Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/MMNGxT-KUyJkPng5JlYQPKpFSGk.roa
File: MMNGxT-KUyJkPng5JlYQPKpFSGk.roa (raw, json)
Hash identifier: dcidWvr8U8qpOoavAF8tvKJdQGpYuUQT6aCujMTMvzs=
Subject key identifier: 30:C3:46:C5:3F:8A:53:22:64:3E:78:39:26:56:10:3C:AA:45:48:69
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 0184612E7308D5B52913441C3263810E9E72
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/MMNGxT-KUyJkPng5JlYQPKpFSGk.roa
Signing time: Thu 10 Nov 2022 10:55:44 +0000
ROA not before: Thu 10 Nov 2022 10:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208888
IP address blocks: 103.23.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:2e:73:08:d5:b5:29:13:44:1c:32:63:81:0e:9e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 10 10:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30c346c53f8a5322643e78392656103caa454869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:8d:4b:40:5d:ba:3b:9d:fb:c3:54:1a:2a:
3e:e9:52:d2:5c:ac:53:a1:46:a5:32:aa:c2:0b:1d:
d7:0b:92:37:92:a2:47:1b:69:8b:a6:8d:f4:59:53:
90:3e:0f:e0:b6:a7:f0:0d:e0:0c:29:17:cf:fd:d3:
6e:db:b2:26:ad:fa:fb:26:a7:01:cc:ac:9c:6c:0e:
d7:00:10:01:84:b2:9c:db:24:c8:bd:48:f7:05:18:
33:ed:59:79:39:bf:2a:9e:b3:d7:41:63:e3:2c:af:
c5:30:75:c2:bc:af:2d:1a:3c:ca:e7:54:c3:b8:8d:
94:65:d7:4c:a0:11:fb:0b:32:26:6c:39:b8:98:d0:
ff:a9:2b:6e:99:7c:7e:b1:07:3c:3c:6b:97:a2:cd:
30:5f:d9:07:28:79:f7:3d:46:05:dd:70:34:38:96:
e3:da:69:6e:37:0b:c8:a8:c9:0e:36:88:61:90:22:
b8:a4:8b:f8:a1:ca:c0:c4:16:c4:83:7c:99:d2:9c:
b1:6c:55:e4:d3:91:6a:f3:89:9f:8d:84:49:62:ec:
f2:cb:65:30:06:e2:a3:41:a1:14:0a:0a:e5:84:85:
b0:5a:a9:0a:d5:4e:15:85:60:3e:d1:53:a6:2e:42:
a8:ba:22:6f:6d:09:b6:d8:d7:2a:00:7d:7e:84:d5:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:46:C5:3F:8A:53:22:64:3E:78:39:26:56:10:3C:AA:45:48:69
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/MMNGxT-KUyJkPng5JlYQPKpFSGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.62.0/24
Signature Algorithm: sha256WithRSAEncryption
35:67:0e:3e:ed:dd:d5:9e:a5:6a:57:be:99:54:c4:07:65:42:
ec:d1:94:0e:fd:f1:27:e6:e3:34:d1:b7:11:03:47:c8:49:2f:
20:80:cd:0f:63:1a:66:bd:d8:ab:8a:97:67:cd:4a:de:f7:27:
00:84:56:9f:ca:6a:d2:18:64:e4:8d:52:58:4b:f0:c9:a6:66:
bd:e2:5c:3e:a4:50:db:3b:e4:bd:69:dd:3e:b0:75:f8:42:5f:
fd:77:e3:cc:ec:e0:a6:c2:f3:96:a3:bd:8c:59:13:bf:02:7e:
a4:e1:e5:b7:22:f0:46:9a:6e:1f:8f:6f:2c:96:d6:74:5e:e1:
ae:e8:c7:71:42:d1:96:9b:09:94:8c:0e:72:18:67:94:7d:5d:
ca:46:af:be:79:fa:64:65:17:24:c0:d5:e8:2f:7f:22:4b:a6:
eb:38:ad:19:88:c9:fb:cd:66:07:84:09:41:d7:4b:f3:69:e3:
b9:24:e0:d5:52:c5:37:5e:6d:66:91:83:9d:4b:bb:70:fd:23:
b2:7d:3c:6f:78:43:9f:65:3d:7f:15:88:2e:88:ec:69:71:da:
b3:5c:ea:b5:61:49:0d:e5:cf:db:35:37:66:3c:4e:be:f4:d7:
f2:9e:55:91:47:51:67:a1:13:5f:c2:4d:06:b7:c1:f8:1e:23:
18:e6:db:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRhLnMI1bUpE0QcMmOBDp5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjIxMTEwMTA1NTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGMzNDZjNTNmOGE1MzIyNjQzZTc4MzkyNjU2MTAzY2FhNDU0ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWeNS0Bdujud+8NUGio+6VLSXKxT
oUalMqrCCx3XC5I3kqJHG2mLpo30WVOQPg/gtqfwDeAMKRfP/dNu27Imrfr7JqcB
zKycbA7XABABhLKc2yTIvUj3BRgz7Vl5Ob8qnrPXQWPjLK/FMHXCvK8tGjzK51TD
uI2UZddMoBH7CzImbDm4mND/qStumXx+sQc8PGuXos0wX9kHKHn3PUYF3XA0OJbj
2mluNwvIqMkONohhkCK4pIv4ocrAxBbEg3yZ0pyxbFXk05Fq84mfjYRJYuzyy2Uw
BuKjQaEUCgrlhIWwWqkK1U4VhWA+0VOmLkKouiJvbQm22NcqAH1+hNVZewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDDRsU/ilMiZD54OSZWEDyqRUhpMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvTU1OR3hULUtVeUprUG5nNUpsWVFQS3BGU0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxc+MA0G
CSqGSIb3DQEBCwUAA4IBAQA1Zw4+7d3VnqVqV76ZVMQHZULs0ZQO/fEn5uM00bcR
A0fISS8ggM0PYxpmvdiripdnzUre9ycAhFafymrSGGTkjVJYS/DJpma94lw+pFDb
O+S9ad0+sHX4Ql/9d+PM7OCmwvOWo72MWRO/An6k4eW3IvBGmm4fj28sltZ0XuGu
6MdxQtGWmwmUjA5yGGeUfV3KRq++efpkZRckwNXoL38iS6brOK0ZiMn7zWYHhAlB
10vzaeO5JODVUsU3Xm1mkYOdS7tw/SOyfTxveEOfZT1/FYguiOxpcdqzXOq1YUkN
5c/bNTdmPE6+9NfynlWRR1FnoRNfwk0Gt8H4HiMY5tuR
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:02:27 2025 by rpki-client