Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MP0FknZx-rt-jXqxm1yu7mNghjg.roa
File: MP0FknZx-rt-jXqxm1yu7mNghjg.roa (raw, json)
Hash identifier: 0IVLTHz5qrQC3E0s/+3I0aF+dTWKqMK9+O5p+t6rJac=
Subject key identifier: 30:FD:05:92:76:71:FA:BB:7E:8D:7A:B1:9B:5C:AE:EE:63:60:86:38
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 0195939A2D9F58892B6B2891D8F2E45CDF8C
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MP0FknZx-rt-jXqxm1yu7mNghjg.roa
Signing time: Fri 14 Mar 2025 07:41:49 +0000
ROA not before: Fri 14 Mar 2025 07:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 212.32.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:9a:2d:9f:58:89:2b:6b:28:91:d8:f2:e4:5c:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Mar 14 07:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30fd05927671fabb7e8d7ab19b5caeee63608638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:7a:c3:53:a6:f9:a3:f0:c9:67:bd:02:55:
3e:88:e2:9f:2b:8f:c7:73:ee:65:28:ad:f7:4c:d2:
af:e1:20:60:8e:e9:f5:eb:28:d4:4e:da:42:d6:81:
aa:a3:2d:77:fa:f9:e6:e9:b0:a1:02:9a:9d:52:45:
25:62:84:02:c6:b7:d9:35:cb:6d:5e:76:64:12:b9:
f5:0b:01:2c:b5:15:2e:c3:13:8c:89:ab:25:c2:f2:
55:07:15:ba:22:b4:b4:9c:e4:a5:05:20:c3:7b:35:
27:a1:05:c8:c7:a3:36:76:7a:24:81:6e:71:34:bb:
7f:cc:23:f9:4b:c5:f5:d0:a8:80:8a:79:de:9c:5b:
48:e1:d7:af:76:3a:0d:de:32:58:3c:ff:26:23:ae:
a5:a5:b0:dc:88:bc:2a:30:5a:d3:8d:f3:1b:fb:4f:
3a:47:46:45:86:27:02:33:a4:4e:20:a5:e4:16:ca:
40:8a:eb:78:2f:59:5b:a1:3e:a8:3e:f5:55:fc:3c:
fe:1d:50:f3:e5:84:4e:43:ea:96:5b:61:5b:db:ed:
66:a6:a7:1d:d5:ba:e4:2e:35:19:ca:0a:66:6a:89:
41:0c:fc:3e:7d:c1:ff:ef:43:76:a3:e9:6b:f7:c1:
d2:6b:b4:c4:4b:a5:8d:b6:5c:05:44:8c:45:79:cc:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:05:92:76:71:FA:BB:7E:8D:7A:B1:9B:5C:AE:EE:63:60:86:38
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/MP0FknZx-rt-jXqxm1yu7mNghjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.64.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3c:78:b3:6d:15:10:c0:66:32:4f:73:75:7e:ff:c9:02:2f:
d4:e4:a8:fc:2d:ee:28:67:dd:95:2b:3b:04:a5:dc:43:5f:e9:
80:0c:a6:05:45:e6:47:4f:cf:48:4a:89:9b:31:44:38:70:87:
bd:2f:69:00:12:10:8a:32:88:fd:58:e7:6b:df:ce:d5:b6:45:
51:fa:96:45:0e:f5:49:55:f4:f3:1a:71:66:13:4b:bc:95:66:
bd:56:fe:ca:56:d2:3e:c1:3e:8b:d2:54:aa:dc:19:a7:d6:84:
eb:24:0b:74:9d:a8:05:cb:14:ca:de:0d:cd:ac:ff:39:87:a5:
3d:e2:ea:41:50:e5:32:4c:95:c6:18:b0:b3:64:d0:bf:47:1b:
5d:9a:18:76:70:99:57:3a:9d:f6:5a:f2:3d:87:fa:62:f7:ab:
12:a7:51:95:56:9a:db:cc:81:d8:fe:e4:77:d7:1b:fc:17:bc:
e0:3e:f9:35:9d:21:8d:19:c8:94:23:5b:c4:0b:52:f6:85:17:
93:18:39:11:b4:0b:69:fa:8f:3b:a6:b8:41:ae:c3:ad:09:55:
ce:45:aa:6c:30:56:16:46:61:c6:cf:c6:3c:61:1c:ed:6f:5e:
94:ee:e4:1f:0d:47:af:b9:49:1b:7a:5f:3a:e5:3b:26:23:70:
7f:cb:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:35:35 2025 by rpki-client