Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa
File: mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa (raw, json)
Hash identifier: li78OcXCZpUgKLA0YsVNzvnIFn5UmiFLcC5dihhrvhY=
Subject key identifier: 98:76:0D:5C:BC:F3:5A:01:E0:58:39:D7:29:99:7E:E1:5C:E2:AF:47
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 01942444AB4696D85597ACC31DF23647D29E
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5607
IP address blocks: 101.60.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ab:46:96:d8:55:97:ac:c3:1d:f2:36:47:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98760d5cbcf35a01e05839d729997ee15ce2af47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:70:d8:51:9a:9a:cd:39:94:aa:8d:d0:c2:
bb:ad:f6:6d:3b:97:8e:17:10:88:d9:49:04:29:74:
92:27:07:36:ef:5f:c7:a9:54:ef:ec:cc:20:68:7f:
28:6f:e3:fe:b5:49:97:91:77:18:95:b0:01:85:92:
8c:5c:d5:60:2e:51:63:29:9c:ec:34:d7:0f:44:6d:
99:83:c5:b0:01:61:d2:cf:b7:4a:4b:27:81:e2:a6:
59:d1:62:8e:87:55:ac:a9:5b:57:a5:8d:28:c3:a3:
2c:69:d2:55:52:6e:46:07:f6:c7:7b:d5:04:2c:cd:
e9:cb:d2:b9:64:ea:30:6d:dc:3b:1d:3f:06:a6:1d:
8c:70:de:0d:4a:9b:3f:d0:d1:6c:eb:fd:c3:ba:24:
31:eb:7a:7f:88:6a:33:d6:1a:b2:0a:9b:ca:fe:57:
05:67:ab:d2:2f:be:ab:85:d3:93:bf:6d:00:b5:b3:
21:bc:f6:1e:b4:28:ea:c5:34:da:e7:22:2c:a1:e9:
e1:cb:aa:2f:24:66:e1:ca:af:db:80:4e:32:66:d5:
08:93:e8:b4:8f:c3:9b:98:dc:f7:e1:a8:3a:3c:f3:
2d:87:ac:85:ae:18:a9:4d:44:4e:00:8b:c3:50:69:
b8:0d:d3:b6:df:57:c7:c5:e8:97:c1:9c:0a:0c:47:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:76:0D:5C:BC:F3:5A:01:E0:58:39:D7:29:99:7E:E1:5C:E2:AF:47
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/mHYNXLzzWgHgWDnXKZl-4Vzir0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.60.0.0/15
Signature Algorithm: sha256WithRSAEncryption
2b:32:b6:75:9f:f0:10:ba:2a:33:c3:fd:ee:a3:30:90:ec:98:
98:66:47:3e:e0:6a:6d:f5:29:15:d2:0a:31:b7:e1:b2:d6:07:
75:eb:b8:a5:f7:f3:6d:d4:bf:d1:f4:08:1c:db:51:82:6e:ef:
34:98:30:fd:7d:6b:ad:2d:eb:88:4a:23:7a:84:b2:1e:0c:f8:
5b:48:02:3b:11:64:29:12:0a:6b:d5:91:de:e8:96:db:2c:bb:
8c:d6:2f:9f:2e:22:33:65:a4:4b:9c:eb:7c:9d:ae:42:d3:51:
97:0f:c8:96:04:e8:40:96:24:f8:9e:2f:3c:82:7c:08:15:42:
5c:61:82:c2:a5:ec:b7:e6:20:8c:24:b5:95:6e:93:1d:9f:ee:
6a:18:a3:58:49:d0:07:91:d0:85:2d:89:f2:0f:cd:83:53:1f:
5e:8b:fa:ac:f9:71:c8:84:ce:d5:a0:7b:c8:62:a5:8b:f0:50:
69:dd:61:8c:53:fc:ef:2a:e9:31:fc:5c:89:61:c1:6d:fe:71:
31:a9:b4:d4:8b:99:f7:28:e0:ae:33:e7:f2:99:43:0d:cc:1f:
99:a2:c6:0f:4e:ba:36:a8:9e:d3:c4:e3:c5:c9:a5:30:7a:25:
3b:04:b8:35:99:bf:73:8c:13:9e:e7:c7:de:eb:04:ac:ce:d9:
45:92:84:28
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQkRKtGlthVl6zDHfI2R9KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMGU2NDBmOWQ2M2JhOTQzYTk3YjNkYzEwZDRjNjg0NGE1
ZDNkYzEwHhcNMjUwMTAxMjM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODc2MGQ1Y2JjZjM1YTAxZTA1ODM5ZDcyOTk5N2VlMTVjZTJhZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWdw2FGams05lKqN0MK7rfZtO5eO
FxCI2UkEKXSSJwc271/HqVTv7MwgaH8ob+P+tUmXkXcYlbABhZKMXNVgLlFjKZzs
NNcPRG2Zg8WwAWHSz7dKSyeB4qZZ0WKOh1WsqVtXpY0ow6MsadJVUm5GB/bHe9UE
LM3py9K5ZOowbdw7HT8Gph2McN4NSps/0NFs6/3DuiQx63p/iGoz1hqyCpvK/lcF
Z6vSL76rhdOTv20AtbMhvPYetCjqxTTa5yIsoenhy6ovJGbhyq/bgE4yZtUIk+i0
j8ObmNz34ag6PPMth6yFrhipTUROAIvDUGm4DdO231fHxeiXwZwKDEdyhwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJh2DVy881oB4Fg51ymZfuFc4q9HMB8GA1UdIwQY
MBaAFDMOZA+dY7qUOpez3BDUxoRKXT3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYt
NWExNzcxOWQ0NDllLzEvbUhZTlhMenpXZ0hnV0RuWEtabC00VnppcjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzE4ZTQtNTNiNy00N2JiLWEzMzYtNWExNzcxOWQ0NDll
LzEvTXc1a0Q1MWp1cFE2bDdQY0VOVEdoRXBkUGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBZTwwDQYJ
KoZIhvcNAQELBQADggEBACsytnWf8BC6KjPD/e6jMJDsmJhmRz7gam31KRXSCjG3
4bLWB3XruKX3823Uv9H0CBzbUYJu7zSYMP19a60t64hKI3qEsh4M+FtIAjsRZCkS
CmvVkd7oltssu4zWL58uIjNlpEuc63ydrkLTUZcPyJYE6ECWJPieLzyCfAgVQlxh
gsKl7LfmIIwktZVukx2f7moYo1hJ0AeR0IUtifIPzYNTH16L+qz5cciEztWge8hi
pYvwUGndYYxT/O8q6TH8XIlhwW3+cTGptNSLmfco4K4z5/KZQw3MH5mixg9Oujao
ntPE48XJpTB6JTsEuDWZv3OME57nx97rBKzO2UWShCg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:15:08 2025 by rpki-client