Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/msdlm4SamHKJrXhS7NVsENDqHE4.roa
File: msdlm4SamHKJrXhS7NVsENDqHE4.roa (raw, json)
Hash identifier: xFkHTPsUHP9rKBiidkNl/xQPHPAD97fRZmsTOA6Rtu8=
Subject key identifier: 9A:C7:65:9B:84:9A:98:72:89:AD:78:52:EC:D5:6C:10:D0:EA:1C:4E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958A44A70ADB5B0CD67F075DF9FB933CAE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/msdlm4SamHKJrXhS7NVsENDqHE4.roa
Signing time: Wed 12 Mar 2025 12:11:49 +0000
ROA not before: Wed 12 Mar 2025 12:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:44:a7:0a:db:5b:0c:d6:7f:07:5d:f9:fb:93:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 12:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac7659b849a987289ad7852ecd56c10d0ea1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:48:44:6d:53:93:99:53:77:9f:18:12:bd:
4f:43:f8:e6:85:86:7b:e8:92:d0:67:5a:15:9b:f2:
4b:91:9d:8b:00:27:0a:c1:d7:bb:e1:07:36:eb:8e:
b0:ab:78:8c:47:4c:d6:ac:44:d6:78:b4:57:e3:b9:
92:81:65:f7:da:ee:e6:d0:73:6e:be:d0:3a:9c:6d:
62:1d:17:e8:e0:7e:86:22:63:ed:97:eb:e5:f8:c1:
0b:b5:40:ae:53:b9:7b:63:8c:c6:5f:10:29:84:9a:
33:79:e0:ac:9d:ce:b1:0f:7f:65:3f:52:20:71:4d:
d5:3d:fe:38:d2:8b:db:59:80:f9:d1:27:22:c7:2e:
3f:9a:ab:97:56:d9:15:71:80:46:da:f4:0d:00:c0:
12:a9:19:af:05:6c:25:7e:25:cf:69:83:f5:8c:8f:
51:89:0d:cf:62:d2:ff:25:76:34:34:e7:3a:ca:e2:
d1:d0:94:9e:49:18:2a:5c:a1:ba:6e:c6:1c:69:cc:
ba:a1:26:13:73:f7:58:16:82:d6:94:7c:42:d8:d4:
e6:a2:b2:1a:ae:89:8e:9f:e2:fa:eb:b6:1b:4e:1d:
69:85:a0:31:93:b6:89:c5:b3:ae:86:38:ce:b1:f1:
4b:f0:97:18:79:2b:ab:1d:ff:68:a3:f4:23:e2:77:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:65:9B:84:9A:98:72:89:AD:78:52:EC:D5:6C:10:D0:EA:1C:4E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/msdlm4SamHKJrXhS7NVsENDqHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
4a:84:b8:0e:25:62:ac:47:5c:46:7c:19:47:99:b8:52:20:54:
aa:3f:84:98:d8:64:ad:32:71:87:59:e6:e1:26:26:13:21:f7:
a2:df:cb:b4:5e:f9:e6:76:bd:94:7f:de:3e:0f:99:ec:16:fc:
4e:01:21:c4:36:47:c9:dc:b0:81:ac:c9:70:6e:ee:4a:e4:73:
50:49:6d:ca:3e:02:9d:0c:80:dc:02:21:63:af:94:c2:0f:f2:
27:38:8e:38:90:d7:08:30:a3:17:73:83:31:7f:34:d8:c2:c6:
6c:07:d0:0c:fc:e2:9b:25:b5:70:02:6c:8d:de:1d:b2:9e:90:
40:1e:9a:db:b4:40:4c:87:48:61:26:cb:bf:79:31:70:b0:8a:
32:76:b9:6e:67:65:1a:49:8e:30:1a:cd:7a:1a:f0:7a:b3:29:
bb:0e:e2:41:f6:d0:dd:85:9d:83:cc:fc:08:97:86:c2:d7:69:
17:4c:47:26:1a:ff:8a:99:cf:9f:0e:28:05:5c:ad:bd:12:0b:
31:1e:03:fd:62:1c:d1:9a:cf:76:b3:b2:91:ae:52:d0:be:92:
fa:de:c8:1d:c1:cb:53:3e:c2:02:6e:f0:bf:d6:68:25:73:29:
48:95:b1:06:e7:48:30:3b:a9:1c:42:fe:d4:47:d8:e0:f8:aa:
3c:3f:21:d8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWKRKcK21sM1n8HXfn7kzyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzEyMTIxMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWM3NjU5Yjg0OWE5ODcyODlhZDc4NTJlY2Q1NmMxMGQwZWExYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuBIRG1Tk5lTd58YEr1PQ/jmhYZ7
6JLQZ1oVm/JLkZ2LACcKwde74Qc2646wq3iMR0zWrETWeLRX47mSgWX32u7m0HNu
vtA6nG1iHRfo4H6GImPtl+vl+MELtUCuU7l7Y4zGXxAphJozeeCsnc6xD39lP1Ig
cU3VPf440ovbWYD50Scixy4/mquXVtkVcYBG2vQNAMASqRmvBWwlfiXPaYP1jI9R
iQ3PYtL/JXY0NOc6yuLR0JSeSRgqXKG6bsYcacy6oSYTc/dYFoLWlHxC2NTmorIa
romOn+L667YbTh1phaAxk7aJxbOuhjjOsfFL8JcYeSurHf9oo/Qj4nfXEwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJrHZZuEmphyia14UuzVbBDQ6hxOMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbXNkbG00U2FtSEtKclhoUzdOVnNFTkRxSEU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEASoS4DiVirEdcRnwZR5m4UiBU
qj+EmNhkrTJxh1nm4SYmEyH3ot/LtF755na9lH/ePg+Z7Bb8TgEhxDZHydywgazJ
cG7uSuRzUEltyj4CnQyA3AIhY6+Uwg/yJziOOJDXCDCjF3ODMX802MLGbAfQDPzi
myW1cAJsjd4dsp6QQB6a27RATIdIYSbLv3kxcLCKMna5bmdlGkmOMBrNehrwerMp
uw7iQfbQ3YWdg8z8CJeGwtdpF0xHJhr/ipnPnw4oBVytvRILMR4D/WIc0ZrPdrOy
ka5S0L6S+t7IHcHLUz7CAm7wv9ZoJXMpSJWxBudIMDupHEL+1EfY4PiqPD8h2A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:25:10 2025 by rpki-client