Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/MMauTW5D41slq5n1_BTnfOz6WE4.roa
File: MMauTW5D41slq5n1_BTnfOz6WE4.roa (raw, json)
Hash identifier: zl6G2mjQ4rc9XSYZwIr7CUlAN9TUYdueAC1o97DjnkU=
Subject key identifier: 30:C6:AE:4D:6E:43:E3:5B:25:AB:99:F5:FC:14:E7:7C:EC:FA:58:4E
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 01942445784BF25A6557C5D04578FE566BE7
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/MMauTW5D41slq5n1_BTnfOz6WE4.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13045
IP address blocks: 192.109.36.0/24 maxlen: 24
2001:678:b10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:78:4b:f2:5a:65:57:c5:d0:45:78:fe:56:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30c6ae4d6e43e35b25ab99f5fc14e77cecfa584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:66:32:c4:ff:d4:98:37:47:18:6a:25:a9:
76:1b:71:83:b6:20:28:b8:4f:5e:52:af:ea:4f:c3:
17:eb:6f:7b:37:34:08:4a:97:76:a3:a0:73:40:7a:
43:6d:a7:f3:ef:e7:7a:2f:a2:7e:aa:a9:ae:76:a6:
0d:9f:77:06:7d:ee:6e:b4:7d:10:b0:a2:f9:b3:3a:
f5:81:e4:dc:49:d0:81:ab:59:61:65:30:85:f6:53:
b4:66:db:b1:3a:02:ee:db:6e:3d:06:5f:19:c3:08:
5c:2c:68:84:10:64:4c:85:b1:2e:00:21:b6:f4:03:
fc:60:30:15:6a:c6:fc:17:8c:76:e2:a7:cb:e5:db:
e0:0d:0e:f6:21:da:68:07:14:2c:17:6b:0a:3a:1e:
2b:4c:55:72:45:c3:ab:d5:c1:43:e1:18:3b:72:46:
f1:2d:67:73:fa:2b:70:1b:12:80:ac:84:99:d2:b4:
65:1d:44:f4:7c:de:1c:e2:52:36:86:3e:c0:b7:67:
18:a3:d5:d8:dc:21:42:26:ed:7a:93:c1:b1:20:d0:
b8:8c:b5:86:db:49:25:3d:4a:08:75:34:60:47:57:
39:d5:fd:44:92:6c:e4:fb:18:14:60:00:c0:d8:d0:
c3:66:09:90:8e:76:39:3c:a1:7d:fd:2b:52:ee:30:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C6:AE:4D:6E:43:E3:5B:25:AB:99:F5:FC:14:E7:7C:EC:FA:58:4E
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/MMauTW5D41slq5n1_BTnfOz6WE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.36.0/24
IPv6:
2001:678:b10::/48
Signature Algorithm: sha256WithRSAEncryption
16:67:48:31:62:6e:42:7c:97:8e:da:67:18:44:45:c3:4f:1e:
b5:fe:3e:dc:44:5b:97:20:b8:8c:c9:61:e1:7c:0c:87:bc:28:
94:0b:eb:45:bf:8b:21:6a:ed:6e:02:06:e2:af:24:a7:84:4c:
04:94:f2:25:22:bd:9a:43:ce:0c:99:92:a7:9e:29:46:2b:54:
0c:dd:f2:3a:22:e9:ed:75:11:e5:17:b4:1e:8b:e1:1c:a7:ec:
de:9c:a1:78:8f:65:a0:54:8b:23:55:96:1e:cb:1f:5f:36:e6:
a5:9a:fd:90:c0:bb:a3:0d:78:f4:87:bc:93:75:2d:8a:f4:fa:
e0:3b:31:73:31:4f:2e:5e:c1:24:83:04:f0:b7:cd:5c:3d:02:
5a:c2:1f:1a:3e:56:30:22:6d:35:bc:76:f2:56:82:2c:3c:09:
2d:de:28:c1:f6:73:6d:ef:e4:81:bb:5b:6d:f9:35:ba:5a:32:
ea:cf:28:b0:b6:fd:88:af:20:b5:ff:32:3b:9a:4f:d1:fd:83:
4e:f7:61:5c:31:c1:6f:f6:0a:a7:b4:5d:ce:76:de:a4:14:a8:
8d:f1:13:12:6f:34:55:2a:d5:6c:b3:7d:f9:27:fc:94:b9:8e:
a4:4c:7a:f0:ae:8f:be:02:4b:e9:51:98:b4:8d:6a:64:ab:ef:
70:c6:81:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRXhL8lplV8XQRXj+VmvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz
Y2VlMWMwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGM2YWU0ZDZlNDNlMzViMjVhYjk5ZjVmYzE0ZTc3Y2VjZmE1ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28FmMsT/1Jg3RxhqJal2G3GDtiAo
uE9eUq/qT8MX6297NzQISpd2o6BzQHpDbafz7+d6L6J+qqmudqYNn3cGfe5utH0Q
sKL5szr1geTcSdCBq1lhZTCF9lO0ZtuxOgLu2249Bl8ZwwhcLGiEEGRMhbEuACG2
9AP8YDAVasb8F4x24qfL5dvgDQ72IdpoBxQsF2sKOh4rTFVyRcOr1cFD4Rg7ckbx
LWdz+itwGxKArISZ0rRlHUT0fN4c4lI2hj7At2cYo9XY3CFCJu16k8GxINC4jLWG
20klPUoIdTRgR1c51f1Ekmzk+xgUYADA2NDDZgmQjnY5PKF9/StS7jBzDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDDGrk1uQ+NbJauZ9fwU53zs+lhOMB8GA1UdIwQY
MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt
Zjg1ZTMzZGQ4OTQ2LzEvTU1hdVRXNUQ0MXNscTVuMV9CVG5mT3o2V0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2
LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwG0kMA8E
AgACMAkDBwAgAQZ4CxAwDQYJKoZIhvcNAQELBQADggEBABZnSDFibkJ8l47aZxhE
RcNPHrX+PtxEW5cguIzJYeF8DIe8KJQL60W/iyFq7W4CBuKvJKeETASU8iUivZpD
zgyZkqeeKUYrVAzd8joi6e11EeUXtB6L4Ryn7N6coXiPZaBUiyNVlh7LH1825qWa
/ZDAu6MNePSHvJN1LYr0+uA7MXMxTy5ewSSDBPC3zVw9AlrCHxo+VjAibTW8dvJW
giw8CS3eKMH2c23v5IG7W235NbpaMurPKLC2/YivILX/MjuaT9H9g073YVwxwW/2
Cqe0Xc523qQUqI3xExJvNFUq1Wyzffkn/JS5jqRMevCuj74CS+lRmLSNamSr73DG
gRE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:16 2025 by rpki-client