Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0Nw0WI77EIid1dNBKJJ-KBwy9cQ.roa
File: 0Nw0WI77EIid1dNBKJJ-KBwy9cQ.roa (raw, json)
Hash identifier: EgV9sDTL8h+MsaVgx8Mp6U954h+7HOf8ohlZjuTGibE=
Subject key identifier: D0:DC:34:58:8E:FB:10:88:9D:D5:D3:41:28:92:7E:28:1C:32:F5:C4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019424C2946E25CC7529D257CEC71F1B5593
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0Nw0WI77EIid1dNBKJJ-KBwy9cQ.roa
Signing time: Thu 02 Jan 2025 02:05:19 +0000
ROA not before: Thu 02 Jan 2025 02:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:24c2:963/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:c2:94:6e:25:cc:75:29:d2:57:ce:c7:1f:1b:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 2 02:05:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0dc34588efb10889dd5d34128927e281c32f5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:61:b4:92:aa:af:c7:d7:5b:4d:f0:e2:89:
7f:dd:9c:d4:51:99:8e:f7:fb:2a:5f:07:2a:1c:20:
08:12:da:17:a3:2e:ae:f0:af:d1:d1:e1:1b:e0:c1:
2b:d6:b1:f5:e3:0b:34:a9:07:e8:de:0e:43:3a:29:
8d:9d:54:37:fa:55:d4:71:d2:66:e4:f8:69:13:ce:
48:9f:b4:16:c1:ea:3d:44:70:3a:9c:ae:64:ab:af:
78:b9:c4:0e:8a:01:48:fc:2e:fa:e0:43:a6:e1:24:
56:9b:30:2f:c2:95:66:9e:b3:3e:16:92:af:cf:ed:
35:f8:24:25:fe:c6:b6:51:a6:e2:dc:af:a6:22:fb:
08:61:0d:57:04:ff:fd:31:28:26:a6:e3:12:77:35:
d3:77:18:1c:c2:2a:e7:72:1f:4a:bf:52:f2:38:23:
a7:ea:6d:87:04:33:3d:4c:66:8b:d0:bb:21:06:85:
2d:19:9f:71:97:18:46:6f:43:da:11:53:26:17:70:
4c:77:c5:02:0f:5d:06:29:01:a1:be:7a:74:7a:bb:
4c:93:f0:da:19:06:c3:32:67:fd:77:5f:22:f3:ab:
04:95:33:61:27:7e:42:c2:90:22:79:93:38:00:e6:
c0:f3:28:bf:68:04:5f:c7:54:9c:df:fd:ca:f5:21:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:34:58:8E:FB:10:88:9D:D5:D3:41:28:92:7E:28:1C:32:F5:C4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0Nw0WI77EIid1dNBKJJ-KBwy9cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:24c2:963/128
Signature Algorithm: sha256WithRSAEncryption
6e:71:5f:8e:8d:24:81:a5:1c:67:88:59:5a:3d:20:f8:eb:75:
ad:0d:10:59:90:e1:6f:6f:82:7d:cb:da:1f:1d:ea:5d:10:4d:
fd:e8:1b:0e:68:d1:34:7b:fe:ad:ce:5c:70:8f:04:18:34:da:
a5:6c:e5:c7:4c:65:58:2a:b8:8e:0f:0e:a2:a7:a4:64:8c:da:
37:de:b6:84:62:02:e2:d8:ee:5f:00:7b:9a:0a:b6:42:e6:6e:
c7:92:42:ae:e8:fd:d0:ad:a4:8a:25:56:0a:67:7b:36:ad:53:
d1:bd:09:ae:f8:55:d3:c5:11:57:a5:dc:40:d8:0e:2e:17:08:
6c:15:6f:90:9a:22:70:6e:94:3a:d7:4d:24:b9:3b:9f:60:be:
a5:47:4d:a7:d7:ad:d8:6a:36:d7:5b:d2:fb:c1:af:23:b6:77:
44:9a:de:19:aa:99:76:00:3b:3f:2f:f5:96:3c:19:47:9d:e9:
82:06:f9:9d:d1:82:e7:eb:28:38:08:0c:ff:a2:76:86:40:09:
42:a7:e8:8d:e5:d9:3c:45:4a:8a:fe:40:d7:49:e9:5b:e0:e3:
89:90:55:ea:42:ca:c1:f5:a9:3d:0e:19:66:de:58:7e:b6:dd:
0d:1a:96:0c:a6:91:9b:68:80:33:d0:ea:42:15:63:85:51:b4:
6d:1f:1d:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:09 2025 by rpki-client