Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa
File: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (raw, json)
Hash identifier: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=
Subject key identifier: 99:C3:3C:FF:D9:72:AD:31:BE:30:C0:C5:8E:F1:68:2F:38:74:11:C5
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 019423D6EBC6F632B137354B6296DE208082
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 2a0a:db00::/29 maxlen: 29
2a0a:db00::/48 maxlen: 48
2a0a:db00:1::/48 maxlen: 48
2a0a:db00:2::/48 maxlen: 48
2a0a:db00:3::/48 maxlen: 48
2a0a:db00:4::/48 maxlen: 48
2a0a:db00:5::/48 maxlen: 48
2a0a:db00:6::/48 maxlen: 48
2a0a:db00:7::/48 maxlen: 48
2a0a:db00:8::/48 maxlen: 48
2a0a:db00:9::/48 maxlen: 48
2a0a:db00:a::/48 maxlen: 48
2a0a:db00:b::/48 maxlen: 48
2a0a:db00:c::/48 maxlen: 48
2a0a:db00:d::/48 maxlen: 48
2a0a:db00:e::/48 maxlen: 48
2a0a:db00:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:eb:c6:f6:32:b1:37:35:4b:62:96:de:20:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99c33cffd972ad31be30c0c58ef1682f387411c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:5c:a9:7f:c4:27:80:a7:ba:45:ab:f6:35:
a5:73:d7:4a:aa:02:bb:89:b0:6d:22:60:85:83:57:
5b:8a:2a:a9:89:c0:ef:06:de:5e:1f:df:99:96:ea:
5e:0c:05:c0:86:62:f3:11:ac:b4:6e:53:dd:d5:82:
64:43:de:40:76:29:9e:dd:15:0f:e1:ef:2e:27:10:
13:46:f0:dc:b4:52:9e:c3:a2:c7:2a:c6:0c:f5:cc:
41:12:71:2c:10:80:ef:f6:d6:99:06:bf:4b:ac:c2:
8a:ac:ae:c0:d7:c0:ae:9f:7c:2f:8f:d4:58:fd:42:
52:0b:fe:07:82:e5:ab:3d:6f:d1:a9:74:78:5d:33:
ce:df:0b:14:bd:5e:39:d1:3e:9e:78:c0:e5:a1:e5:
b9:db:96:ca:04:b5:84:98:fd:86:92:92:f0:75:a0:
c5:c9:69:a5:12:e5:05:bc:da:d5:62:3d:bc:5a:66:
db:ce:e7:a4:7c:53:2e:bb:b8:6b:75:f1:47:0a:06:
af:48:08:b6:8e:d0:4c:64:84:b8:c1:72:da:e2:42:
54:61:21:51:2b:ce:f2:c3:41:5e:5d:ea:5b:53:46:
6c:85:01:ea:f2:d1:62:18:60:b1:58:be:bb:99:4f:
1a:94:8c:49:07:de:c5:92:26:ed:2f:c4:75:b0:44:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C3:3C:FF:D9:72:AD:31:BE:30:C0:C5:8E:F1:68:2F:38:74:11:C5
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:db00::/29
Signature Algorithm: sha256WithRSAEncryption
49:f4:bf:f5:5f:0e:27:2f:4e:64:69:11:dc:f8:2d:8a:3e:fa:
23:bb:c0:5e:de:3a:6f:d6:89:36:22:03:79:be:bd:b3:9b:87:
2d:88:45:c6:8c:92:8d:84:e0:62:d8:60:92:48:b9:81:5e:24:
8f:4c:3e:d4:4c:ed:fb:f6:2c:f2:c0:85:75:03:dc:e9:8d:9a:
2b:bd:de:d3:1b:e5:f7:28:9a:bc:6a:51:ba:59:bc:3f:7c:f4:
4d:0a:47:59:93:a8:5c:c4:79:fb:07:82:76:ab:5f:ad:be:44:
e4:e2:33:43:83:48:ca:92:09:c8:33:11:eb:2f:17:d7:59:7f:
5b:30:fc:eb:42:ce:c9:7d:bc:bc:7d:65:19:77:b8:16:7d:4d:
6a:db:43:4d:84:86:1b:49:1d:2f:83:85:8a:f4:e9:1f:eb:1f:
a1:8f:7e:db:be:ae:ae:84:94:d0:c6:3a:85:6a:5c:58:77:17:
8f:1d:89:9d:4a:64:75:07:61:c0:d0:bb:74:3d:2b:51:43:06:
3e:fd:21:e5:a5:e1:63:a9:12:89:45:22:76:00:0d:08:cd:c0:
88:02:80:15:21:92:89:aa:0a:90:c9:45:ce:63:f2:2b:f2:b7:
f0:ec:b2:1a:cd:00:b2:e6:87:96:9d:83:c6:76:be:1e:09:cb:
3b:c6:f3:05
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1uvG9jKxNzVLYpbeIICCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOTg4NWVhMDIwZTY1MDA2MzE0ZWU5NDgwZGVmM2IzZWZj
MDM5ZTMwHhcNMjUwMTAxMjE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWMzM2NmZmQ5NzJhZDMxYmUzMGMwYzU4ZWYxNjgyZjM4NzQxMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2FcqX/EJ4CnukWr9jWlc9dKqgK7
ibBtImCFg1dbiiqpicDvBt5eH9+ZlupeDAXAhmLzEay0blPd1YJkQ95Adime3RUP
4e8uJxATRvDctFKew6LHKsYM9cxBEnEsEIDv9taZBr9LrMKKrK7A18Cun3wvj9RY
/UJSC/4HguWrPW/RqXR4XTPO3wsUvV450T6eeMDloeW525bKBLWEmP2GkpLwdaDF
yWmlEuUFvNrVYj28WmbbzuekfFMuu7hrdfFHCgavSAi2jtBMZIS4wXLa4kJUYSFR
K87yw0FeXepbU0ZshQHq8tFiGGCxWL67mU8alIxJB97FkibtL8R1sER1WQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJnDPP/Zcq0xvjDAxY7xaC84dBHFMB8GA1UdIwQY
MBaAFCGYheoCDmUAYxTulIDe87PvwDnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2Mt
ZmZjMDI1ODMxZjRmLzEvbWNNOF85bHlyVEctTU1ERmp2Rm9MemgwRWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2MtZmZjMDI1ODMxZjRm
LzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrbADAN
BgkqhkiG9w0BAQsFAAOCAQEASfS/9V8OJy9OZGkR3Pgtij76I7vAXt46b9aJNiID
eb69s5uHLYhFxoySjYTgYthgkki5gV4kj0w+1Ezt+/Ys8sCFdQPc6Y2aK73e0xvl
9yiavGpRulm8P3z0TQpHWZOoXMR5+weCdqtfrb5E5OIzQ4NIypIJyDMR6y8X11l/
WzD860LOyX28vH1lGXe4Fn1NattDTYSGG0kdL4OFivTpH+sfoY9+276uroSU0MY6
hWpcWHcXjx2JnUpkdQdhwNC7dD0rUUMGPv0h5aXhY6kSiUUidgANCM3AiAKAFSGS
iaoKkMlFzmPyK/K38OyyGs0AsuaHlp2Dxna+HgnLO8bzBQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:25 2025 by rpki-client