Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MttkrHxEL6_V0Xjn884Yiu4jKCw.roa
File: MttkrHxEL6_V0Xjn884Yiu4jKCw.roa (raw, json)
Hash identifier: /sHgQ4K2QrR9DEhSvq7/BV41Yzkwrn9RZiKzdKdbnec=
Subject key identifier: 32:DB:64:AC:7C:44:2F:AF:D5:D1:78:E7:F3:CE:18:8A:EE:23:28:2C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A13C2B47E729E497A3EE20436B5BF3D9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MttkrHxEL6_V0Xjn884Yiu4jKCw.roa
Signing time: Sun 16 Mar 2025 23:13:49 +0000
ROA not before: Sun 16 Mar 2025 23:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:3c:2b:47:e7:29:e4:97:a3:ee:20:43:6b:5b:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 23:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32db64ac7c442fafd5d178e7f3ce188aee23282c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:fc:72:03:97:71:8e:45:67:f4:ed:0b:e0:
79:60:a0:fe:6b:2f:01:db:f3:45:e7:32:c7:87:1b:
35:4b:f2:36:f4:94:f8:da:1a:8c:7c:ee:12:5c:dc:
0c:d7:9a:c8:80:61:a5:b4:53:0c:1b:6a:db:63:44:
77:a2:1f:2f:31:e6:bf:81:bf:ac:c7:20:4f:0b:84:
0c:78:31:1e:93:32:ec:7d:a2:b3:48:fa:d9:45:e8:
9f:40:0a:14:1a:20:f0:64:19:bb:ae:c3:1a:9d:d9:
4d:c6:49:56:72:0b:7c:26:cd:34:41:24:9d:d7:c0:
b4:fe:4e:48:bf:fc:0b:bc:24:0b:a8:1a:34:f4:2a:
81:4d:d9:42:10:3a:a0:85:95:40:85:c7:a1:79:60:
c6:a6:f4:42:05:b0:75:66:98:a8:78:46:d9:31:3b:
05:87:1c:59:99:64:11:fe:0c:0a:17:13:2f:2f:91:
e4:23:b5:20:ae:24:07:f0:c9:a4:52:b6:45:03:2a:
7f:d4:b5:8e:05:d3:60:af:ec:61:bb:6e:77:2e:a2:
c4:65:88:cf:95:0c:6a:a6:fa:be:bb:e6:49:a9:6f:
51:1a:f5:7d:02:04:19:30:5d:e5:67:f5:5c:75:45:
35:11:fa:3b:e3:c2:8d:76:8f:49:f6:37:50:5d:f7:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:64:AC:7C:44:2F:AF:D5:D1:78:E7:F3:CE:18:8A:EE:23:28:2C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MttkrHxEL6_V0Xjn884Yiu4jKCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
1d:71:95:21:d1:df:a2:cf:9c:98:b2:8f:a9:5f:52:e7:bb:8b:
dc:58:fd:13:4f:fa:09:d5:aa:56:e3:13:77:26:f2:b8:8f:fe:
90:b9:72:b3:25:a7:9c:f5:8f:88:46:4c:6f:60:95:fe:a8:3d:
b5:9b:ff:b8:25:d9:7c:53:a5:fe:de:33:2a:6d:f5:7a:30:6f:
c3:de:ab:ed:49:2c:b7:ff:37:49:fe:1b:f2:a9:88:c7:7e:15:
ca:40:d3:f1:0a:6b:d6:51:6c:ad:79:61:41:96:07:29:1a:58:
22:10:65:9e:c2:da:36:98:01:85:11:2f:5b:db:91:e3:9c:b4:
6c:dc:39:4b:9d:d1:1e:71:21:c0:b1:e1:18:f3:a3:af:f2:7a:
6a:45:da:48:d7:93:b1:57:fc:cf:e5:c0:3e:80:3a:ba:0a:f7:
37:97:5e:04:e6:87:a4:aa:68:70:ab:f7:08:c0:08:d5:e7:97:
20:74:a0:e8:90:10:17:bc:08:22:33:40:62:9c:22:2b:7d:e5:
b6:b0:a3:ed:c3:6e:d2:d8:8b:d6:96:9f:4c:7d:97:0f:48:82:
8c:be:2e:5d:ee:72:60:6f:eb:29:52:5d:5f:09:50:bf:84:4a:
3b:e6:41:2a:e6:af:93:3f:2d:6b:56:c9:9d:6d:43:ef:e6:82:
b5:13:dd:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:34:11 2025 by rpki-client