Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mx4bhvEibIgFk4ZOqmjr3b3N1Uo.roa
File: Mx4bhvEibIgFk4ZOqmjr3b3N1Uo.roa (raw, json)
Hash identifier: v95vLOtqirLMV3UURYfQam+0HpcLcxGcS61EdXs++eo=
Subject key identifier: 33:1E:1B:86:F1:22:6C:88:05:93:86:4E:AA:68:EB:DD:BD:CD:D5:4A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C567EFD2775F85B0EE6BA00E9EF5E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mx4bhvEibIgFk4ZOqmjr3b3N1Uo.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199685
IP address blocks: 2a12:bec0:180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:7e:fd:27:75:f8:5b:0e:e6:ba:00:e9:ef:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=331e1b86f1226c880593864eaa68ebddbdcdd54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:07:de:b5:2c:38:34:12:14:65:70:7f:f5:
f4:76:6c:2c:aa:25:19:bc:4d:a1:01:13:28:ca:dd:
94:34:86:be:0c:cb:51:66:65:71:df:cc:8f:47:66:
8d:75:26:7b:fa:51:11:f2:ba:3e:40:f4:46:a5:a2:
55:84:ef:c0:fe:88:25:dd:fe:58:87:45:71:cc:a4:
38:eb:ce:33:6b:9f:0a:72:b3:fd:fb:af:a9:de:b9:
76:b7:bd:51:d0:5a:d1:ca:e3:91:23:80:63:ac:a7:
0d:f3:bc:3c:fe:15:5b:3a:bd:46:89:8f:e5:c8:50:
9c:80:29:b5:b2:18:9e:19:3a:20:d7:4f:46:95:73:
2d:08:b5:d3:23:6b:f1:7b:13:ab:a6:c0:fc:6e:b3:
59:ab:8a:10:08:33:c5:22:94:ad:37:5c:d7:6d:00:
87:07:4a:8b:48:46:4a:dd:fc:f0:d6:c3:88:ec:01:
78:97:a2:3d:bc:6e:06:5f:ee:75:5c:2e:e1:80:89:
45:ad:ac:97:80:8c:12:6a:06:92:cd:96:6d:8c:dd:
4e:11:ff:bf:21:a0:95:42:e5:52:4d:cd:78:66:4b:
e1:be:a7:22:4b:fe:bc:7d:20:64:6e:52:a0:0b:5a:
7c:78:f2:6a:48:c5:64:e6:ae:08:a8:78:da:62:6f:
15:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:1B:86:F1:22:6C:88:05:93:86:4E:AA:68:EB:DD:BD:CD:D5:4A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Mx4bhvEibIgFk4ZOqmjr3b3N1Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:180::/44
Signature Algorithm: sha256WithRSAEncryption
88:52:b1:5d:43:ef:b6:7f:38:26:3c:8d:ce:c0:57:87:04:54:
08:4d:a1:1a:1b:d6:b3:40:84:a0:df:7d:39:2e:2f:f7:e8:16:
bc:23:b1:06:82:15:64:69:55:bd:fc:c4:62:e9:cb:f3:83:93:
fc:14:85:6c:df:ed:61:c6:70:01:58:c2:4b:d8:2b:06:05:89:
15:e1:5b:f3:75:1d:40:39:2c:59:c0:ad:26:6a:46:7c:83:54:
02:d0:d6:e4:cf:5f:c2:d2:a0:60:91:a8:f3:22:6f:00:38:3e:
d1:d6:03:73:7f:e3:54:39:85:90:3b:ec:a9:85:48:b2:ef:e9:
77:e7:a9:86:07:c1:5f:4e:67:9a:47:9c:c4:35:60:91:11:ba:
de:c1:d9:f6:4e:a2:90:3d:39:7b:1a:7e:db:36:94:79:92:08:
c7:83:c4:a1:14:9d:c9:61:3b:55:27:f4:16:94:79:2e:56:fb:
2c:56:01:35:2e:ee:57:5d:54:fb:21:ec:f8:9a:ea:ec:dd:25:
9f:d7:58:e6:ea:46:fb:34:9d:e0:61:41:3f:69:d0:98:cb:79:
b5:d6:fa:59:2d:7c:5e:e1:8a:b5:94:14:21:ea:68:8e:64:b6:
c1:39:28:9c:f8:85:17:fe:cf:55:d2:85:22:28:76:a9:46:65:
03:13:8a:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjFZ+/Sd1+FsO5roA6e9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzFlMWI4NmYxMjI2Yzg4MDU5Mzg2NGVhYTY4ZWJkZGJkY2RkNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvecH3rUsODQSFGVwf/X0dmwsqiUZ
vE2hARMoyt2UNIa+DMtRZmVx38yPR2aNdSZ7+lER8ro+QPRGpaJVhO/A/ogl3f5Y
h0VxzKQ4684za58KcrP9+6+p3rl2t71R0FrRyuORI4BjrKcN87w8/hVbOr1GiY/l
yFCcgCm1shieGTog109GlXMtCLXTI2vxexOrpsD8brNZq4oQCDPFIpStN1zXbQCH
B0qLSEZK3fzw1sOI7AF4l6I9vG4GX+51XC7hgIlFrayXgIwSagaSzZZtjN1OEf+/
IaCVQuVSTc14ZkvhvqciS/68fSBkblKgC1p8ePJqSMVk5q4IqHjaYm8V3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDMeG4bxImyIBZOGTqpo6929zdVKMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvTXg0Ymh2RWliSWdGazRaT3FtanIzYjNOMVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAGA
MA0GCSqGSIb3DQEBCwUAA4IBAQCIUrFdQ++2fzgmPI3OwFeHBFQITaEaG9azQISg
3305Li/36Ba8I7EGghVkaVW9/MRi6cvzg5P8FIVs3+1hxnABWMJL2CsGBYkV4Vvz
dR1AOSxZwK0makZ8g1QC0Nbkz1/C0qBgkajzIm8AOD7R1gNzf+NUOYWQO+yphUiy
7+l356mGB8FfTmeaR5zENWCREbrewdn2TqKQPTl7Gn7bNpR5kgjHg8ShFJ3JYTtV
J/QWlHkuVvssVgE1Lu5XXVT7Iez4murs3SWf11jm6kb7NJ3gYUE/adCYy3m11vpZ
LXxe4Yq1lBQh6miOZLbBOSic+IUX/s9V0oUiKHapRmUDE4rC
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:57:44 2025 by rpki-client