Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/mRW8ixERc8CtjMlW9EvgqC0e4oo.roa
File: mRW8ixERc8CtjMlW9EvgqC0e4oo.roa (raw, json)
Hash identifier: YD/p8xymMzl2xIWzM9G+g4jV3x1xzeR0QPPDn+58nno=
Subject key identifier: 99:15:BC:8B:11:11:73:C0:AD:8C:C9:56:F4:4B:E0:A8:2D:1E:E2:8A
Certificate issuer: /CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Certificate serial: 01968BAAB2F2C7BD9EBB003574F3AC54B353
Authority key identifier: C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/mRW8ixERc8CtjMlW9EvgqC0e4oo.roa
Signing time: Thu 01 May 2025 11:45:41 +0000
ROA not before: Thu 01 May 2025 11:45:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38915
IP address blocks: 178.21.216.0/21 maxlen: 21
2a00:1de0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:aa:b2:f2:c7:bd:9e:bb:00:35:74:f3:ac:54:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Validity
Not Before: May 1 11:45:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9915bc8b111173c0ad8cc956f44be0a82d1ee28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:2c:52:a0:a1:af:44:87:82:ba:23:f2:5d:
d5:2c:7e:1b:95:b0:e8:1c:15:a3:35:0a:82:8e:42:
5e:eb:5e:da:28:85:5d:86:e6:1e:59:33:b4:ec:f8:
11:83:df:7f:17:5f:d5:46:df:2a:3e:8c:4e:08:ad:
76:45:51:41:25:0b:20:cf:2a:d9:fd:3f:90:2a:41:
ae:9a:99:65:5b:9f:d3:05:68:d5:f6:18:a4:1f:27:
05:bf:ab:6e:41:49:2c:1a:af:91:55:16:db:f8:a6:
d0:f5:a9:fa:d0:c2:9a:ec:3a:0c:f6:eb:ad:d0:c4:
1f:6b:d5:e1:35:5f:42:57:3b:bc:52:3e:91:da:09:
5a:06:93:82:4c:81:9d:45:75:6e:e1:59:c4:12:c6:
af:96:07:02:31:97:73:af:6a:b1:10:31:82:8a:bc:
1a:93:00:bf:67:cf:cc:86:b1:6d:fe:8c:71:af:33:
58:ae:ad:63:9b:3a:2c:6d:8d:f0:70:f2:d6:0e:f5:
65:ef:ea:8c:bb:d6:ad:3c:a3:ef:b4:06:59:e1:b2:
bd:3f:53:ce:a9:96:69:2c:95:de:c9:da:a9:b8:00:
6c:7e:5f:3f:3f:cb:e9:3d:23:67:c8:a1:ce:d7:f3:
6e:da:ff:b4:ab:c3:0c:a8:fa:89:50:aa:2d:de:91:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:BC:8B:11:11:73:C0:AD:8C:C9:56:F4:4B:E0:A8:2D:1E:E2:8A
X509v3 Authority Key Identifier:
keyid:C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/mRW8ixERc8CtjMlW9EvgqC0e4oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.216.0/21
IPv6:
2a00:1de0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1e:22:d3:69:58:2f:23:f3:b6:79:d4:15:d9:6f:ee:f2:e9:
da:ec:80:a5:a4:70:67:74:84:76:d0:c1:d9:dd:37:1e:ae:28:
c4:47:6a:82:af:98:f4:68:5a:34:71:c7:ff:f2:0f:f0:c0:8e:
0c:eb:51:42:da:33:d3:d4:10:fe:3e:3f:66:68:cb:76:c2:50:
7b:08:28:fa:32:0d:7d:c8:ce:79:01:cf:4a:20:be:c7:3b:30:
03:48:fd:8e:06:ec:f4:dc:43:41:b2:c3:5e:f0:8b:bf:5e:5f:
45:8a:ba:f5:ec:e8:94:44:9f:54:fe:37:51:87:b5:2d:67:5b:
23:1f:14:21:dc:24:70:71:98:ea:cc:1f:f0:d8:80:5b:57:45:
2f:1c:e1:34:85:be:c6:81:20:a8:0f:0d:4a:eb:a9:f1:57:f5:
38:00:38:b1:72:43:72:ae:81:19:94:2f:d8:fa:25:67:4f:84:
c8:50:77:53:4f:ba:08:89:e2:e4:e2:03:92:1b:c1:18:46:ee:
a2:94:df:de:e4:38:92:73:cb:fa:d3:81:35:3c:15:47:1d:bf:
c7:88:e7:77:56:4b:c5:c4:53:5e:b4:0e:e1:50:72:f2:ff:8b:
fe:65:26:4f:92:b0:11:14:0b:f4:c6:04:4e:74:87:73:eb:ac:
7d:98:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:27 2025 by rpki-client