Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-9ylyTsIvwCdRQQYUmD9iVl_aPg.roa
File: 1-9ylyTsIvwCdRQQYUmD9iVl_aPg.roa (raw, json)
Hash identifier: O6HPgSddYTEe9tVF36cMrmc6dIxFqAnKsq+Kn3NSyQg=
Subject key identifier: FB:DC:A5:C9:3B:08:BF:00:9D:45:04:18:52:60:FD:89:59:7F:68:F8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01956D46EE70CEF446FCF3E80D0971FAA3A0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-9ylyTsIvwCdRQQYUmD9iVl_aPg.roa
Signing time: Thu 06 Mar 2025 21:05:19 +0000
ROA not before: Thu 06 Mar 2025 21:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:6d46:1377/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6d:46:ee:70:ce:f4:46:fc:f3:e8:0d:09:71:fa:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 6 21:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbdca5c93b08bf009d4504185260fd89597f68f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:8b:fc:32:72:7a:02:ed:97:f2:63:04:7f:
a9:11:f5:73:b1:23:f5:d8:82:ad:1a:fa:ae:9e:04:
f7:ac:4b:2c:ab:2b:fe:a7:81:01:e7:0c:72:bb:ad:
75:05:2e:be:b9:52:fe:17:77:fb:6b:07:55:1b:1c:
e9:2d:04:be:7f:97:f9:48:c9:73:66:5d:60:ff:e0:
75:36:9b:27:3e:db:22:27:fc:26:a2:b5:2c:4b:2c:
65:e0:71:94:1f:d4:b5:ed:20:28:d2:86:40:fc:81:
23:92:e4:57:e7:de:14:87:e1:11:b7:62:74:bd:3f:
07:93:3c:ec:5d:9e:6a:ab:e6:ae:ae:6b:44:d6:63:
bc:61:d9:ac:ee:a7:04:05:f1:15:e5:28:ee:bc:65:
4c:16:a8:20:c6:b2:d8:76:4a:a1:ed:a6:7e:91:b0:
74:c9:fa:7b:4e:2f:24:33:d7:dd:4c:b8:ad:06:55:
52:e3:76:29:90:96:f2:a4:55:8b:10:8c:51:ea:9a:
c9:a7:0f:09:ac:36:88:3c:13:63:d6:e1:d0:11:67:
ef:4d:3e:5b:1f:a3:17:70:0b:c6:98:58:ff:d5:10:
af:9c:9b:28:e5:46:b1:be:d1:d8:ee:4e:50:18:0f:
44:e0:ef:47:0c:6e:80:21:be:1a:c1:cd:47:b7:87:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:A5:C9:3B:08:BF:00:9D:45:04:18:52:60:FD:89:59:7F:68:F8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-9ylyTsIvwCdRQQYUmD9iVl_aPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:6d46:1377/128
Signature Algorithm: sha256WithRSAEncryption
35:78:2b:33:0e:3e:63:5f:e3:5f:61:22:5f:42:30:3b:cd:b0:
43:6d:ee:38:2d:36:4c:cc:c4:b1:bc:b1:3b:bc:c0:fc:60:8f:
83:5a:91:9c:c0:ea:23:18:fe:e2:01:7c:b8:60:20:99:65:4f:
0b:ff:8e:fd:85:64:43:dd:c0:ea:2f:3a:31:2f:30:17:fd:7b:
f6:1a:84:17:66:a5:95:a4:11:80:df:95:f0:13:87:77:3c:91:
9d:2b:38:89:3c:3c:d3:f9:19:6e:e7:85:32:a3:2b:78:f1:08:
ac:5a:f6:c8:0b:0a:c8:7c:1b:fb:b3:0d:b3:e4:bd:ec:23:0b:
58:3c:1e:0f:b1:81:58:91:57:ac:19:03:c8:ab:2d:d6:e6:6b:
b3:24:43:12:80:48:60:51:6f:b4:f4:42:72:f9:ca:7f:a7:9c:
5e:a8:8a:fe:20:a3:5a:e1:25:ba:c9:2f:30:e9:b2:9d:36:bc:
b8:45:3c:0a:df:be:c1:6b:15:46:37:ac:af:43:92:a6:fa:12:
5f:c2:75:17:38:7c:40:14:17:e8:e6:06:48:c2:ae:6c:ed:95:
c0:4a:22:58:04:ed:ca:ba:e6:93:fb:db:9b:95:3f:fa:7d:99:
d1:b2:ca:19:3c:0b:21:8a:01:c2:42:89:ab:3a:f4:1c:26:97:
65:98:f7:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:16 2025 by rpki-client