Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/RMehgMoMUaU7NElWagbFCdTmBzQ.roa
File: RMehgMoMUaU7NElWagbFCdTmBzQ.roa (raw, json)
Hash identifier: 2T8dZe/lL3H8CDtwphCOqaP5yORGErKsknt+toyLAVA=
Subject key identifier: 44:C7:A1:80:CA:0C:51:A5:3B:34:49:56:6A:06:C5:09:D4:E6:07:34
Certificate issuer: /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial: 018CC3B6785D1A8DDDDEC52D588D5E0CD7A4
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/RMehgMoMUaU7NElWagbFCdTmBzQ.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:4a80:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:78:5d:1a:8d:dd:de:c5:2d:58:8d:5e:0c:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44c7a180ca0c51a53b3449566a06c509d4e60734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:29:d3:e6:e0:f6:a0:ce:44:a7:3d:eb:c4:
7f:fc:f1:0a:ea:d7:58:ad:e8:c0:4f:16:16:0a:cb:
e0:11:4c:4f:84:55:93:e4:ae:aa:89:a8:db:eb:4b:
4a:42:79:90:c2:50:78:fd:81:92:ac:08:b3:31:70:
ab:89:61:cc:e2:0c:1f:30:8c:0e:5b:9a:64:34:71:
f5:ae:d3:9e:77:35:a4:13:01:46:f0:99:3e:e2:74:
ff:b1:ff:c9:f6:9c:36:a8:af:f3:94:01:3f:49:3f:
5a:f9:3f:fe:8a:fb:ab:5f:f0:a3:38:d1:1c:49:3c:
ed:82:3f:17:ae:57:16:3c:03:43:04:cc:39:d3:17:
67:62:82:2c:fa:3c:83:da:15:22:21:cd:72:25:75:
17:30:9c:b4:7d:12:47:cc:5d:aa:f3:b1:1c:45:95:
4e:28:33:10:1e:81:01:d0:a9:52:33:54:76:7c:8f:
2f:b8:23:10:2f:92:c1:74:0d:e5:b3:55:d0:84:e2:
4d:69:b8:e9:68:c2:9c:52:80:a3:d3:df:31:f2:c0:
fd:50:f8:1a:cb:7c:4a:ea:4f:24:a5:62:b9:7a:5f:
3c:d8:a7:c0:f5:eb:e7:1e:f9:79:5c:fa:a2:d7:d2:
68:ae:23:cf:b3:4f:f0:24:a3:e8:9f:80:d2:32:ba:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:A1:80:CA:0C:51:A5:3B:34:49:56:6A:06:C5:09:D4:E6:07:34
X509v3 Authority Key Identifier:
keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/RMehgMoMUaU7NElWagbFCdTmBzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4a80:7::/48
Signature Algorithm: sha256WithRSAEncryption
2f:56:91:89:4f:23:ee:bb:99:7b:fc:79:98:95:c3:cf:a0:62:
2d:05:11:16:19:07:4c:3c:0e:22:22:db:f4:81:18:4a:22:be:
53:91:8f:b4:6b:79:67:43:af:d6:ad:89:33:d5:33:57:90:e7:
ed:93:2a:e0:72:6c:8d:60:9e:00:1b:a8:f2:01:de:dc:27:48:
e6:00:44:df:85:d1:55:3b:39:69:df:19:d4:65:75:d6:2d:81:
56:36:7a:35:74:f6:c2:5b:17:15:c2:31:fd:4d:a5:e2:f9:d4:
a1:3a:a5:21:d3:fa:88:ae:df:b6:78:0c:63:8c:cc:0c:34:1f:
64:87:5c:87:12:4e:cf:42:cc:df:4c:3f:09:de:bb:de:4e:ff:
29:1b:37:68:eb:79:b8:0f:b4:90:9b:3d:20:c7:72:9a:53:90:
0a:e6:7f:77:cd:da:c8:b2:cf:63:ec:f3:a2:39:33:21:ce:4b:
6a:aa:10:25:46:36:6e:88:1f:be:6c:ba:e5:84:ac:1d:42:57:
bf:53:b7:6d:56:f4:87:6a:60:59:84:14:e3:52:fc:b4:b3:cd:
08:e8:be:f5:fa:fd:bd:53:3a:ec:d5:c4:08:f6:30:ac:47:6f:
97:19:2c:f9:3b:95:92:ff:94:75:4f:74:84:d7:51:44:51:0c:
4f:8a:98:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 08:06:01 2024 by rpki-client on console.sobornost.net