Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1BdgB2v_Ht-8t-Du-0tMo9MLg6E.roa
File: 1BdgB2v_Ht-8t-Du-0tMo9MLg6E.roa (raw, json)
Hash identifier: 6i9zXUtFnqmVTnOsSAq3GAOwYY0+YsXPQjibIywnN1Y=
Subject key identifier: D4:17:60:07:6B:FF:1E:DF:BC:B7:E0:EE:FB:4B:4C:A3:D3:0B:83:A1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A3902DBD1B13081FCDA18537F2780AC9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1BdgB2v_Ht-8t-Du-0tMo9MLg6E.roa
Signing time: Mon 17 Mar 2025 10:04:49 +0000
ROA not before: Mon 17 Mar 2025 10:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:a38f:aa33/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:90:2d:bd:1b:13:08:1f:cd:a1:85:37:f2:78:0a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 10:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d41760076bff1edfbcb7e0eefb4b4ca3d30b83a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:79:63:3e:08:d1:17:57:05:c8:47:b1:f1:
4f:95:01:9a:be:50:3d:0d:02:d9:06:2e:4e:8a:94:
cf:c4:5d:4c:36:46:f7:26:cb:33:41:e1:89:93:89:
e2:f6:1b:8a:ea:f2:b7:8d:c2:c7:a1:dd:7a:0e:f5:
43:7b:7c:f0:78:fc:cf:43:07:ff:12:a5:9e:58:a2:
cd:ad:3d:64:ce:02:ca:2b:86:7e:c1:20:86:52:72:
6a:dc:74:0a:ad:71:39:08:c6:19:44:2d:a8:09:83:
e0:5f:ee:83:86:24:4f:49:22:fe:4c:a1:c6:56:94:
9a:88:84:ad:21:34:9a:02:e5:b0:22:d2:fd:1a:a0:
f8:9a:0d:6d:9f:cc:21:23:cd:4d:7a:01:85:5c:a1:
43:fc:c9:35:32:99:38:c1:7b:61:ba:dc:c6:28:43:
8f:87:a4:d8:95:5a:fe:73:b9:59:65:2a:59:e3:32:
1f:3e:ff:48:83:e2:36:71:d1:8b:2a:7b:5e:3d:41:
e7:c4:20:92:b2:0f:88:08:8b:bf:43:43:0b:bf:8c:
26:5c:70:88:a1:b4:d7:96:e2:f1:56:8d:7d:ed:e5:
ad:9b:1e:f9:68:23:ca:fb:f1:75:82:41:c7:a5:39:
4a:82:69:06:50:e7:08:25:cc:50:20:0b:0b:c8:ab:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:17:60:07:6B:FF:1E:DF:BC:B7:E0:EE:FB:4B:4C:A3:D3:0B:83:A1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1BdgB2v_Ht-8t-Du-0tMo9MLg6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:a38f:aa33/128
Signature Algorithm: sha256WithRSAEncryption
22:62:56:49:31:77:30:c6:52:6e:e4:69:15:6c:3b:ea:43:19:
f8:96:d8:92:ca:79:ef:ce:1c:0d:d3:88:de:5e:ad:06:8d:5b:
a8:57:73:42:1f:d2:79:9a:4d:4f:07:ff:ad:2e:ed:a6:d8:a5:
0c:8d:3f:87:58:64:81:9f:8b:18:4a:c6:64:36:08:78:27:4a:
07:22:52:7e:de:d8:62:d6:b1:38:a4:47:35:39:21:14:f3:90:
6f:c7:e2:33:ea:f4:dc:50:a4:a7:34:e5:60:ae:8b:69:d0:60:
23:27:d8:14:9e:5c:7f:8f:e7:fe:7a:5a:95:fb:0b:08:fa:ab:
8f:e5:f4:a5:54:15:1b:c7:2d:69:83:6d:db:34:a6:78:38:a8:
c5:df:ba:44:ba:d6:4f:75:e3:73:0d:b6:87:a3:fc:06:49:87:
be:1f:db:5f:d5:d2:ea:29:68:33:a0:fc:d8:ce:0d:be:9c:c1:
a5:23:49:2c:04:5b:94:21:80:af:87:83:3f:e6:3e:27:c7:d1:
4d:e4:b7:2d:f1:26:d7:62:fa:17:28:d6:fa:77:49:09:60:d7:
ac:3e:3a:7a:18:5a:0f:27:e7:44:4e:07:95:82:43:80:d7:c2:
3c:f6:c0:cf:5f:b0:d2:8f:98:f0:65:81:d8:5c:10:eb:4c:19:
31:08:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:37 2025 by rpki-client