Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/MgEamC_nYXr-O1L8gNkKWwREO9A.roa
File: MgEamC_nYXr-O1L8gNkKWwREO9A.roa (raw, json)
Hash identifier: 7Ygll+ac4jo3PQdZyo9rGPbs90jqBalEnvFAhWRyJ0Y=
Subject key identifier: 32:01:1A:98:2F:E7:61:7A:FE:3B:52:FC:80:D9:0A:5B:04:44:3B:D0
Certificate issuer: /CN=9905408ed5d23becac905c1a2e0a87608ad34f98
Certificate serial: 01858BD700E3616B692DBF3346F6CC426187
Authority key identifier: 99:05:40:8E:D5:D2:3B:EC:AC:90:5C:1A:2E:0A:87:60:8A:D3:4F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQVAjtXSO-yskFwaLgqHYIrTT5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/MgEamC_nYXr-O1L8gNkKWwREO9A.roa
Signing time: Sat 07 Jan 2023 10:46:41 +0000
ROA not before: Sat 07 Jan 2023 10:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206170
IP address blocks: 62.3.44.0/24 maxlen: 24
2a12:fe00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:d7:00:e3:61:6b:69:2d:bf:33:46:f6:cc:42:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9905408ed5d23becac905c1a2e0a87608ad34f98
Validity
Not Before: Jan 7 10:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32011a982fe7617afe3b52fc80d90a5b04443bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:4d:86:f3:92:12:e4:60:ba:ff:db:bd:cd:
58:38:b2:64:99:d4:38:54:b0:53:a1:5b:39:9e:0b:
77:ec:99:8b:ee:ab:f8:96:9c:a8:af:58:87:cb:0d:
6e:3f:a9:3d:f0:98:fb:53:04:d6:60:50:d7:ef:53:
f9:7b:ef:43:40:d1:ba:b1:58:14:fd:25:83:60:f7:
1a:c6:21:95:f3:30:ea:9a:b6:46:ad:c1:ac:e0:ad:
10:03:b9:b4:67:2d:f6:2a:05:e4:bc:e7:d8:e1:0f:
76:a3:b5:33:af:ae:3a:5e:5a:85:69:4a:f8:eb:a4:
f0:a3:d1:61:32:c5:d2:1a:eb:76:d7:ee:26:75:ee:
47:ce:36:a3:39:9a:d7:d9:33:f0:d9:ad:c8:b2:c0:
ec:16:6c:53:47:e4:2f:4b:c6:ca:1d:43:75:16:8a:
f5:71:25:1e:cf:15:57:e4:42:9d:09:0e:86:be:2a:
1d:2c:b1:66:cd:6a:b2:1b:00:57:f2:f7:ff:41:61:
e6:c1:4c:63:9a:0e:a3:13:fb:88:66:ca:3a:f9:50:
42:ca:21:76:e2:66:4c:7c:a2:be:37:3d:24:ce:64:
40:6c:1a:f3:4d:fe:52:7a:8f:b9:eb:f6:b8:6f:2d:
51:84:9a:be:81:83:97:b1:16:87:80:1c:14:be:e2:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:1A:98:2F:E7:61:7A:FE:3B:52:FC:80:D9:0A:5B:04:44:3B:D0
X509v3 Authority Key Identifier:
keyid:99:05:40:8E:D5:D2:3B:EC:AC:90:5C:1A:2E:0A:87:60:8A:D3:4F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQVAjtXSO-yskFwaLgqHYIrTT5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/MgEamC_nYXr-O1L8gNkKWwREO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a010cc-75e3-4cbb-ba5e-8bf893b889c2/1/mQVAjtXSO-yskFwaLgqHYIrTT5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.44.0/24
IPv6:
