Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MHPFqui6pa2_hg0F4Xravg0Y4dk.roa
File: MHPFqui6pa2_hg0F4Xravg0Y4dk.roa (raw, json)
Hash identifier: 1e9d64zxxix3rKQL2O8lhI2TwYH+NbLpCqW7mplkSFk=
Subject key identifier: 30:73:C5:AA:E8:BA:A5:AD:BF:86:0D:05:E1:7A:DA:BE:0D:18:E1:D9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01848D678C570E8CB9921B23CCD95861F623
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MHPFqui6pa2_hg0F4Xravg0Y4dk.roa
Signing time: Sat 19 Nov 2022 01:01:24 +0000
ROA not before: Sat 19 Nov 2022 01:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203113
IP address blocks: 2a06:a005:2260::/44 maxlen: 48
2a06:a005:2250::/44 maxlen: 48
2a06:a005:22f0::/44 maxlen: 48
2a06:a005:8c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8d:67:8c:57:0e:8c:b9:92:1b:23:cc:d9:58:61:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 19 01:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3073c5aae8baa5adbf860d05e17adabe0d18e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:b9:0c:a1:32:a2:2e:95:f5:2e:b6:2f:23:
3d:df:43:63:88:d4:36:20:ad:c1:85:5a:b2:2e:84:
e8:e3:1d:d3:3a:06:c2:ba:ae:39:0d:11:2e:70:4a:
0d:de:3f:e2:8b:d7:5f:bb:21:81:1a:d3:be:07:bb:
82:67:b4:0c:99:26:27:bf:d0:00:58:69:ec:85:8e:
f9:ee:79:64:af:78:05:95:48:9b:4a:07:89:9c:c0:
33:ae:ce:e7:c9:f4:c0:aa:30:43:d3:db:3c:76:c8:
3c:f1:78:1f:be:dd:cd:c1:fb:5f:30:e2:d8:38:61:
ce:5c:7f:14:fc:11:5c:00:8e:3c:f8:49:2f:e3:e9:
77:32:c8:55:ff:7a:3c:22:81:a5:7b:eb:92:2c:43:
e0:b3:ba:eb:d1:e2:07:1f:12:bc:6b:23:78:e5:df:
a1:58:18:6a:15:62:c6:2d:17:45:ee:23:90:e9:2b:
f2:2e:ca:e4:db:fe:ad:18:ec:13:78:03:79:0e:a6:
ca:6d:80:3b:d3:83:b1:0f:0c:20:1c:ab:a7:51:bf:
83:d1:a2:e6:05:92:ba:bb:95:f6:c5:c0:f6:af:43:
72:20:89:90:2a:47:40:cd:aa:d1:db:49:37:ba:b5:
e4:06:a4:a0:ed:9d:1e:bd:9a:9e:3d:54:f8:51:d4:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:C5:AA:E8:BA:A5:AD:BF:86:0D:05:E1:7A:DA:BE:0D:18:E1:D9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MHPFqui6pa2_hg0F4Xravg0Y4dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8c0::/44
2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
2a06:a005:22f0::/44
Signature Algorithm: sha256WithRSAEncryption
7f:02:da:5c:6b:ad:a9:10:91:fb:2a:48:52:05:66:ce:98:3e:
df:cc:99:1d:6e:44:cb:83:bc:7d:3e:49:06:e7:3f:9f:84:fd:
c8:29:be:7f:77:d5:78:45:57:e4:f7:2e:35:0c:54:13:e2:be:
51:c1:bd:64:50:4e:e0:03:31:f4:59:8b:c2:99:b2:62:ac:1b:
48:54:76:94:60:88:c5:3c:9a:d2:a3:fb:e6:69:b6:5d:28:9a:
f2:cd:31:e0:70:02:5b:df:76:28:f9:6f:45:1a:54:21:49:95:
2a:bb:9c:28:61:ea:f3:de:1c:6b:a4:cb:6e:90:83:e1:34:ca:
3b:94:d4:75:e8:13:9b:26:0b:47:88:17:a6:e2:08:c3:ca:15:
4e:be:d3:d9:fd:9f:0f:8c:49:2b:0f:c9:23:a7:d8:56:26:92:
df:be:4a:02:df:06:0a:03:df:3f:69:c9:2f:8a:ce:ae:43:a9:
87:69:77:bc:d0:db:8e:10:80:0f:aa:21:74:98:63:67:ca:b0:
74:16:f5:72:3c:65:88:b5:89:d2:16:dc:0e:38:07:ae:55:cc:
35:cf:c9:45:62:1a:6f:be:60:c6:fb:d8:c7:05:aa:a1:93:0f:
4c:5e:97:40:7f:70:50:39:12:48:c5:ab:be:11:05:d7:44:58:
d2:9d:71:0a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYSNZ4xXDoy5khsjzNlYYfYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTE5MDEwMTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDczYzVhYWU4YmFhNWFkYmY4NjBkMDVlMTdhZGFiZTBkMThlMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDO5DKEyoi6V9S62LyM930NjiNQ2
IK3BhVqyLoTo4x3TOgbCuq45DREucEoN3j/ii9dfuyGBGtO+B7uCZ7QMmSYnv9AA
WGnshY757nlkr3gFlUibSgeJnMAzrs7nyfTAqjBD09s8dsg88Xgfvt3NwftfMOLY
OGHOXH8U/BFcAI48+Ekv4+l3MshV/3o8IoGle+uSLEPgs7rr0eIHHxK8ayN45d+h
WBhqFWLGLRdF7iOQ6SvyLsrk2/6tGOwTeAN5DqbKbYA704OxDwwgHKunUb+D0aLm
BZK6u5X2xcD2r0NyIImQKkdAzarR20k3urXkBqSg7Z0evZqePVT4UdS25QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFDBzxarouqWtv4YNBeF62r4NGOHZMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvTUhQRnF1aTZwYTJfaGcwRjRYcmF2ZzBZNGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcEKgagBQjA
MBIDBwQqBqAFIlADBwQqBqAFImADBwQqBqAFIvAwDQYJKoZIhvcNAQELBQADggEB
AH8C2lxrrakQkfsqSFIFZs6YPt/MmR1uRMuDvH0+SQbnP5+E/cgpvn931XhFV+T3
LjUMVBPivlHBvWRQTuADMfRZi8KZsmKsG0hUdpRgiMU8mtKj++Zptl0omvLNMeBw
Alvfdij5b0UaVCFJlSq7nChh6vPeHGuky26Qg+E0yjuU1HXoE5smC0eIF6biCMPK
FU6+09n9nw+MSSsPySOn2FYmkt++SgLfBgoD3z9pyS+Kzq5DqYdpd7zQ244QgA+q
IXSYY2fKsHQW9XI8ZYi1idIW3A44B65VzDXPyUViGm++YMb72McFqqGTD0xel0B/
cFA5EkjFq74RBddEWNKdcQo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 09:54:09 2025 by rpki-client