Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/mMmymzplWMeJzzgdG7P3tHtpBaQ.roa
File: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (raw, json)
Hash identifier: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=
Subject key identifier: 98:C9:B2:9B:3A:65:58:C7:89:CF:38:1D:1B:B3:F7:B4:7B:69:05:A4
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 0194236A46727D70436CB54EFD9168003C7A
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/mMmymzplWMeJzzgdG7P3tHtpBaQ.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199568
IP address blocks: 2001:678:7b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:46:72:7d:70:43:6c:b5:4e:fd:91:68:00:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c9b29b3a6558c789cf381d1bb3f7b47b6905a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:ca:72:1d:15:a3:e7:1f:58:c9:a8:b3:77:
79:df:81:9e:9d:f2:50:a9:1b:3a:5a:93:51:cf:9b:
da:af:0a:f3:b3:e8:d1:d4:0e:20:77:fb:65:c3:49:
b6:3f:5a:e9:6a:f5:bd:ee:3b:f0:47:7b:06:64:18:
a2:e7:41:f7:f2:91:c3:c4:58:d7:3f:98:bd:25:df:
aa:16:87:2b:8f:67:65:a3:ec:ae:cd:ef:c8:31:17:
57:a9:fd:3a:70:8c:d0:b5:09:2e:5c:b6:c6:21:ad:
a7:7a:70:f1:21:a1:06:db:30:1b:fb:b7:e9:88:c8:
1b:88:5f:f5:c2:a7:54:96:aa:6f:81:9a:a7:27:b5:
f1:84:68:20:6c:48:c2:d5:98:f5:8f:fb:d6:28:da:
68:01:1c:ed:d0:66:13:66:41:b0:fc:d7:2d:ae:7f:
f0:c3:42:45:22:90:1c:96:33:07:ac:d1:b2:f0:08:
d6:d1:64:39:17:bf:78:86:9c:48:6d:0c:7d:44:2a:
1a:4d:34:b7:82:c4:9c:f2:bb:3c:fc:89:57:f5:cc:
fa:bc:24:50:41:7e:8b:4d:d7:bb:b3:07:7d:bf:f7:
e6:19:d8:ee:76:4b:90:48:7d:eb:81:2a:73:43:10:
53:fc:6a:d5:b2:31:6d:73:78:9e:21:83:2b:81:7f:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:B2:9B:3A:65:58:C7:89:CF:38:1D:1B:B3:F7:B4:7B:69:05:A4
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/mMmymzplWMeJzzgdG7P3tHtpBaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7b0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:54:1d:27:c1:ee:31:3d:1b:67:7e:bd:61:d4:f3:6d:65:db:
4e:92:62:90:c4:97:ef:85:99:f2:8c:0a:54:9e:ea:a7:7d:d8:
b5:49:6d:9e:35:29:db:98:c1:6a:25:58:24:a0:de:03:6f:37:
5e:8a:fb:ed:c1:95:d4:9e:1d:e1:c6:3f:db:bd:bb:d0:61:08:
92:24:6f:d8:67:9e:16:51:00:9d:82:fc:89:bc:f4:85:ad:75:
05:c2:5e:50:91:66:59:fb:bb:4c:2a:ac:c4:7c:67:8f:d0:d6:
bf:4c:9c:57:e6:db:60:cf:d9:d1:c0:cb:4b:8e:28:61:cd:b6:
9d:6a:2c:53:4d:5a:05:db:89:d8:95:d8:33:3b:a4:eb:3e:38:
1c:db:18:92:8c:2c:b2:f3:60:e9:9c:8d:91:ca:c7:53:c8:43:
80:d7:05:76:51:f2:25:56:1a:30:ae:56:3b:97:b2:48:af:7b:
0f:78:16:c3:d4:8b:9c:31:23:79:e9:79:4f:01:d2:c0:c6:1c:
4f:78:0c:ae:f4:6a:1e:9b:d6:b1:bb:28:53:35:2a:30:c7:f2:
fb:18:c6:bf:aa:3d:fa:d1:90:98:73:25:3e:e3:02:8c:a6:73:
4a:30:67:82:18:c4:73:39:30:28:86:f6:f7:39:fb:69:bb:18:
f8:62:ec:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjakZyfXBDbLVO/ZFoADx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTkzOGJjNzIwMjgyNDQ0YmFiZDNiMjZiMzQ5MmI0NTZh
ZGIzOTcwHhcNMjUwMTAxMTk0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGM5YjI5YjNhNjU1OGM3ODljZjM4MWQxYmIzZjdiNDdiNjkwNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5LKch0Vo+cfWMmos3d534GenfJQ
qRs6WpNRz5varwrzs+jR1A4gd/tlw0m2P1rpavW97jvwR3sGZBii50H38pHDxFjX
P5i9Jd+qFocrj2dlo+yuze/IMRdXqf06cIzQtQkuXLbGIa2nenDxIaEG2zAb+7fp
iMgbiF/1wqdUlqpvgZqnJ7XxhGggbEjC1Zj1j/vWKNpoARzt0GYTZkGw/Nctrn/w
w0JFIpAcljMHrNGy8AjW0WQ5F794hpxIbQx9RCoaTTS3gsSc8rs8/IlX9cz6vCRQ
QX6LTde7swd9v/fmGdjudkuQSH3rgSpzQxBT/GrVsjFtc3ieIYMrgX8WwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJjJsps6ZVjHic84HRuz97R7aQWkMB8GA1UdIwQY
MBaAFLMZOLxyAoJES6vTsms0krRWrbOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEt
OWI1ZGY4NWMxMTQwLzEvbU1teW16cGxXTWVKenpnZEc3UDN0SHRwQmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83NWRlZGUtNTQ0OS00ZDQ3LTliNTEtOWI1ZGY4NWMxMTQw
LzEvc3hrNHZISUNna1JMcTlPeWF6U1N0RmF0czVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAew
MA0GCSqGSIb3DQEBCwUAA4IBAQA8VB0nwe4xPRtnfr1h1PNtZdtOkmKQxJfvhZny
jApUnuqnfdi1SW2eNSnbmMFqJVgkoN4DbzdeivvtwZXUnh3hxj/bvbvQYQiSJG/Y
Z54WUQCdgvyJvPSFrXUFwl5QkWZZ+7tMKqzEfGeP0Na/TJxX5ttgz9nRwMtLjihh
zbadaixTTVoF24nYldgzO6TrPjgc2xiSjCyy82DpnI2RysdTyEOA1wV2UfIlVhow
rlY7l7JIr3sPeBbD1IucMSN56XlPAdLAxhxPeAyu9Goem9axuyhTNSowx/L7GMa/
qj360ZCYcyU+4wKMpnNKMGeCGMRzOTAohvb3Oftpuxj4Yuwt
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:46 2025 by rpki-client