Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MGapW0vbEsDh07CObJqBM_xk66k.roa
File: MGapW0vbEsDh07CObJqBM_xk66k.roa (raw, json)
Hash identifier: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=
Subject key identifier: 30:66:A9:5B:4B:DB:12:C0:E1:D3:B0:8E:6C:9A:81:33:FC:64:EB:A9
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55918155B8A9B2EF75D170AF48C99
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MGapW0vbEsDh07CObJqBM_xk66k.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198180
IP address blocks: 2a10:4646:370::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:59:18:15:5b:8a:9b:2e:f7:5d:17:0a:f4:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3066a95b4bdb12c0e1d3b08e6c9a8133fc64eba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:c5:da:f5:07:e2:60:04:3f:a3:8a:08:4b:
d6:89:57:88:a7:fc:9b:57:bf:09:1a:3f:2e:c7:0d:
1a:9e:c9:65:4a:93:43:40:f5:26:ba:78:6e:5a:2c:
b5:82:59:4a:cc:ce:b8:f2:e3:dd:1c:7a:2e:9d:ed:
f4:19:2a:0c:cc:fe:fb:dc:da:df:06:13:66:33:58:
06:4f:1a:43:a2:6f:6e:82:85:0d:ee:fe:b2:81:8e:
b5:a0:e0:75:81:53:9a:8b:4d:8c:14:54:bd:27:0d:
73:b7:be:29:71:82:0c:a8:4d:0e:7f:b3:5f:df:f8:
96:7e:97:96:4d:84:9a:d0:05:98:9b:52:58:93:e3:
9e:4e:c8:d9:c4:a5:63:4b:f0:6e:c2:d9:c8:21:fb:
af:21:df:d0:0c:1a:9b:ed:ea:12:a3:70:68:8a:35:
1e:10:79:0d:8b:11:0d:89:ed:d9:22:8d:a3:d1:2a:
3c:2d:5f:7b:6b:22:06:ea:2e:47:94:b8:c7:6c:4e:
36:27:b6:80:59:76:e8:2e:2f:2a:1f:d2:93:8a:5f:
35:1d:ab:18:71:4b:96:33:3c:9e:5d:95:be:86:2d:
df:d9:e9:37:4e:8f:8c:2a:9e:5c:4b:0c:31:e4:d4:
b1:bf:f1:ab:99:12:c6:b7:31:be:cb:36:3d:de:a1:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:A9:5B:4B:DB:12:C0:E1:D3:B0:8E:6C:9A:81:33:FC:64:EB:A9
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/MGapW0vbEsDh07CObJqBM_xk66k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:370::/44
Signature Algorithm: sha256WithRSAEncryption
42:1c:d2:e0:12:80:b7:51:f2:36:05:43:6d:c8:8b:a0:38:18:
e5:3c:3b:da:3d:0b:f7:e8:67:16:fa:12:59:af:e2:07:80:7e:
e1:39:c4:e8:e9:96:1b:e0:02:b0:62:1c:7e:7f:cd:3a:21:ab:
81:28:27:21:e8:dd:23:ba:c8:5a:1c:53:72:8d:68:57:c9:47:
f7:85:47:d2:9f:d0:49:e4:7d:3b:50:5c:77:ed:24:ef:0d:c4:
df:55:81:4a:64:b1:1a:45:11:51:84:29:0d:28:69:6e:2b:98:
ac:77:6b:c9:45:eb:2f:a9:dc:90:a7:e9:2b:84:14:6f:aa:65:
aa:0f:c2:bf:e4:05:c0:48:94:22:fe:09:ef:5c:af:d7:48:ca:
82:17:86:f2:af:18:49:d3:41:2d:6c:63:ed:44:4d:b1:be:bd:
a9:7a:85:0a:7c:af:5e:94:a7:04:8d:1f:77:78:96:e2:6b:64:
b1:15:55:48:e7:10:e0:48:46:4b:29:ac:49:1b:df:b6:a6:fb:
9f:02:0f:59:80:c8:f6:14:e9:21:10:44:65:3f:25:cd:6e:9d:
6b:a0:3a:c8:9a:80:f7:d8:79:fb:a6:50:01:40:41:9e:0b:c9:
4a:fa:c5:a3:07:f0:35:3b:ac:10:bd:4f:1a:a2:2f:5b:e5:08:
f1:1a:fa:44
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntVkYFVuKmy73XRcK9IyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDY2YTk1YjRiZGIxMmMwZTFkM2IwOGU2YzlhODEzM2ZjNjRlYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGvF2vUH4mAEP6OKCEvWiVeIp/yb
V78JGj8uxw0ansllSpNDQPUmunhuWiy1gllKzM648uPdHHoune30GSoMzP773Nrf
BhNmM1gGTxpDom9ugoUN7v6ygY61oOB1gVOai02MFFS9Jw1zt74pcYIMqE0Of7Nf
3/iWfpeWTYSa0AWYm1JYk+OeTsjZxKVjS/BuwtnIIfuvId/QDBqb7eoSo3BoijUe
EHkNixENie3ZIo2j0So8LV97ayIG6i5HlLjHbE42J7aAWXboLi8qH9KTil81HasY
cUuWMzyeXZW+hi3f2ek3To+MKp5cSwwx5NSxv/GrmRLGtzG+yzY93qGDEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDBmqVtL2xLA4dOwjmyagTP8ZOupMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvTUdhcFcwdmJFc0RoMDdDT2JKcUJNX3hrNjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgNw
MA0GCSqGSIb3DQEBCwUAA4IBAQBCHNLgEoC3UfI2BUNtyIugOBjlPDvaPQv36GcW
+hJZr+IHgH7hOcTo6ZYb4AKwYhx+f806IauBKCch6N0jushaHFNyjWhXyUf3hUfS
n9BJ5H07UFx37STvDcTfVYFKZLEaRRFRhCkNKGluK5isd2vJResvqdyQp+krhBRv
qmWqD8K/5AXASJQi/gnvXK/XSMqCF4byrxhJ00EtbGPtRE2xvr2peoUKfK9elKcE
jR93eJbia2SxFVVI5xDgSEZLKaxJG9+2pvufAg9ZgMj2FOkhEERlPyXNbp1roDrI
moD32Hn7plABQEGeC8lK+sWjB/A1O6wQvU8aoi9b5QjxGvpE
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:37 2025 by rpki-client