Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/MtRlJyjz2pIKlkeAkOMcGZfB6BE.roa
File: MtRlJyjz2pIKlkeAkOMcGZfB6BE.roa (raw, json)
Hash identifier: bDKjxO0Wydj/RhXhmG+FIKOl2bQi9Jga2oCkH9SQb2k=
Subject key identifier: 32:D4:65:27:28:F3:DA:92:0A:96:47:80:90:E3:1C:19:97:C1:E8:11
Certificate issuer: /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial: 0185727A28BCD17BC405D61695F3739C1481
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/MtRlJyjz2pIKlkeAkOMcGZfB6BE.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.243.1.0/24 maxlen: 24
2a0d:3c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:28:bc:d1:7b:c4:05:d6:16:95:f3:73:9c:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d4652728f3da920a96478090e31c1997c1e811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:b2:92:79:ee:7d:b4:d5:f2:b7:f7:12:32:
ea:d4:aa:5e:f7:38:95:44:ed:c7:ad:13:f6:a7:1d:
c7:9f:fa:00:68:15:63:eb:e5:c0:25:70:fb:ac:c7:
b3:bc:17:e7:e7:f8:4c:02:8b:3f:c5:8f:de:7b:99:
08:ba:23:72:76:f9:1d:38:2f:a8:9d:6f:95:fe:a1:
8b:10:48:59:9c:04:7a:60:3f:ab:80:4e:32:99:e7:
89:f5:72:07:68:b4:7d:b4:4b:d8:e1:7a:a6:bc:3e:
3d:c0:18:32:7c:a1:b8:85:81:b5:f1:08:5f:20:56:
a2:48:ea:1d:bd:20:bb:02:10:b8:de:20:fe:d8:09:
f8:1f:ca:98:54:0d:a2:86:a9:2b:dd:da:ed:24:fc:
45:3a:29:6a:d0:23:14:ba:04:0c:44:84:27:a7:f0:
a1:30:a1:f7:d3:be:02:63:37:53:94:e8:74:f0:5e:
58:1f:75:f7:66:23:48:b6:65:8b:47:b0:89:d4:57:
e2:f6:e4:8a:05:fb:46:d7:c5:40:47:5f:e2:6c:58:
20:96:4d:7e:4d:ec:20:0c:b9:0e:67:d8:8b:ce:72:
51:55:ba:5a:c3:0e:5d:22:4c:99:df:9d:5e:27:55:
6c:64:9c:4b:70:f7:0b:8e:56:d4:93:ac:ef:c0:98:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:65:27:28:F3:DA:92:0A:96:47:80:90:E3:1C:19:97:C1:E8:11
X509v3 Authority Key Identifier:
keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/MtRlJyjz2pIKlkeAkOMcGZfB6BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.1.0/24
IPv6:
2a0d:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
7d:30:44:f8:cc:33:64:34:f7:31:e8:ba:4f:8b:f4:f3:61:e9:
6a:cc:96:28:e9:28:94:e4:08:6e:34:bc:3e:96:73:2d:63:8f:
25:5d:66:42:54:31:41:bc:35:81:c3:b7:40:98:ba:5f:f1:e7:
6e:bb:49:61:60:7f:5a:35:17:82:5b:6f:b1:f1:1b:79:3a:66:
cf:c1:01:1c:cd:2e:b9:b0:4b:db:7a:d7:f6:9e:24:b1:3a:c1:
23:1f:dc:8f:ad:d4:5d:ea:85:55:9f:ad:5f:4c:18:80:c1:cd:
ca:d9:e9:c8:9e:a2:f6:b8:3f:6a:3c:49:f1:88:34:ba:5f:aa:
1d:e2:6e:d7:d3:a1:d0:2f:91:07:a8:69:01:63:d5:7a:69:43:
d7:63:e4:c2:1e:e9:3d:8a:0b:69:4a:e9:ee:7c:97:f1:aa:45:
bd:e3:6c:88:d1:0e:c5:bf:62:64:e9:e5:ea:84:0b:3b:47:64:
72:28:37:81:af:35:4c:2b:06:1a:71:08:55:d2:6a:59:97:90:
73:1b:1f:d3:0a:47:79:ae:29:eb:65:ba:a9:45:6f:bd:7e:33:
f0:81:58:f6:c0:21:bb:7f:7f:e5:7f:4a:34:b9:55:61:02:ef:
b1:81:d2:c5:73:6d:c4:13:81:42:17:b3:54:90:3b:37:31:58:
80:d3:cd:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVyeii80XvEBdYWlfNznBSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGExZjhjZjNiODAxNmJlODgzMmY3OGIxMDFiMzY0ZTEx
MTQwMjUwHhcNMjMwMTAyMTIzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQ0NjUyNzI4ZjNkYTkyMGE5NjQ3ODA5MGUzMWMxOTk3YzFlODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMqyknnufbTV8rf3EjLq1Kpe9ziV
RO3HrRP2px3Hn/oAaBVj6+XAJXD7rMezvBfn5/hMAos/xY/ee5kIuiNydvkdOC+o
nW+V/qGLEEhZnAR6YD+rgE4ymeeJ9XIHaLR9tEvY4XqmvD49wBgyfKG4hYG18Qhf
IFaiSOodvSC7AhC43iD+2An4H8qYVA2ihqkr3drtJPxFOilq0CMUugQMRIQnp/Ch
MKH3074CYzdTlOh08F5YH3X3ZiNItmWLR7CJ1Ffi9uSKBftG18VAR1/ibFgglk1+
TewgDLkOZ9iLznJRVbpaww5dIkyZ351eJ1VsZJxLcPcLjlbUk6zvwJh2tQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDLUZSco89qSCpZHgJDjHBmXwegRMB8GA1UdIwQY
MBaAFMoKH4zzuAFr6IMveLEBs2ThEUAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDct
YjU5NDc0MGE0MGE3LzEvTXRSbEp5anoycElLbGtlQWtPTWNHWmZCNkJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83N2YwM2YtOTkzOC00NThmLTgxMDctYjU5NDc0MGE0MGE3
LzEveWdvZmpQTzRBV3ZvZ3k5NHNRR3paT0VSUUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAufMBMA8E
AgACMAkDBwAqDTyAAAAwDQYJKoZIhvcNAQELBQADggEBAH0wRPjMM2Q09zHouk+L
9PNh6WrMlijpKJTkCG40vD6Wcy1jjyVdZkJUMUG8NYHDt0CYul/x5267SWFgf1o1
F4Jbb7HxG3k6Zs/BARzNLrmwS9t61/aeJLE6wSMf3I+t1F3qhVWfrV9MGIDBzcrZ
6cieova4P2o8SfGINLpfqh3ibtfTodAvkQeoaQFj1XppQ9dj5MIe6T2KC2lK6e58
l/GqRb3jbIjRDsW/YmTp5eqECztHZHIoN4GvNUwrBhpxCFXSalmXkHMbH9MKR3mu
KetluqlFb71+M/CBWPbAIbt/f+V/SjS5VWEC77GB0sVzbcQTgUIXs1SQOzcxWIDT
zcE=
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:34:20 2025 by rpki-client