Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-q7nPcE0eWUXmC428Dj527crrzA.roa
File: 1-q7nPcE0eWUXmC428Dj527crrzA.roa (raw, json)
Hash identifier: z0DgMlCjANZV/LBlubZTPdjzG8OVg59yq1k0t6YyT6o=
Subject key identifier: FA:AE:E7:3D:C1:34:79:65:17:98:2E:36:F0:38:F9:DB:B7:2B:AF:30
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019116DDDE062993156A5E836109DC9EDFBE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-q7nPcE0eWUXmC428Dj527crrzA.roa
Signing time: Sat 03 Aug 2024 06:12:04 +0000
ROA not before: Sat 03 Aug 2024 06:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:16:dd:de:06:29:93:15:6a:5e:83:61:09:dc:9e:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 06:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faaee73dc134796517982e36f038f9dbb72baf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:85:00:f6:7d:f6:60:a6:f8:85:8a:b5:aa:
d2:da:2a:bf:34:e0:99:a5:bd:6f:b2:d4:37:80:db:
10:2c:d0:e7:64:9f:85:08:96:5c:32:9e:96:b9:7b:
b6:f1:2a:5e:f9:81:00:4a:fd:97:08:c8:f6:91:c8:
15:d0:fd:df:de:30:6c:e5:ac:1f:fc:e0:80:58:30:
55:e0:8a:bb:13:22:14:e3:cd:6d:c4:8a:fd:a0:f5:
7b:b5:d1:ff:18:b0:e6:06:19:3f:74:42:8d:3f:4f:
e2:3b:08:a9:a3:54:87:00:82:c1:13:17:13:31:5a:
c8:4a:e2:e1:43:1c:63:7b:ed:e6:82:09:a3:df:9d:
10:63:12:9a:1a:22:eb:21:a2:20:47:eb:fd:c3:58:
75:c5:6b:d8:33:63:7a:f3:31:e1:e6:ee:55:a5:6a:
81:e7:6e:a4:59:cb:0c:99:34:40:07:11:97:b4:ce:
36:59:76:7d:a5:76:86:fa:d0:20:48:c5:05:99:1d:
48:a2:5f:43:6a:fa:4b:4c:01:25:6f:89:44:df:dc:
63:0d:6d:0a:9a:96:8c:b6:1c:54:ce:91:56:ce:b7:
9d:3c:2d:d5:57:56:4d:f2:bb:ba:32:ab:3c:7c:66:
be:89:68:bf:a4:9d:be:97:0f:43:80:84:7a:58:65:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:E7:3D:C1:34:79:65:17:98:2E:36:F0:38:F9:DB:B7:2B:AF:30
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-q7nPcE0eWUXmC428Dj527crrzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
97:7a:a2:2f:e6:27:83:1a:a5:ef:72:12:2d:27:32:a5:44:95:
32:73:ba:18:73:ed:c8:07:2d:2c:04:dd:52:3c:71:f7:6e:ad:
73:d2:49:48:79:ec:97:7f:fb:ce:57:31:b7:f6:9e:fb:3d:ae:
3b:b4:87:f3:ed:e7:36:f9:4a:36:7e:d4:fe:05:26:82:f5:b4:
29:b3:82:ea:53:ce:7d:e6:37:38:d3:ec:00:34:3b:16:a4:b8:
c9:aa:eb:7d:df:41:20:79:48:48:b9:6b:29:a4:bb:2a:25:a5:
a7:4b:ac:f5:37:77:be:76:fc:ea:29:17:01:09:c8:b7:23:06:
98:e2:ab:f2:16:04:75:82:eb:d4:24:d0:1f:1d:02:99:7a:57:
cd:ea:f6:06:84:53:42:fe:dd:eb:3d:9f:1f:a9:21:f3:39:64:
71:ab:f7:0a:d7:ee:9d:64:c9:1a:fd:5e:3b:e5:fb:9b:4e:9a:
85:be:02:d5:21:c6:b6:d4:db:a9:77:f7:b3:85:fa:53:33:2b:
0e:ff:12:75:2d:d2:d5:5a:b6:8c:e3:2a:e0:0e:35:2d:e3:77:
31:d9:70:78:b5:df:1b:9a:56:79:48:4f:84:33:31:c8:e6:a4:
7e:6a:57:11:c9:48:cc:11:31:6f:a0:8d:e4:7e:94:98:fe:45:
2c:a3:58:c1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZEW3d4GKZMVal6DYQncnt++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODAzMDYxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWFlZTczZGMxMzQ3OTY1MTc5ODJlMzZmMDM4ZjlkYmI3MmJhZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qeFAPZ99mCm+IWKtarS2iq/NOCZ
pb1vstQ3gNsQLNDnZJ+FCJZcMp6WuXu28Spe+YEASv2XCMj2kcgV0P3f3jBs5awf
/OCAWDBV4Iq7EyIU481txIr9oPV7tdH/GLDmBhk/dEKNP0/iOwipo1SHAILBExcT
MVrISuLhQxxje+3mggmj350QYxKaGiLrIaIgR+v9w1h1xWvYM2N68zHh5u5VpWqB
526kWcsMmTRABxGXtM42WXZ9pXaG+tAgSMUFmR1Iol9DavpLTAElb4lE39xjDW0K
mpaMthxUzpFWzredPC3VV1ZN8ru6Mqs8fGa+iWi/pJ2+lw9DgIR6WGXQ0wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPqu5z3BNHllF5guNvA4+du3K68wMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMS1xN25QY0UwZVdVWG1DNDI4RGo1MjdjcnJ6QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi
MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACABBnwA
ZP//AAABkP3y8wIwDQYJKoZIhvcNAQELBQADggEBAJd6oi/mJ4Mape9yEi0nMqVE
lTJzuhhz7cgHLSwE3VI8cfdurXPSSUh57Jd/+85XMbf2nvs9rju0h/Pt5zb5SjZ+
1P4FJoL1tCmzgupTzn3mNzjT7AA0OxakuMmq633fQSB5SEi5aymkuyolpadLrPU3
d752/OopFwEJyLcjBpjiq/IWBHWC69Qk0B8dApl6V83q9gaEU0L+3es9nx+pIfM5
ZHGr9wrX7p1kyRr9Xjvl+5tOmoW+AtUhxrbU26l397OF+lMzKw7/EnUt0tVatozj
KuAONS3jdzHZcHi13xuaVnlIT4QzMcjmpH5qVxHJSMwRMW+gjeR+lJj+RSyjWME=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:11 2025 by rpki-client