c9:
fb:43:87:05:dc:8e:78:d3:1c:88:ff:a4:92:9c:ab:2a:67:d3:
d5:d4:18:63:be:48:d4:fe:2d:c1:fb:f2:5e:f4:75:32:9a:66:
c5:c0:1f:58:8e:be:2f:a5:3d:88:e0:f0:4a:09:f8:db:01:7b:
15:e3:68:bc:6b:ea:71:7f:12:77:6e:d5:bf:d9:79:81:32:fa:
39:f6:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net