Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1bgvWsRbBLPxWEA4Wvkbcl79oq0.roa
File: 1bgvWsRbBLPxWEA4Wvkbcl79oq0.roa (raw, json)
Hash identifier: ua2akMVO4KdFAeU3iThX72QtB/kn7byOGyL7ksY3GfE=
Subject key identifier: D5:B8:2F:5A:C4:5B:04:B3:F1:58:40:38:5A:F9:1B:72:5E:FD:A2:AD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019453898FF4FFF1052F26E65EE8DDB81D62
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1bgvWsRbBLPxWEA4Wvkbcl79oq0.roa
Signing time: Sat 11 Jan 2025 04:05:11 +0000
ROA not before: Sat 11 Jan 2025 04:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:5388:c1c6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:53:89:8f:f4:ff:f1:05:2f:26:e6:5e:e8:dd:b8:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 04:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b82f5ac45b04b3f15840385af91b725efda2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:4c:98:83:63:74:82:c4:39:e7:fb:97:ee:
bf:b2:a5:45:c9:b5:a4:d7:2a:da:bd:74:1c:a7:f4:
43:1d:40:a3:7f:b3:a2:eb:f6:d3:be:d0:da:7e:de:
5f:5e:ab:5c:66:c8:8d:a2:fb:88:5e:c0:25:da:da:
e4:7b:a4:64:b7:65:1e:b1:66:4f:16:4e:17:de:d5:
8c:9e:de:94:e8:0b:7a:fb:a5:1b:60:f2:be:7e:60:
6d:8a:01:b9:0e:9f:3b:97:df:10:67:f1:39:3e:41:
c8:1f:86:11:64:2e:7c:5b:53:62:cd:ed:cd:56:d6:
aa:02:31:21:a0:da:79:5e:ff:2a:42:b6:e1:f7:d1:
78:89:75:59:db:3c:cf:09:79:dd:4b:57:b6:b0:e7:
6a:01:20:18:8e:b7:d8:42:a1:1b:85:d6:89:7c:44:
6c:0c:a6:92:21:b3:78:ef:e4:3f:b9:8b:d3:66:44:
a7:83:e7:0a:75:40:97:b8:2b:12:58:d8:5f:ed:1e:
88:c5:3f:f6:e5:93:8f:96:34:99:eb:13:62:47:d2:
77:d2:0b:54:7a:c3:54:8d:31:b6:fa:b2:6c:9f:5e:
0c:14:30:a6:e0:12:7e:32:6a:67:06:6f:b2:38:6b:
fa:a5:48:5c:b7:bf:9f:0f:43:fa:62:90:40:71:12:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:2F:5A:C4:5B:04:B3:F1:58:40:38:5A:F9:1B:72:5E:FD:A2:AD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1bgvWsRbBLPxWEA4Wvkbcl79oq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:5388:c1c6/128
Signature Algorithm: sha256WithRSAEncryption
11:cc:73:49:d8:77:37:b8:0c:df:d2:9d:5c:97:e0:b8:83:aa:
d5:0f:8f:cf:69:49:77:92:76:95:c7:a5:a3:70:df:e5:83:a8:
d0:f3:7a:60:ba:39:b1:a6:29:40:68:6e:bf:24:17:c4:a8:b4:
8f:ed:77:e6:59:d9:b0:ff:eb:cc:45:65:17:db:32:67:fe:80:
0d:ae:11:00:3d:57:d0:c1:66:4b:bd:5a:9a:9c:64:45:f4:26:
f6:b5:ce:69:c4:2b:32:54:e1:c5:7e:bd:bc:c9:eb:22:89:a8:
bc:33:f7:0b:60:01:a5:e6:f3:0f:21:59:4b:54:09:97:43:e0:
35:0e:35:ba:35:2c:e8:6c:fb:f5:78:e4:d5:58:6f:c1:f9:ad:
0d:c7:66:e1:2c:ae:be:fe:db:1b:88:c1:80:7d:f6:1e:35:c2:
16:d9:32:57:59:e3:47:22:03:26:f2:8d:1b:ad:ba:1e:cd:4a:
ed:77:c8:c2:42:f9:ed:be:1a:cd:74:69:50:d4:cf:61:15:48:
c1:10:5b:54:e7:b2:45:f1:a8:5b:0b:0b:25:dc:1c:af:7d:15:
11:fd:86:71:78:7d:3d:87:ce:09:9f:41:1a:79:29:26:08:a1:
d8:31:87:48:bf:8c:4d:5a:c0:70:8e:ad:7f:20:31:b7:1f:ab:
32:6d:d1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:28:21 2025 by rpki-client