2a12:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
11:ae:b2:13:3a:98:ad:a7:c7:98:5b:e0:b9:57:97:2c:6a:cb:
a7:db:f3:69:38:bc:f1:15:19:47:cd:58:65:61:89:5c:43:6e:
b5:f7:79:34:1b:61:48:01:87:86:34:7c:cb:ba:d7:6f:d2:41:
94:51:10:d2:37:02:6b:e5:46:4a:55:ed:bb:30:72:b0:08:ae:
4e:78:85:2f:11:13:a3:6e:c5:4e:1f:d9:20:f0:03:3d:c8:51:
cc:11:c2:97:56:ac:03:58:05:87:89:8a:2f:b9:9f:5a:44:8f:
03:96:11:36:02:23:34:4f:2e:6e:6e:2e:b5:12:03:e0:fd:58:
9b:d4:fc:43:f4:7e:b0:98:ae:91:aa:19:b6:d8:03:79:ff:9a:
e9:94:70:f3:48:8e:c9:c9:99:a2:37:4c:ac:a4:88:26:70:b5:
25:21:2d:16:14:c8:db:4d:18:d6:86:c4:4c:fa:6c:ad:93:62:
cb:2c:42:e6:0c:33:31:6a:a4:8a:e3:38:d4:85:a5:9f:90:91:
05:0f:d0:ff:86:a5:2d:41:c5:17:7a:f4:b2:1b:22:78:e9:77:
08:74:b3:df:2b:d2:0f:b9:b3:27:32:a0:32:e2:f2:dc:f1:ac:
a9:dc:78:7e:57:9b:69:4c:8d:54:40:3b:08:0a:8f:71:67:5d:
7e:6d:ca:c5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYWL1wDjYWtpLb8zRvbMQmGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDU0MDhlZDVkMjNiZWNhYzkwNWMxYTJlMGE4NzYwOGFk
MzRmOTgwHhcNMjMwMTA3MTA0NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjAxMWE5ODJmZTc2MTdhZmUzYjUyZmM4MGQ5MGE1YjA0NDQzYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsdNhvOSEuRguv/bvc1YOLJkmdQ4
VLBToVs5ngt37JmL7qv4lpyor1iHyw1uP6k98Jj7UwTWYFDX71P5e+9DQNG6sVgU
/SWDYPcaxiGV8zDqmrZGrcGs4K0QA7m0Zy32KgXkvOfY4Q92o7Uzr646XlqFaUr4
66Two9FhMsXSGut21+4mde5HzjajOZrX2TPw2a3IssDsFmxTR+QvS8bKHUN1For1
cSUezxVX5EKdCQ6GviodLLFmzWqyGwBX8vf/QWHmwUxjmg6jE/uIZso6+VBCyiF2
4mZMfKK+Nz0kzmRAbBrzTf5Seo+56/a4by1RhJq+gYOXsRaHgBwUvuKpZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDIBGpgv52F6/jtS/IDZClsERDvQMB8GA1UdIwQY
MBaAFJkFQI7V0jvsrJBcGi4Kh2CK00+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFWQWp0WFNPLXlza0Z3YUxncUhZSXJUVDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hMDEwY2MtNzVlMy00Y2JiLWJhNWUt
OGJmODkzYjg4OWMyLzEvTWdFYW1DX25ZWHItTzFMOGdOa0tXd1JFTzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hMDEwY2MtNzVlMy00Y2JiLWJhNWUtOGJmODkzYjg4OWMy
LzEvbVFWQWp0WFNPLXlza0Z3YUxncUhZSXJUVDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAPgMsMA0E
AgACMAcDBQMqEv4AMA0GCSqGSIb3DQEBCwUAA4IBAQARrrITOpitp8eYW+C5V5cs
asun2/NpOLzxFRlHzVhlYYlcQ26193k0G2FIAYeGNHzLutdv0kGUURDSNwJr5UZK
Ve27MHKwCK5OeIUvEROjbsVOH9kg8AM9yFHMEcKXVqwDWAWHiYovuZ9aRI8DlhE2
AiM0Ty5ubi61EgPg/Vib1PxD9H6wmK6Rqhm22AN5/5rplHDzSI7JyZmiN0yspIgm
cLUlIS0WFMjbTRjWhsRM+mytk2LLLELmDDMxaqSK4zjUhaWfkJEFD9D/hqUtQcUX
evSyGyJ46XcIdLPfK9IPubMnMqAy4vLc8ayp3Hh+V5tpTI1UQDsICo9xZ11+bcrF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org