Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/kGUrxsehVGx_VV3PB1j3nvTJqck.roa
File: kGUrxsehVGx_VV3PB1j3nvTJqck.roa (raw, json)
Hash identifier: mxI4GSv/CcamnDAsYQknRIm0MOYz9akW2xapHWLW1u8=
Subject key identifier: 90:65:2B:C6:C7:A1:54:6C:7F:55:5D:CF:07:58:F7:9E:F4:C9:A9:C9
Certificate issuer: /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial: 018573439BB87362176FD6526367FBB37262
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/kGUrxsehVGx_VV3PB1j3nvTJqck.roa
Signing time: Mon 02 Jan 2023 16:14:48 +0000
ROA not before: Mon 02 Jan 2023 16:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 2001:678:39c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:9b:b8:73:62:17:6f:d6:52:63:67:fb:b3:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
Validity
Not Before: Jan 2 16:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90652bc6c7a1546c7f555dcf0758f79ef4c9a9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:3d:90:3b:6b:9d:cc:e4:32:1f:5a:9c:90:
3a:23:ac:18:0c:d1:82:f8:58:e1:d7:d9:ae:0d:5f:
d3:8d:45:e7:d9:76:91:75:ed:b6:a8:c1:d8:be:b6:
bd:45:f4:4a:3f:e1:2f:44:ce:fb:bc:65:9c:33:ab:
34:c7:60:02:31:73:fb:eb:62:4b:66:8e:27:8e:8a:
e1:6c:e4:0e:dd:84:4c:2b:54:fa:d5:9b:d4:c9:a2:
2a:4c:0b:4a:55:ed:9c:64:f3:6e:0e:8d:23:e0:2f:
5a:cc:db:90:3b:28:db:20:7d:9a:0c:27:74:e8:b4:
ae:2f:88:87:3c:96:8d:02:b6:35:d9:e7:fd:a2:43:
b2:52:47:44:22:90:b7:8e:48:05:87:71:8c:cb:33:
fe:60:75:7b:f2:4d:13:0d:11:be:ef:84:74:c1:bd:
83:80:36:9c:c6:c9:98:b7:57:ca:bb:5c:0c:f0:e3:
0f:e8:94:a0:22:6d:15:77:5e:60:4e:13:f7:96:f1:
8e:de:76:df:7d:db:79:e7:9b:0c:d0:90:4b:33:60:
43:f5:21:26:37:95:e0:74:34:9f:8d:9c:75:b2:a7:
7e:7e:49:0c:5b:e1:db:ec:eb:a1:42:0e:ee:99:38:
40:fb:19:a8:85:88:9d:1a:4f:f5:49:b0:ff:b7:8c:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:2B:C6:C7:A1:54:6C:7F:55:5D:CF:07:58:F7:9E:F4:C9:A9:C9
X509v3 Authority Key Identifier:
keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/kGUrxsehVGx_VV3PB1j3nvTJqck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:39c::/48
Signature Algorithm: sha256WithRSAEncryption
0e:27:08:3d:e0:76:9d:e2:05:c3:de:7c:d9:3f:b2:e2:a0:6d:
55:a7:db:13:4a:ab:18:51:6e:ce:2a:59:c8:ea:55:2f:d4:16:
ba:10:41:6d:76:ee:34:61:37:d0:85:db:e0:f9:ed:53:dc:03:
ba:fa:44:0f:37:74:58:b5:c5:82:da:7b:ee:4c:2b:6a:47:37:
b1:6a:a6:f0:5a:d7:cd:52:c6:08:56:26:bf:7d:df:75:5d:b2:
af:4b:96:2a:c2:83:2d:81:8d:fc:f5:8d:38:04:99:e4:c6:ca:
e7:96:60:92:88:1f:68:38:8b:03:b7:83:e7:72:97:53:6c:e4:
c1:67:9c:c1:39:57:22:cf:7c:c2:8a:44:58:1a:3d:a2:ee:6e:
8d:ce:ac:d1:6f:9b:cb:e5:9d:44:3f:bc:77:9b:ee:15:30:60:
9b:e9:ed:26:54:43:f0:16:b7:27:7f:c5:60:b4:45:e9:38:1f:
74:5f:8b:0a:e2:f7:45:d3:20:5e:06:38:4e:bd:35:1b:09:a3:
2c:8e:16:a3:c9:59:65:32:0d:51:26:3c:f5:95:27:29:dc:dd:
ba:03:a5:ab:8b:b0:24:90:e7:b2:b2:e7:77:a6:90:e0:03:db:
4c:45:9d:80:4e:f6:c4:51:8c:69:85:e7:21:91:77:06:9c:2a:
92:b2:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:24:58 2025 by rpki-client