Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-TpzZnQxUaNMZrzpHa9VclzMYKQ.roa
File: 1-TpzZnQxUaNMZrzpHa9VclzMYKQ.roa (raw, json)
Hash identifier: lZN9QwL8ooMq1HRTLWDS7ygpnoOQgp2MTe4fxGcxpiY=
Subject key identifier: F9:3A:73:66:74:31:51:A3:4C:66:BC:E9:1D:AF:55:72:5C:CC:60:A4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944F0F6FB4DA019B1A522E1C38BB592CB3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-TpzZnQxUaNMZrzpHa9VclzMYKQ.roa
Signing time: Fri 10 Jan 2025 07:13:19 +0000
ROA not before: Fri 10 Jan 2025 07:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:0f:6f:b4:da:01:9b:1a:52:2e:1c:38:bb:59:2c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 10 07:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93a7366743151a34c66bce91daf55725ccc60a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:81:21:fd:35:8c:c4:b3:58:58:b5:d5:4b:
91:0f:ae:3e:cd:b3:83:61:57:e6:ee:cc:9d:2d:78:
39:9a:b3:de:34:70:db:07:ba:0d:b5:19:cc:27:81:
11:98:60:6c:d7:db:69:bc:ea:36:03:0b:a2:86:d4:
c6:d4:2b:4a:09:4a:36:ca:35:3b:ff:04:9a:1f:b5:
f5:e7:ec:29:29:d6:11:4b:95:11:46:86:12:38:cf:
ef:03:ce:ab:67:9b:d4:0d:e9:4e:9c:ad:73:6a:8c:
11:bb:c2:b8:bc:8a:c0:29:d5:2d:4b:bc:e0:33:65:
51:84:38:21:21:39:23:eb:a2:0a:d9:d2:99:c0:f1:
a1:00:a1:2a:00:ee:c5:ec:2e:ed:34:5d:81:d4:7a:
68:58:63:2d:27:24:21:1b:62:75:77:c5:de:a2:6c:
ce:55:88:9e:15:61:21:e1:67:d7:09:31:cd:ae:9b:
df:e1:e3:ce:42:8f:57:cb:18:ad:e1:af:a0:34:c3:
64:da:ee:ef:ac:51:f9:56:d0:95:ac:64:65:c1:fa:
7f:9b:31:f3:5a:31:3f:7a:dc:7f:e3:3e:1b:dc:4e:
7f:13:84:24:8c:5b:e4:bd:75:77:1f:e7:ff:90:de:
50:15:51:59:9b:ae:5e:dd:5d:b0:1e:12:69:48:a6:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:73:66:74:31:51:A3:4C:66:BC:E9:1D:AF:55:72:5C:CC:60:A4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-TpzZnQxUaNMZrzpHa9VclzMYKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
4d:09:0b:da:7b:58:d7:9d:db:bc:fb:86:0c:e6:c5:e0:fc:00:
f4:6a:7b:fd:aa:87:5e:06:c7:a3:48:79:0f:06:de:b0:27:59:
3b:eb:6d:d2:13:9f:74:8e:51:24:3f:dc:88:b5:fd:34:24:ba:
d5:2c:88:88:4a:fd:c4:fb:9b:d2:11:ec:07:6f:ff:fb:b7:f4:
6e:72:c9:82:4b:2c:ed:17:66:8a:25:95:67:27:53:21:9b:87:
f8:f2:93:cf:da:ae:6a:80:69:c4:0b:6b:54:9c:93:f1:0d:e3:
bd:17:b5:b7:be:60:72:e5:ec:f9:6b:7e:d0:f0:4d:0c:cf:04:
bb:d7:7c:1d:37:ff:50:4d:08:12:cf:a9:88:6f:28:c5:fc:67:
80:c9:2a:1d:49:9d:cb:89:aa:1d:91:b3:97:bd:a1:f0:1f:94:
48:45:2e:8a:bd:6d:69:dc:7b:dc:05:28:af:96:6a:97:09:b8:
2f:2d:78:0d:cc:54:7d:68:40:d0:7b:6c:d7:a2:26:07:2d:98:
4d:83:cf:31:b0:a4:dc:e6:99:b7:cc:b7:e6:76:aa:65:23:d3:
85:c6:6e:1e:b7:fc:12:c9:8a:7d:a8:42:a8:7d:aa:d5:05:7a:
3a:37:10:3e:7c:7a:fc:a0:66:20:4b:14:f1:85:14:97:0f:88:
fc:d2:e9:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:13 2025 by rpki-client