Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/milFWPLIn9BMmTe7568peGf8gqw.roa
File: milFWPLIn9BMmTe7568peGf8gqw.roa (raw, json)
Hash identifier: Bh+ig/ZP3CN8Vh6nGlBxUAzchr8d+IpU0gHuvcmdWgU=
Subject key identifier: 9A:29:45:58:F2:C8:9F:D0:4C:99:37:BB:E7:AF:29:78:67:FC:82:AC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAB6295E5CD22E11E4894AA64D510C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/milFWPLIn9BMmTe7568peGf8gqw.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215599
IP address blocks: 2a0c:b641:b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:29:5e:5c:d2:2e:11:e4:89:4a:a6:4d:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a294558f2c89fd04c9937bbe7af297867fc82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:07:da:10:9a:53:89:73:1b:2d:92:94:08:88:
73:2d:03:80:03:4b:23:db:bf:b0:f4:13:53:66:dc:
34:f0:90:30:f2:01:ef:07:fb:7d:1c:57:5b:99:23:
a7:24:5e:2c:38:19:80:74:a4:36:85:66:05:ec:d7:
82:8f:22:e5:e5:75:59:ef:c2:34:a1:32:42:ae:75:
db:09:ad:b8:31:11:04:89:9e:de:dd:e6:24:cd:02:
49:a9:e5:f5:7d:d0:77:28:9f:ac:df:9b:af:c1:b3:
ba:24:54:17:cb:a1:1d:37:cf:42:a8:03:b7:bc:d7:
be:16:98:08:d9:07:13:b4:e4:55:e0:d4:4f:c6:b3:
15:51:5c:cd:6f:6e:97:9c:56:fb:20:47:90:c9:3a:
7d:84:33:75:67:48:e1:78:1c:f4:5f:8f:69:fa:65:
92:80:f6:c0:98:14:44:1b:83:bb:4e:df:44:b0:2a:
58:dd:bc:cc:33:ac:5e:1e:bc:33:46:07:00:3c:a0:
c0:f3:04:8e:f0:99:1d:a1:f3:51:b5:17:86:4d:3f:
2d:8b:7d:ae:a3:1b:85:9b:c9:eb:b9:32:58:be:49:
2f:82:6e:4e:fc:ca:68:75:93:1b:53:57:ce:10:84:
52:6a:94:87:5c:0e:6f:a6:ba:51:4d:10:52:c0:f9:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:29:45:58:F2:C8:9F:D0:4C:99:37:BB:E7:AF:29:78:67:FC:82:AC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/milFWPLIn9BMmTe7568peGf8gqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b0::/44
Signature Algorithm: sha256WithRSAEncryption
66:94:22:98:ff:49:0d:b2:14:62:c8:52:b0:71:5a:3c:bc:fd:
2c:92:69:cc:74:ae:d2:e9:74:5d:10:6e:30:e4:10:e1:8f:0a:
19:22:8d:28:4f:c1:e5:8c:ef:95:79:82:82:f6:b6:be:ed:12:
7e:63:1f:94:f9:73:e5:39:63:81:b4:18:eb:21:3b:63:65:97:
41:0d:c4:ea:29:3a:0d:b3:3a:75:bd:d7:82:7f:5c:39:ba:d4:
9a:47:92:d7:ac:58:be:15:a1:57:3e:81:d7:92:3b:f1:22:94:
df:2a:6b:4c:45:99:24:47:15:9f:fb:3a:d2:0f:1e:a1:2a:df:
47:3e:2f:aa:fb:84:6c:18:ae:62:9c:ce:17:2d:97:73:46:1e:
ce:66:d9:c9:6e:ab:69:db:cd:08:35:e6:8e:34:07:25:ef:fa:
27:63:3c:6d:e6:9b:ef:b7:e9:d6:15:1b:06:03:1a:32:cb:00:
aa:66:f1:9d:0d:58:6f:47:76:67:c2:ba:6f:80:f0:09:a8:28:
8d:93:67:ac:50:7b:39:e1:41:64:47:ec:bf:2a:5e:d7:b6:0d:
f9:82:d2:3c:89:f6:62:89:7b:80:2d:dd:c9:67:d3:91:f6:b6:
22:d6:f2:2a:e8:13:61:a2:f4:d3:cd:d9:59:7b:12:d9:d7:83:
14:c7:42:c4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+rYpXlzSLhHkiUqmTVEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTI5NDU1OGYyYzg5ZmQwNGM5OTM3YmJlN2FmMjk3ODY3ZmM4MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/AfaEJpTiXMbLZKUCIhzLQOAA0sj
27+w9BNTZtw08JAw8gHvB/t9HFdbmSOnJF4sOBmAdKQ2hWYF7NeCjyLl5XVZ78I0
oTJCrnXbCa24MREEiZ7e3eYkzQJJqeX1fdB3KJ+s35uvwbO6JFQXy6EdN89CqAO3
vNe+FpgI2QcTtORV4NRPxrMVUVzNb26XnFb7IEeQyTp9hDN1Z0jheBz0X49p+mWS
gPbAmBREG4O7Tt9EsCpY3bzMM6xeHrwzRgcAPKDA8wSO8JkdofNRtReGTT8ti32u
oxuFm8nruTJYvkkvgm5O/MpodZMbU1fOEIRSapSHXA5vprpRTRBSwPmtvQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJopRVjyyJ/QTJk3u+evKXhn/IKsMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvbWlsRldQTEluOUJNbVRlNzU2OHBlR2Y4Z3F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQCw
MA0GCSqGSIb3DQEBCwUAA4IBAQBmlCKY/0kNshRiyFKwcVo8vP0skmnMdK7S6XRd
EG4w5BDhjwoZIo0oT8HljO+VeYKC9ra+7RJ+Yx+U+XPlOWOBtBjrITtjZZdBDcTq
KToNszp1vdeCf1w5utSaR5LXrFi+FaFXPoHXkjvxIpTfKmtMRZkkRxWf+zrSDx6h
Kt9HPi+q+4RsGK5inM4XLZdzRh7OZtnJbqtp280INeaONAcl7/onYzxt5pvvt+nW
FRsGAxoyywCqZvGdDVhvR3ZnwrpvgPAJqCiNk2esUHs54UFkR+y/Kl7Xtg35gtI8
ifZiiXuALd3JZ9OR9rYi1vIq6BNhovTTzdlZexLZ14MUx0LE
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:32 2025 by rpki-client