Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-fs_OgCiIxWnj-OuH8ZzzXkDzcA.roa
File: 1-fs_OgCiIxWnj-OuH8ZzzXkDzcA.roa (raw, json)
Hash identifier: 9OVbGrUlLxebz6POS+0U4UzPD4xoJq1Tx6PlYE43hj4=
Subject key identifier: F9:FB:3F:3A:00:A2:23:15:A7:8F:E3:AE:1F:C6:73:CD:79:03:CD:C0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01942F15B4016E6862B6AE9CE31510CDED22
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-fs_OgCiIxWnj-OuH8ZzzXkDzcA.roa
Signing time: Sat 04 Jan 2025 02:12:19 +0000
ROA not before: Sat 04 Jan 2025 02:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2f:15:b4:01:6e:68:62:b6:ae:9c:e3:15:10:cd:ed:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 4 02:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9fb3f3a00a22315a78fe3ae1fc673cd7903cdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:1b:57:09:27:63:88:c9:71:11:c2:f8:6d:
37:ca:c2:aa:c3:15:31:76:57:7d:4a:ee:32:44:d1:
76:04:31:4e:99:a8:c3:94:15:55:5f:06:b7:03:05:
f8:35:2f:f0:36:2f:7b:03:a5:0e:f3:b3:4b:f6:78:
9c:7d:c0:68:a0:f4:1e:60:99:b7:98:fa:00:f9:89:
7f:d2:72:68:42:e1:1a:17:4e:41:62:4e:a8:25:8a:
01:55:e3:eb:52:67:fa:85:36:01:43:2a:1c:7a:c1:
e7:db:ac:36:7f:c2:60:42:55:0f:87:59:53:c7:93:
24:19:a7:8a:20:45:cf:69:ed:a3:b2:47:77:2b:d6:
e9:32:3e:fc:0e:c9:dd:6a:4f:4e:7b:a1:9a:65:ce:
9b:0b:ee:20:73:8e:04:b0:40:b6:fa:52:f7:dd:e3:
a8:f8:e8:71:d2:75:5c:2e:e6:46:2f:56:db:06:9a:
01:c4:e8:f4:5a:c3:17:fa:a5:b7:8b:c7:f8:6e:58:
e5:53:81:61:b2:5f:80:47:75:4d:6c:c1:28:63:18:
9f:ea:37:ac:39:5f:dd:20:d6:d5:67:ee:24:34:06:
32:c6:36:12:04:b4:86:19:e0:a4:f2:4c:d3:22:71:
b2:1f:0a:b0:da:2e:48:0a:3d:c0:eb:1a:0b:79:42:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:3F:3A:00:A2:23:15:A7:8F:E3:AE:1F:C6:73:CD:79:03:CD:C0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-fs_OgCiIxWnj-OuH8ZzzXkDzcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
89:17:a3:cb:a2:e8:12:cf:37:51:72:44:00:15:f4:d9:47:62:
e3:35:ea:df:8b:cb:e5:59:61:b0:97:b5:d4:79:01:b4:9c:34:
cb:3f:8e:71:74:96:7e:a5:67:49:26:66:cd:b2:5f:3d:1a:0c:
a3:53:52:b9:98:73:21:ee:29:69:a1:1d:70:cd:88:dd:69:71:
3c:11:0b:82:7d:f5:e0:65:98:a3:03:60:f9:34:50:f3:f8:7c:
e6:97:76:a6:ca:0a:f8:78:7c:60:09:4d:5b:bc:92:3e:6b:b2:
8c:fd:bd:8d:05:de:fc:e6:cc:f6:00:ad:e1:14:04:83:1d:b3:
83:09:81:66:1a:05:4d:20:b6:84:84:0c:a8:ef:ac:61:f5:79:
be:7f:1b:19:1f:4e:98:cf:7d:c8:2d:57:e6:c0:fe:a8:fc:c7:
27:13:bf:96:d6:cb:c8:f8:59:99:25:70:cb:56:46:0f:82:33:
5e:9c:49:6c:86:6d:75:bf:77:8e:73:b5:9b:37:8f:8e:c4:b6:
f3:e6:ac:3b:e7:52:f3:98:bb:ed:5e:72:e5:27:67:33:5a:19:
dd:04:88:ad:8a:38:43:37:b9:c9:69:30:92:bf:82:05:a2:61:
d3:3c:50:6d:ef:db:13:00:de:e1:20:82:1b:d2:7c:8a:bd:a5:
26:08:2b:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:59:44 2025 by rpki-client