Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2denlaOxugkMjqUXQzs6R0P9UNA.roa
File: 2denlaOxugkMjqUXQzs6R0P9UNA.roa (raw, json)
Hash identifier: GhYgWkQzoKrxTJkG9sAnA0qbfX5RdV/s06qqi8RfVV4=
Subject key identifier: D9:D7:A7:95:A3:B1:BA:09:0C:8E:A5:17:43:3B:3A:47:43:FD:50:D0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01930572AC9DE5C8D2CBC05FB3A5B7A868AE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2denlaOxugkMjqUXQzs6R0P9UNA.roa
Signing time: Thu 07 Nov 2024 07:07:01 +0000
ROA not before: Thu 07 Nov 2024 07:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:571:ed9a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:72:ac:9d:e5:c8:d2:cb:c0:5f:b3:a5:b7:a8:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 7 07:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9d7a795a3b1ba090c8ea517433b3a4743fd50d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:63:19:f1:0a:42:70:1d:2b:b3:86:ea:df:af:
30:74:7d:a4:60:f9:9a:18:73:5c:1a:0c:3b:5f:16:
0f:87:0a:5c:2d:d7:a4:dd:b8:8f:56:62:44:f9:c9:
3f:b9:af:81:67:a1:e4:ed:95:66:47:db:dc:a9:e7:
30:46:2f:b1:8a:08:76:d1:46:5c:a9:5c:e1:75:c1:
10:a1:f2:46:ea:e7:cb:2c:9f:d5:e9:a3:9e:8e:cb:
bf:c1:cd:09:c1:08:50:59:21:2c:24:c3:73:91:2b:
4a:30:ae:84:91:f8:3c:0f:04:15:d5:11:91:38:70:
1d:9c:ab:bb:d6:9d:7c:a7:2d:da:9b:7f:87:10:b2:
4b:10:38:0b:4c:f4:80:9f:bf:74:97:51:07:3d:a4:
e8:28:cd:d4:c0:d8:89:12:da:d4:dc:00:70:91:ff:
7c:e7:81:b6:b9:58:43:73:f8:47:b3:7a:ce:ca:16:
3c:dd:0e:ab:7c:ed:f2:78:a8:0f:27:69:8d:bd:2a:
79:9d:0e:93:a4:3e:22:90:37:e8:5c:c9:87:ef:9a:
c9:3a:9f:bd:87:eb:90:67:af:83:47:62:70:d0:01:
12:c9:e7:2b:46:19:7c:07:01:2f:bb:f1:d0:c6:17:
e5:5c:ec:10:c2:51:ab:77:de:8b:74:ec:55:ac:ac:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:A7:95:A3:B1:BA:09:0C:8E:A5:17:43:3B:3A:47:43:FD:50:D0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2denlaOxugkMjqUXQzs6R0P9UNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:571:ed9a/128
Signature Algorithm: sha256WithRSAEncryption
1e:48:2e:83:ad:2f:14:68:4e:bb:b2:26:d3:f6:f0:66:cb:1e:
0c:31:a6:f6:12:60:2c:d2:b1:99:bd:fe:02:42:68:55:44:d4:
45:b4:f2:44:dd:8e:a9:f5:6d:24:d6:cc:9b:8a:2e:9a:63:80:
f5:a4:09:f2:59:56:d4:ae:95:bb:a8:d3:af:b0:0c:0b:b9:f6:
92:7f:bd:7a:94:8a:9b:f9:a1:7d:88:16:27:bd:b6:f1:1f:fd:
9c:3c:ae:56:e7:35:57:c5:3e:f5:8a:d4:dd:02:74:a7:2d:92:
c2:f4:47:db:fc:30:81:ec:08:1b:03:72:e7:98:a8:fd:4c:69:
14:4d:73:76:d0:db:98:7a:52:cf:c8:4c:e8:17:ed:e8:9c:6d:
3e:66:9d:f7:be:89:33:39:fe:00:66:be:5a:99:03:e7:51:47:
dc:fb:05:57:30:1a:e6:cb:f5:c6:36:ad:38:15:f9:1e:ab:85:
a8:61:c6:93:7e:a0:92:71:4c:56:7c:27:0e:b6:82:1a:33:f2:
2c:3b:b9:34:b6:ed:31:b7:68:5a:c7:a6:cd:99:44:e7:a3:09:
17:ac:2f:c6:f7:81:c1:9a:1f:d2:5f:a0:77:e0:d4:f8:ef:61:
29:1e:96:da:ce:e4:ed:e1:fc:4d:a1:05:72:e3:26:f8:08:37:
57:da:ce:2f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZMFcqyd5cjSy8Bfs6W3qGiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMTA3MDcwNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWQ3YTc5NWEzYjFiYTA5MGM4ZWE1MTc0MzNiM2E0NzQzZmQ1MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GMZ8QpCcB0rs4bq368wdH2kYPma
GHNcGgw7XxYPhwpcLdek3biPVmJE+ck/ua+BZ6Hk7ZVmR9vcqecwRi+xigh20UZc
qVzhdcEQofJG6ufLLJ/V6aOejsu/wc0JwQhQWSEsJMNzkStKMK6Ekfg8DwQV1RGR
OHAdnKu71p18py3am3+HELJLEDgLTPSAn790l1EHPaToKM3UwNiJEtrU3ABwkf98
54G2uVhDc/hHs3rOyhY83Q6rfO3yeKgPJ2mNvSp5nQ6TpD4ikDfoXMmH75rJOp+9
h+uQZ6+DR2Jw0AESyecrRhl8BwEvu/HQxhflXOwQwlGrd96LdOxVrKweywIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNnXp5WjsboJDI6lF0M7OkdD/VDQMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMmRlbmxhT3h1Z2tNanFVWFF6czZSMFA5VU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGTBXHtmjANBgkqhkiG9w0BAQsFAAOCAQEAHkgug60vFGhOu7Im0/bwZsse
DDGm9hJgLNKxmb3+AkJoVUTURbTyRN2OqfVtJNbMm4oummOA9aQJ8llW1K6Vu6jT
r7AMC7n2kn+9epSKm/mhfYgWJ7228R/9nDyuVuc1V8U+9YrU3QJ0py2SwvRH2/ww
gewIGwNy55io/UxpFE1zdtDbmHpSz8hM6Bft6JxtPmad976JMzn+AGa+WpkD51FH
3PsFVzAa5sv1xjatOBX5HquFqGHGk36gknFMVnwnDraCGjPyLDu5NLbtMbdoWsem
zZlE56MJF6wvxveBwZof0l+gd+DU+O9hKR6W2s7k7eH8TaEFcuMm+Ag3V9rOLw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:34 2025 by rpki-client