Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/MEV1BEHxmfC6fmYfr2dO7l56mZ0.roa
File: MEV1BEHxmfC6fmYfr2dO7l56mZ0.roa (raw, json)
Hash identifier: zksmnMyXxRu/COTPSDuJIWDSUgE9uagGMpmCK7NQ0yE=
Subject key identifier: 30:45:75:04:41:F1:99:F0:BA:7E:66:1F:AF:67:4E:EE:5E:7A:99:9D
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018E859DF44A16E31710E8E5C8106906C6B1
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/MEV1BEHxmfC6fmYfr2dO7l56mZ0.roa
Signing time: Thu 28 Mar 2024 15:11:45 +0000
ROA not before: Thu 28 Mar 2024 15:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a12:9505::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:9d:f4:4a:16:e3:17:10:e8:e5:c8:10:69:06:c6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Mar 28 15:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3045750441f199f0ba7e661faf674eee5e7a999d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:7b:cb:9a:13:19:89:ff:33:38:3b:35:4d:
61:66:4a:7e:59:af:79:3c:1c:12:7b:be:a2:48:b9:
9b:d8:13:85:66:68:a3:2f:7a:bb:6a:d2:fa:98:98:
a2:7b:22:96:2a:72:90:cc:c1:2f:6a:32:90:35:ff:
17:40:61:be:51:6f:35:b1:65:13:21:a3:c8:e0:e6:
e1:b7:d0:bb:ec:d8:c9:39:ba:8e:af:be:42:c1:97:
f2:f8:fa:35:92:9b:8e:c7:8a:90:09:78:9c:00:ce:
93:f1:f3:58:db:3c:f4:a1:cb:2b:c7:f7:06:18:02:
a7:ed:8e:35:bd:80:ce:b3:3e:1b:65:5d:dd:3f:fd:
f1:89:cc:b9:e7:8e:41:5b:da:b4:0c:f9:39:aa:8b:
58:bc:dd:35:5d:27:3c:55:58:3b:1d:0e:70:57:6b:
75:dc:d8:f1:1c:98:ce:ab:3c:46:0b:e3:fe:3a:72:
67:63:78:dc:51:3a:8e:16:fc:e2:06:0a:0e:74:1e:
db:e3:e6:b9:a7:27:ea:9c:19:73:09:86:24:04:3f:
74:4a:5c:40:36:1d:4d:8c:61:06:31:74:35:f3:2e:
c4:b9:1a:35:f5:ea:7e:b3:85:23:6d:2c:30:04:5d:
02:48:7c:6d:84:78:e2:5f:63:b3:c2:4f:8f:03:ce:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:45:75:04:41:F1:99:F0:BA:7E:66:1F:AF:67:4E:EE:5E:7A:99:9D
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/MEV1BEHxmfC6fmYfr2dO7l56mZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9505::/32
Signature Algorithm: sha256WithRSAEncryption
2f:d6:74:c2:2b:8e:74:c5:37:2c:88:fd:f2:d6:15:57:84:4c:
f7:c9:b2:3b:0c:c5:03:87:d9:f7:c6:79:0a:3a:f3:4f:f6:bd:
b1:fe:53:c0:15:4e:f7:40:aa:26:ee:6c:62:f5:69:a2:92:e1:
34:af:26:96:cf:a6:bb:6e:97:0a:b1:6a:7d:93:d4:f3:77:fc:
d7:2f:3b:e8:99:6c:95:53:c1:b7:20:69:9b:18:62:2f:34:fc:
06:4c:f4:f7:d3:23:b3:8f:b9:79:4c:57:3a:fb:85:5d:0c:09:
f7:32:d3:42:16:62:e1:7b:2b:61:ed:d5:c8:f3:46:f9:03:21:
22:6c:a7:55:19:4e:f6:98:f8:e7:33:de:6d:b4:9d:aa:ed:d8:
8d:74:be:04:a7:3a:57:f0:61:f7:d2:1d:b9:f1:a1:e7:49:58:
13:80:c2:0d:08:8b:70:3e:4c:11:5f:ed:3f:c0:45:27:aa:83:
e4:cf:fd:4f:b0:b7:a9:c3:b5:b6:0a:63:20:c2:3d:03:b0:f1:
34:14:68:d6:12:85:4c:1f:94:5a:5f:44:1e:aa:8e:d1:62:a5:
10:9a:64:8f:37:82:a3:36:e7:d8:29:cf:d7:63:c8:d0:5f:f8:
37:f8:97:e4:fb:0d:04:a3:a6:3e:e6:cb:e1:23:ce:23:b4:88:
cf:73:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:41:03 2025 by rpki-client