Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MHj5XEIdI545zlR9FJGUiZ0iYc4.roa
File: MHj5XEIdI545zlR9FJGUiZ0iYc4.roa (raw, json)
Hash identifier: ItMpix9GDSk6+Y+VvuOt7Z9FgHE+SL3YxAnFY1PdmCI=
Subject key identifier: 30:78:F9:5C:42:1D:23:9E:39:CE:54:7D:14:91:94:89:9D:22:61:CE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEFE7DA74A6628EED94D024A9FF26
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MHj5XEIdI545zlR9FJGUiZ0iYc4.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214006
IP address blocks: 2a0c:9a40:8620::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ef:e7:da:74:a6:62:8e:ed:94:d0:24:a9:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3078f95c421d239e39ce547d149194899d2261ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:c1:48:a9:1d:77:e8:b3:3f:62:98:d6:53:
a5:7c:ac:8a:4b:83:28:95:53:bf:b1:ec:ef:34:ea:
75:7e:fe:46:e3:68:8f:9c:fd:e0:e0:4a:89:b8:23:
49:f0:dc:09:7b:86:15:a7:1d:85:ad:0e:a7:07:5e:
cb:dd:cd:c0:66:24:5c:09:4f:ab:5b:c2:83:d6:43:
8f:58:ef:96:4c:3c:35:23:20:1f:a1:30:59:74:bb:
18:ff:e6:fc:6a:f8:f4:82:d2:4d:f2:00:04:06:0b:
46:7f:f9:e3:e8:a2:58:cb:4a:d8:dd:45:4b:65:65:
cf:13:c8:6e:0c:6f:a1:84:76:10:6e:f8:d7:b7:56:
a3:2c:90:e5:99:7c:a0:a2:81:46:c8:50:d1:b6:a9:
ae:51:ba:08:18:6f:87:2f:c5:02:3b:1f:81:90:24:
96:64:48:b0:86:b5:d5:84:54:03:44:af:e1:5d:78:
09:84:f7:cb:ba:6f:1e:9d:fb:45:e9:c2:d5:ce:24:
df:87:3e:13:77:6e:c6:a0:d7:75:c7:19:21:70:c9:
ae:82:c1:5e:ad:6e:8d:ad:5a:ce:95:24:f6:fa:08:
98:d1:af:eb:cf:02:c9:c2:bc:97:f0:f9:43:b1:fc:
40:77:6a:bb:79:66:50:99:52:bd:e0:8a:7f:4b:de:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:78:F9:5C:42:1D:23:9E:39:CE:54:7D:14:91:94:89:9D:22:61:CE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MHj5XEIdI545zlR9FJGUiZ0iYc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8620::/48
Signature Algorithm: sha256WithRSAEncryption
30:48:87:63:ba:af:a0:bd:af:2a:a3:62:f8:5c:50:80:4f:e2:
da:4c:9e:72:b3:1a:3b:18:68:c5:e6:7c:e4:a6:15:10:79:20:
6e:e0:ba:8a:56:a1:d7:58:cf:04:a1:f6:10:64:80:80:a6:63:
86:b1:81:4f:91:64:cb:9c:99:c9:26:ce:48:ed:21:f4:77:ae:
f9:7f:2a:0f:f0:ce:10:b8:68:bb:30:89:56:c2:be:9a:9b:51:
6a:47:92:b7:44:59:9f:63:f9:66:c9:fc:cb:33:08:af:d8:95:
e3:ac:f6:62:f1:ca:71:b8:7f:d5:b6:89:4f:c0:55:9d:af:d8:
17:db:ba:96:54:0d:c7:e5:27:8f:b5:6c:f1:b1:08:07:27:6d:
4b:58:67:5c:7a:9c:61:ea:a1:21:a9:cc:d6:3c:6b:2a:e7:8e:
0c:cb:5a:a5:24:0a:23:88:3d:a7:9f:99:41:db:bf:10:da:40:
d0:b8:75:d6:fa:38:07:e4:da:5c:82:2c:53:7b:e8:71:e4:f7:
f1:17:52:40:79:c6:82:e4:49:cd:c5:80:1d:7c:54:c1:24:05:
c3:a7:43:14:7d:43:5a:e0:4e:3f:d2:b2:44:6c:f9:72:69:01:
da:e6:5f:58:c4:7b:c7:e8:b8:4a:9d:dc:3d:f7:be:06:2c:bb:
91:a9:f5:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi++/n2nSmYo7tlNAkqf8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDc4Zjk1YzQyMWQyMzllMzljZTU0N2QxNDkxOTQ4OTlkMjI2MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPvBSKkdd+izP2KY1lOlfKyKS4Mo
lVO/sezvNOp1fv5G42iPnP3g4EqJuCNJ8NwJe4YVpx2FrQ6nB17L3c3AZiRcCU+r
W8KD1kOPWO+WTDw1IyAfoTBZdLsY/+b8avj0gtJN8gAEBgtGf/nj6KJYy0rY3UVL
ZWXPE8huDG+hhHYQbvjXt1ajLJDlmXygooFGyFDRtqmuUboIGG+HL8UCOx+BkCSW
ZEiwhrXVhFQDRK/hXXgJhPfLum8enftF6cLVziTfhz4Td27GoNd1xxkhcMmugsFe
rW6NrVrOlST2+giY0a/rzwLJwryX8PlDsfxAd2q7eWZQmVK94Ip/S95PVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDB4+VxCHSOeOc5UfRSRlImdImHOMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvTUhqNVhFSWRJNTQ1emxSOUZKR1VpWjBpWWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIYg
MA0GCSqGSIb3DQEBCwUAA4IBAQAwSIdjuq+gva8qo2L4XFCAT+LaTJ5ysxo7GGjF
5nzkphUQeSBu4LqKVqHXWM8EofYQZICApmOGsYFPkWTLnJnJJs5I7SH0d675fyoP
8M4QuGi7MIlWwr6am1FqR5K3RFmfY/lmyfzLMwiv2JXjrPZi8cpxuH/VtolPwFWd
r9gX27qWVA3H5SePtWzxsQgHJ21LWGdcepxh6qEhqczWPGsq544My1qlJAojiD2n
n5lB278Q2kDQuHXW+jgH5NpcgixTe+hx5PfxF1JAecaC5EnNxYAdfFTBJAXDp0MU
fUNa4E4/0rJEbPlyaQHa5l9YxHvH6LhKndw9974GLLuRqfXh
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:23 2025 by rpki-client