Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MT81qE-OtcZ-1rf5T5H71M-A3NI.roa
File: MT81qE-OtcZ-1rf5T5H71M-A3NI.roa (raw, json)
Hash identifier: 4L9zeA4vtC75rEjZj00TPX3Mx6+Q//HqOo9GR5A6k4c=
Subject key identifier: 31:3F:35:A8:4F:8E:B5:C6:7E:D6:B7:F9:4F:91:FB:D4:CF:80:DC:D2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01823C29206E13D420C7D5F327CA33B840A4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MT81qE-OtcZ-1rf5T5H71M-A3NI.roa
Signing time: Tue 26 Jul 2022 20:18:24 +0000
ROA not before: Tue 26 Jul 2022 20:18:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204268
IP address blocks: 2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:a0e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:29:20:6e:13:d4:20:c7:d5:f3:27:ca:33:b8:40:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 26 20:18:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=313f35a84f8eb5c67ed6b7f94f91fbd4cf80dcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:cb:72:bc:45:99:26:09:c8:53:15:80:5d:
c0:13:94:43:cd:f2:b8:a7:22:52:5d:a5:0e:aa:cc:
2d:3d:1d:08:01:3a:f8:fd:33:8b:57:66:e4:10:c9:
f6:24:b9:3a:9a:e3:9a:53:a7:2a:66:1a:41:d1:83:
4f:e5:6c:c4:b2:58:f2:68:fa:c2:ff:29:5c:d5:43:
a9:7f:b5:c5:ba:c9:ba:82:c9:15:e5:e2:d8:30:bd:
ab:97:ad:a0:da:7f:cd:1b:6e:8c:4a:40:db:f9:84:
66:ec:32:6c:1a:99:a4:1f:4c:4c:0c:97:0c:0b:f2:
0c:3c:93:8a:37:2d:fd:07:96:0e:70:53:7e:3b:ac:
65:20:b0:3a:58:f8:22:30:3c:24:1c:f7:c6:81:36:
9c:96:59:60:eb:9f:8f:35:83:c4:7d:39:6d:95:21:
0f:af:ec:78:cc:3c:fd:fc:0f:74:3a:93:bb:69:30:
ce:dc:28:d9:32:4d:8a:a0:53:9c:6e:82:75:05:10:
d1:92:12:c1:64:a7:8f:14:1d:6a:cb:99:f7:09:4e:
b2:cf:4d:eb:8e:80:c5:d3:5e:b8:4b:03:39:e3:fe:
5b:66:bc:a8:9e:81:03:65:f7:9e:04:36:a2:63:7a:
52:30:f4:3a:50:c6:fc:46:e3:69:47:9c:30:39:92:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:35:A8:4F:8E:B5:C6:7E:D6:B7:F9:4F:91:FB:D4:CF:80:DC:D2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/MT81qE-OtcZ-1rf5T5H71M-A3NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
Signature Algorithm: sha256WithRSAEncryption
96:1e:29:f2:97:3d:7b:ca:b9:eb:5a:9a:f0:9a:58:4f:56:4c:
36:8d:c5:ed:5f:6a:82:9d:c9:59:9a:22:ae:09:6a:35:1f:66:
c2:cb:cf:50:3a:88:4e:5c:86:61:1c:a1:e2:c3:76:f2:ac:af:
1f:0f:f9:7f:12:35:48:3e:e0:fe:c4:0c:ff:35:14:f0:da:6d:
c0:e2:01:54:c7:d9:05:b8:30:f5:5a:82:22:56:cc:6a:1a:99:
de:c4:8b:83:fd:df:48:88:67:43:30:49:44:90:38:75:d8:22:
c3:4e:87:f2:76:ad:d7:5c:c8:e6:6d:ab:dc:93:fe:aa:0f:ce:
47:e4:52:01:8d:c1:23:bf:84:d8:70:1b:40:75:86:ef:19:e3:
ce:f8:79:ac:7c:40:79:19:45:02:ab:e2:fd:3f:44:0b:b7:cd:
7d:da:da:46:77:69:bd:75:a5:74:0f:ef:58:e2:6f:78:d0:4b:
ce:ce:d0:f2:43:56:5a:d5:45:8d:85:ad:51:89:5b:c3:3d:3f:
4b:aa:4d:63:e4:3e:71:f7:d6:99:d9:60:00:74:31:a9:2b:a1:
c8:8f:ab:4e:e3:06:5c:d8:89:77:72:0e:c8:e7:38:2b:d2:02:
37:79:4f:5b:ea:6f:cd:73:50:01:98:60:bd:13:37:7e:74:51:
87:4c:40:4a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYI8KSBuE9Qgx9XzJ8ozuECkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzI2MjAxODI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTNmMzVhODRmOGViNWM2N2VkNmI3Zjk0ZjkxZmJkNGNmODBkY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+3LcrxFmSYJyFMVgF3AE5RDzfK4
pyJSXaUOqswtPR0IATr4/TOLV2bkEMn2JLk6muOaU6cqZhpB0YNP5WzEsljyaPrC
/ylc1UOpf7XFusm6gskV5eLYML2rl62g2n/NG26MSkDb+YRm7DJsGpmkH0xMDJcM
C/IMPJOKNy39B5YOcFN+O6xlILA6WPgiMDwkHPfGgTaclllg65+PNYPEfTltlSEP
r+x4zDz9/A90OpO7aTDO3CjZMk2KoFOcboJ1BRDRkhLBZKePFB1qy5n3CU6yz03r
joDF0164SwM54/5bZryonoEDZfeeBDaiY3pSMPQ6UMb8RuNpR5wwOZJhBQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDE/NahPjrXGfta3+U+R+9TPgNzSMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvTVQ4MXFFLU90Y1otMXJmNVQ1SDcxTS1BM05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgagBQoO
AwcAKgagBQoSAwcEKgagBRAAMA0GCSqGSIb3DQEBCwUAA4IBAQCWHinylz17yrnr
WprwmlhPVkw2jcXtX2qCnclZmiKuCWo1H2bCy89QOohOXIZhHKHiw3byrK8fD/l/
EjVIPuD+xAz/NRTw2m3A4gFUx9kFuDD1WoIiVsxqGpnexIuD/d9IiGdDMElEkDh1
2CLDTofydq3XXMjmbavck/6qD85H5FIBjcEjv4TYcBtAdYbvGePO+HmsfEB5GUUC
q+L9P0QLt8192tpGd2m9daV0D+9Y4m940EvOztDyQ1Za1UWNha1RiVvDPT9Lqk1j
5D5x99aZ2WAAdDGpK6HIj6tO4wZc2Il3cg7I5zgr0gI3eU9b6m/Nc1ABmGC9Ezd+
dFGHTEBK
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:15:53 2025 by rpki-client