Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcX-T6Afd9o4NeAmNqhYHV2lPjg.roa
File: mcX-T6Afd9o4NeAmNqhYHV2lPjg.roa (raw, json)
Hash identifier: KqizY/S4Lcq3uWgcEpIO80cwSJyi7cMDeItyM4lCtNI=
Subject key identifier: 99:C5:FE:4F:A0:1F:77:DA:38:35:E0:26:36:A8:58:1D:5D:A5:3E:38
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487EA2243C1CDDF78141194A24A9AB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcX-T6Afd9o4NeAmNqhYHV2lPjg.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209797
IP address blocks: 192.71.207.0/24 maxlen: 24
192.71.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:a2:24:3c:1c:dd:f7:81:41:19:4a:24:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99c5fe4fa01f77da3835e02636a8581d5da53e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:9f:40:80:d7:00:2e:cb:aa:8f:c6:ef:16:
32:08:43:cb:95:a7:9b:8c:b9:f8:89:61:5a:d3:52:
01:f0:85:02:2f:50:f0:58:cc:92:aa:21:df:1c:a2:
a0:91:69:8f:b4:2b:ce:db:8d:da:43:c1:e6:85:fc:
75:92:b4:e9:4e:77:4c:67:d5:6f:aa:8c:c1:d0:e4:
6c:67:de:9a:7b:05:f4:fe:80:96:b7:2f:18:b2:e2:
50:58:19:1c:96:42:ff:b7:60:36:b6:e3:a3:65:d1:
b8:d0:8f:e0:a6:60:78:69:b6:80:42:df:31:6f:a9:
2d:ce:37:90:1d:bf:8d:15:e6:68:55:17:5b:01:7d:
75:97:e1:ec:8d:64:eb:84:10:df:72:b5:b1:49:cb:
ab:ff:d3:56:c2:39:e9:e5:67:36:de:a2:cc:8c:81:
19:e4:dd:6e:a9:45:33:10:a8:a7:51:72:d1:04:77:
32:33:37:4e:37:91:fd:65:d7:da:d8:f6:c6:ba:05:
07:d7:69:7f:a3:88:b2:55:63:20:1a:f4:4f:33:bb:
14:36:0d:c3:ea:94:9d:3b:aa:03:33:be:bc:31:6e:
f2:ff:3f:53:e0:4b:25:37:f1:32:3d:c5:01:0a:ac:
21:0f:07:16:6c:af:1c:71:8a:24:79:f2:d8:a9:f9:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:FE:4F:A0:1F:77:DA:38:35:E0:26:36:A8:58:1D:5D:A5:3E:38
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/mcX-T6Afd9o4NeAmNqhYHV2lPjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.207.0-192.71.208.255
Signature Algorithm: sha256WithRSAEncryption
44:e4:37:39:bd:4a:6b:ab:29:13:8c:40:4c:d1:bf:cd:40:59:
b0:50:39:4c:d9:2c:9d:44:cc:c8:56:41:b4:29:a5:fe:b0:18:
d1:0b:ce:20:9e:5e:40:62:ba:7f:4f:16:62:83:03:33:c8:f2:
be:e5:89:2a:e1:bc:5b:0f:47:47:82:9e:70:70:af:09:27:7c:
3a:ca:cb:71:07:2f:25:8f:e9:da:43:a0:86:3d:98:d9:7b:7c:
d0:63:b6:1e:96:04:42:7c:f5:ca:be:64:09:00:1f:94:12:ad:
a3:98:fa:70:e0:19:31:b8:4c:d6:58:93:c8:21:23:6b:fa:f6:
21:ae:55:d1:65:3c:fc:2f:db:d0:bc:1c:71:6b:b9:68:85:aa:
90:53:f6:7e:df:51:18:76:32:ca:91:69:f0:f1:ab:f7:f2:a8:
cd:eb:68:40:c6:73:b0:63:fc:b2:60:86:f0:a7:aa:b3:b7:c7:
c1:1d:22:4f:b5:04:9d:ac:21:25:3f:5e:c8:0a:9f:cf:4b:4c:
04:23:9c:7e:3c:97:37:79:19:cd:95:4c:27:09:d1:6a:e3:2a:
11:f4:6a:95:96:5b:51:5e:11:4d:f7:c2:c3:9a:a5:b5:65:16:
bc:0e:66:e7:6d:e9:1f:24:e1:f3:0d:09:1a:e9:b6:f3:03:80:
00:82:75:95
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnSH6iJDwc3feBQRlKJKmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWM1ZmU0ZmEwMWY3N2RhMzgzNWUwMjYzNmE4NTgxZDVkYTUzZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXqfQIDXAC7Lqo/G7xYyCEPLlaeb
jLn4iWFa01IB8IUCL1DwWMySqiHfHKKgkWmPtCvO243aQ8Hmhfx1krTpTndMZ9Vv
qozB0ORsZ96aewX0/oCWty8YsuJQWBkclkL/t2A2tuOjZdG40I/gpmB4abaAQt8x
b6ktzjeQHb+NFeZoVRdbAX11l+HsjWTrhBDfcrWxScur/9NWwjnp5Wc23qLMjIEZ
5N1uqUUzEKinUXLRBHcyMzdON5H9Zdfa2PbGugUH12l/o4iyVWMgGvRPM7sUNg3D
6pSdO6oDM768MW7y/z9T4EslN/EyPcUBCqwhDwcWbK8ccYokefLYqfmKgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJnF/k+gH3faODXgJjaoWB1dpT44MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvbWNYLVQ2QWZkOW80TmVBbU5xaFlIVjJsUGpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAR88D
BADAR9AwDQYJKoZIhvcNAQELBQADggEBAETkNzm9SmurKROMQEzRv81AWbBQOUzZ
LJ1EzMhWQbQppf6wGNELziCeXkBiun9PFmKDAzPI8r7liSrhvFsPR0eCnnBwrwkn
fDrKy3EHLyWP6dpDoIY9mNl7fNBjth6WBEJ89cq+ZAkAH5QSraOY+nDgGTG4TNZY
k8ghI2v69iGuVdFlPPwv29C8HHFruWiFqpBT9n7fURh2MsqRafDxq/fyqM3raEDG
c7Bj/LJghvCnqrO3x8EdIk+1BJ2sISU/XsgKn89LTAQjnH48lzd5Gc2VTCcJ0Wrj
KhH0apWWW1FeEU33wsOapbVlFrwOZudt6R8k4fMNCRrptvMDgACCdZU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:24 2025 by rpki-client