Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MMhAInQYtdpemgLxLkVb7UapM2Q.roa
File: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (raw, json)
Hash identifier: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=
Subject key identifier: 30:C8:40:22:74:18:B5:DA:5E:9A:02:F1:2E:45:5B:ED:46:A9:33:64
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DBCD5A75FE486706507BDC5C49AD8
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MMhAInQYtdpemgLxLkVb7UapM2Q.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:f647::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bc:d5:a7:5f:e4:86:70:65:07:bd:c5:c4:9a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30c840227418b5da5e9a02f12e455bed46a93364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:6f:84:76:13:6e:7c:e4:42:a4:f3:e3:3f:
da:aa:c1:6a:39:1d:6c:3e:a0:16:81:f4:b1:5a:d0:
f0:59:c1:4e:38:56:9e:ff:32:d0:5a:d7:f7:80:7a:
e6:78:f1:af:49:62:56:59:83:1f:ba:22:08:b9:a2:
fe:55:69:76:a1:ba:1d:f1:4e:10:01:ab:b7:d5:4d:
47:5f:64:37:c9:cb:96:4b:cd:94:e6:c9:04:cf:8d:
ba:6c:62:8f:a8:d1:9f:a1:43:c1:f7:66:2a:6d:ac:
1a:70:04:99:16:80:d6:a7:19:a7:b9:d9:00:4b:37:
88:31:f9:58:74:12:67:b5:08:1a:d3:56:1a:76:98:
2a:37:2b:20:d2:4d:b5:48:5b:f7:3e:3a:84:2f:49:
f0:68:b9:c5:07:6f:99:13:d5:fd:ba:cb:93:d8:da:
66:c4:aa:12:b4:7f:29:d6:15:25:f6:50:86:8f:8f:
fc:c1:d0:05:11:7b:2c:80:be:ea:28:d0:42:13:5b:
ad:20:d8:88:5b:4b:15:b1:7a:dd:7a:b5:7d:24:48:
e3:b6:17:32:6c:6c:75:b3:58:a7:26:03:2e:d0:5d:
f1:82:a9:e4:e0:6d:c7:4d:0b:cd:db:5f:be:da:af:
ab:e0:84:b2:50:fa:99:ff:88:08:21:d9:81:48:3c:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:40:22:74:18:B5:DA:5E:9A:02:F1:2E:45:5B:ED:46:A9:33:64
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/MMhAInQYtdpemgLxLkVb7UapM2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f647::/32
Signature Algorithm: sha256WithRSAEncryption
4b:4c:7d:e2:28:05:c4:25:8b:6c:40:c3:ed:8f:fe:95:47:9c:
19:08:30:d8:5e:fc:be:28:70:be:2a:22:55:af:56:a3:27:40:
8a:b2:92:54:c7:3e:32:a8:05:da:be:44:fb:3a:6b:fc:41:b1:
23:04:e5:01:f9:cf:79:5b:b9:59:82:ce:d3:8a:e4:d1:7a:2b:
c8:bc:c5:d5:19:49:df:f3:2e:f8:e0:73:3a:8b:ad:90:a5:3c:
09:8f:cc:32:26:76:62:2d:fe:dd:72:ca:2d:b1:ad:7c:80:86:
c4:a2:39:b6:d2:f8:88:02:1b:d2:c8:76:8b:5e:be:22:89:9b:
99:1f:70:fa:c5:8f:02:ad:92:22:8d:e4:71:98:78:3a:08:22:
3f:f1:89:74:0a:c5:47:78:6c:1c:ae:3f:45:08:4a:67:31:39:
3e:01:48:1c:40:35:fa:85:8e:ab:80:cf:b6:db:58:67:11:20:
b4:08:51:9b:e5:16:b1:79:2e:55:a8:e9:8c:6a:fd:84:08:a2:
43:68:d5:63:93:5d:81:34:47:9d:2a:7d:4e:e8:fe:8b:1a:b6:
32:da:4f:d7:b1:2c:ba:23:5f:68:6a:87:64:c9:1a:be:40:e4:
2c:d9:71:29:77:31:ca:85:56:47:07:8e:20:4e:ce:99:d6:5c:
31:9b:9e:56
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijbzVp1/khnBlB73FxJrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGM4NDAyMjc0MThiNWRhNWU5YTAyZjEyZTQ1NWJlZDQ2YTkzMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IxvhHYTbnzkQqTz4z/aqsFqOR1s
PqAWgfSxWtDwWcFOOFae/zLQWtf3gHrmePGvSWJWWYMfuiIIuaL+VWl2obod8U4Q
Aau31U1HX2Q3ycuWS82U5skEz426bGKPqNGfoUPB92YqbawacASZFoDWpxmnudkA
SzeIMflYdBJntQga01YadpgqNysg0k21SFv3PjqEL0nwaLnFB2+ZE9X9usuT2Npm
xKoStH8p1hUl9lCGj4/8wdAFEXssgL7qKNBCE1utINiIW0sVsXrderV9JEjjthcy
bGx1s1inJgMu0F3xgqnk4G3HTQvN21++2q+r4ISyUPqZ/4gIIdmBSDxVIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDDIQCJ0GLXaXpoC8S5FW+1GqTNkMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvTU1oQUluUVl0ZHBlbWdMeExrVmI3VWFwTTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2RzAN
BgkqhkiG9w0BAQsFAAOCAQEAS0x94igFxCWLbEDD7Y/+lUecGQgw2F78vihwvioi
Va9WoydAirKSVMc+MqgF2r5E+zpr/EGxIwTlAfnPeVu5WYLO04rk0XoryLzF1RlJ
3/Mu+OBzOoutkKU8CY/MMiZ2Yi3+3XLKLbGtfICGxKI5ttL4iAIb0sh2i16+Iomb
mR9w+sWPAq2SIo3kcZh4OggiP/GJdArFR3hsHK4/RQhKZzE5PgFIHEA1+oWOq4DP
tttYZxEgtAhRm+UWsXkuVajpjGr9hAiiQ2jVY5NdgTRHnSp9Tuj+ixq2MtpP17Es
uiNfaGqHZMkavkDkLNlxKXcxyoVWRweOIE7OmdZcMZueVg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:48:42 2025 by rpki-client