Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/gi-MHEyM15zxYoNSsLrSbDPSm-w.roa
File: gi-MHEyM15zxYoNSsLrSbDPSm-w.roa (raw, json)
Hash identifier: sGrte/E8fE6PgsC1dapMpkq3OfpbcFwBeka2l0nY+qQ=
Subject key identifier: 82:2F:8C:1C:4C:8C:D7:9C:F1:62:83:52:B0:BA:D2:6C:33:D2:9B:EC
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 917F9C
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/gi-MHEyM15zxYoNSsLrSbDPSm-w.roa
Signing time: Sat 01 Jan 2022 01:54:59 +0000
ROA not before: Sat 01 Jan 2022 01:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64492
IP address blocks: 2a06:1301:4110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9535388 (0x917f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 01:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=822f8c1c4c8cd79cf1628352b0bad26c33d29bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:6f:5e:c8:b1:e2:2b:28:ba:a4:ae:a9:40:
01:be:a1:39:0f:5b:61:cf:6d:bf:f7:44:c5:21:89:
e2:a2:8f:d1:9c:95:fc:c6:50:2b:47:90:2d:77:66:
86:0a:d9:d4:b1:c8:dc:ea:cb:01:7f:0e:55:95:96:
63:b9:2e:1f:a1:b9:fc:1e:e4:66:5a:80:65:bf:19:
ff:1d:44:ae:26:84:14:0a:64:d9:3f:57:56:4f:f9:
54:2d:51:0f:cd:08:2f:c8:f0:ed:06:75:7a:7e:37:
6d:fa:d8:cf:32:56:45:32:2a:f5:b4:6a:36:af:6a:
33:ae:1d:d5:36:19:b0:e2:0c:b1:bc:e6:26:a5:b6:
11:8d:6a:5c:57:65:01:97:47:e5:a7:ce:37:7c:0a:
a1:99:e4:df:8c:a1:bb:8c:a3:ff:50:89:8f:ec:91:
be:e3:7d:3f:d0:fe:2f:f2:39:ad:e5:6a:5a:1a:77:
e1:ae:f3:9c:c8:3d:76:67:d1:33:d3:64:42:6a:b7:
89:f3:ea:c7:77:e7:2e:23:ab:37:7d:e1:6f:f2:bc:
19:0b:cf:d6:8c:d1:a4:51:5d:35:cb:31:f4:af:c5:
28:05:58:fe:da:78:25:c5:f8:30:12:6e:49:e6:3d:
b3:91:33:6b:3b:d3:5b:5f:ca:f1:df:05:ff:15:ae:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:8C:1C:4C:8C:D7:9C:F1:62:83:52:B0:BA:D2:6C:33:D2:9B:EC
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/gi-MHEyM15zxYoNSsLrSbDPSm-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4110::/48
Signature Algorithm: sha256WithRSAEncryption
b5:18:b0:ba:d7:ba:36:d7:10:c3:fc:f1:27:17:2c:37:ad:02:
eb:e4:91:7d:97:27:10:0d:09:e7:76:da:f4:ba:66:d0:2c:e5:
84:df:c3:d7:fc:40:58:f0:b7:a5:a2:32:d2:0d:7c:9b:20:9f:
81:b4:64:40:ed:ba:d7:77:04:07:20:ba:04:5e:fe:be:43:aa:
6e:05:28:58:2b:4a:e2:50:cd:0c:2e:c6:e9:1b:bf:23:d5:1c:
cb:09:53:9a:7d:ea:2a:64:0a:f3:f6:d6:32:b3:48:f2:c7:79:
69:5c:92:4e:a2:b4:21:b2:78:5f:97:3c:60:68:39:63:d6:03:
83:51:74:e6:cc:2b:03:a3:91:95:97:c3:9c:e8:2f:20:6b:98:
be:19:aa:75:a6:55:4d:de:39:b8:a0:33:a6:fa:61:eb:4c:d4:
84:9f:f7:de:9e:37:e6:4c:07:7f:7a:ae:bf:50:74:09:72:b6:
85:22:d2:7d:92:7e:f0:92:9e:0f:0a:00:a7:fb:fb:3a:19:8a:
50:ae:a0:bd:0b:2d:86:17:83:a4:2b:d6:53:e3:15:0c:b7:d8:
68:7d:35:e7:9d:55:02:60:b3:ea:79:15:63:00:b9:03:05:cc:
8f:8d:0d:d2:66:93:22:a2:1f:45:c7:58:b4:31:4f:95:86:bd:
1f:73:6f:92
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAJF/nDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjdiNDg3NmEyZDExMDU4YzJlNmE3NzlmY2VhYzVmMDQwODNiNGMyMB4XDTIyMDEw
MTAxNTQ1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODIyZjhjMWM0Yzhj
ZDc5Y2YxNjI4MzUyYjBiYWQyNmMzM2QyOWJlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZbb17IseIrKLqkrqlAAb6hOQ9bYc9tv/dExSGJ4qKP0ZyV
/MZQK0eQLXdmhgrZ1LHI3OrLAX8OVZWWY7kuH6G5/B7kZlqAZb8Z/x1EriaEFApk
2T9XVk/5VC1RD80IL8jw7QZ1en43bfrYzzJWRTIq9bRqNq9qM64d1TYZsOIMsbzm
JqW2EY1qXFdlAZdH5afON3wKoZnk34yhu4yj/1CJj+yRvuN9P9D+L/I5reVqWhp3
4a7znMg9dmfRM9NkQmq3ifPqx3fnLiOrN33hb/K8GQvP1ozRpFFdNcsx9K/FKAVY
/tp4JcX4MBJuSeY9s5EzazvTW1/K8d8F/xWuQbcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSCL4wcTIzXnPFig1KwutJsM9Kb7DAfBgNVHSMEGDAWgBRye0h2otEQWMLm
p3n86sXwQIO0wjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NudElkcUxSRUZqQzVxZDVfT3JGOEVDRHRNSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvYWVlYTEwLTcyMDgtNGQ1Yy04NWI5LTllMzUwODlmYTc4Zi8x
L2dpLU1IRXlNMTV6eFlvTlNzTHJTYkRQU20tdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
YWVlYTEwLTcyMDgtNGQ1Yy04NWI5LTllMzUwODlmYTc4Zi8xL2NudElkcUxSRUZq
QzVxZDVfT3JGOEVDRHRNSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGEwFBEDANBgkqhkiG9w0BAQsF
AAOCAQEAtRiwute6NtcQw/zxJxcsN60C6+SRfZcnEA0J53ba9Lpm0CzlhN/D1/xA
WPC3paIy0g18myCfgbRkQO2613cEByC6BF7+vkOqbgUoWCtK4lDNDC7G6Ru/I9Uc
ywlTmn3qKmQK8/bWMrNI8sd5aVySTqK0IbJ4X5c8YGg5Y9YDg1F05swrA6ORlZfD
nOgvIGuYvhmqdaZVTd45uKAzpvph60zUhJ/33p435kwHf3quv1B0CXK2hSLSfZJ+
8JKeDwoAp/v7OhmKUK6gvQsthheDpCvWU+MVDLfYaH01551VAmCz6nkVYwC5AwXM
j40N0maTIqIfRcdYtDFPlYa9H3Nvkg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:31:49 2025 by rpki-client