Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/M7qCgoSPH7j_UlXj4wtCLgY2-zs.roa
File: M7qCgoSPH7j_UlXj4wtCLgY2-zs.roa (raw, json)
Hash identifier: 2v7kuoDrSLyOohwbRo40Ftf5wt7pUJT9yboky9E7jaI=
Subject key identifier: 33:BA:82:82:84:8F:1F:B8:FF:52:55:E3:E3:0B:42:2E:06:36:FB:3B
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0194228D9577809F9E9737D6CFCF788E34CE
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/M7qCgoSPH7j_UlXj4wtCLgY2-zs.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202204
IP address blocks: 2a00:ea0::/29 maxlen: 48
2a09:5c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:95:77:80:9f:9e:97:37:d6:cf:cf:78:8e:34:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ba8282848f1fb8ff5255e3e30b422e0636fb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:1b:46:6b:21:21:6b:6f:5c:18:6e:f6:51:
4d:f3:5c:db:51:e1:a3:ac:d5:21:fe:49:4c:41:f6:
d9:72:22:7c:84:fb:98:dd:6d:b3:4f:9f:b5:db:6c:
9a:b5:d7:f0:4b:9c:00:42:b5:63:a2:c9:5a:4c:79:
b5:e0:0a:1d:b4:0d:1d:71:8e:95:60:21:64:35:4d:
b7:bc:40:9b:bb:f7:b9:df:ac:dd:41:55:2c:5c:8c:
da:58:3b:a8:9f:ed:44:05:1d:0f:15:0a:0d:b7:a0:
ca:3b:d1:61:d8:b4:66:23:5c:16:24:9c:e1:ec:d7:
7b:1f:28:5f:23:61:3a:b8:c1:cb:9f:97:6d:76:69:
57:68:0c:3d:ea:36:43:a3:02:7e:35:49:d1:35:ee:
bf:c7:80:8f:84:c7:15:eb:d9:09:69:da:c3:0a:9e:
58:17:1f:a9:fa:84:6a:6a:50:f6:2b:32:fa:f8:a3:
d8:1a:e3:27:95:38:cc:00:3f:a5:46:dc:a2:11:be:
1c:cc:3c:be:83:4c:52:2b:f1:10:fa:5a:3f:8f:d9:
c8:4b:2f:ef:3c:c1:e8:4a:cd:9e:cb:d9:55:0d:5a:
81:6a:21:f1:53:7c:f0:3a:64:ce:e1:13:e3:7a:23:
24:1c:da:29:d2:91:4a:57:82:c2:2e:aa:bf:5d:66:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:82:82:84:8F:1F:B8:FF:52:55:E3:E3:0B:42:2E:06:36:FB:3B
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/M7qCgoSPH7j_UlXj4wtCLgY2-zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ea0::/29
2a09:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
66:51:60:94:e7:27:39:8b:f8:2b:f7:2b:fb:76:c9:8d:95:5f:
9b:c1:a9:f7:91:36:a1:a3:4b:9c:8d:81:5e:cc:3e:86:68:2a:
af:af:e2:7c:4d:4d:75:7c:ff:b1:fd:1b:b7:b3:bd:4e:cd:31:
b5:7c:2f:bb:41:79:9d:c1:f9:22:76:8b:8a:23:5a:f8:1e:1d:
65:b9:68:b5:6e:4c:6b:aa:34:05:af:26:f1:d2:10:b7:b4:95:
df:d4:93:21:df:a3:e5:54:f0:b9:1a:b2:e6:76:04:2d:75:2b:
da:6a:79:dd:a4:95:60:ca:35:ca:98:3a:f9:d8:70:b4:58:f0:
e5:89:ac:ea:6b:29:c7:57:5c:10:a1:e4:ca:9f:da:74:1c:55:
8c:9c:e6:c8:7c:b7:6c:b2:5a:f3:71:a6:8c:9c:af:78:07:8c:
d4:9b:5d:58:44:73:e6:f6:d2:a4:43:ba:b5:2c:ea:43:1a:35:
3f:85:9a:5c:b3:bf:a3:8e:e5:31:62:ff:f3:e6:8c:9d:fc:c9:
57:b7:ab:b3:dc:76:01:d0:38:e6:89:80:2d:a2:f7:80:f7:95:
50:2c:c3:9a:a2:81:67:07:6e:3f:73:b3:5c:94:e9:2c:2c:18:
bf:28:fc:c4:0a:96:53:17:45:46:13:c4:f0:89:fe:8b:b1:e0:
7d:01:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:28 2025 by rpki-client on console.sobornost.net