Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3u0V8dAavTCyVHtxuRgEoD9ZsXg.roa
File: 3u0V8dAavTCyVHtxuRgEoD9ZsXg.roa (raw, json)
Hash identifier: 4UYZ1nkYw9CMysdtYPL8lNRM3WQNiFTosZRgV2W197E=
Subject key identifier: DE:ED:15:F1:D0:1A:BD:30:B2:54:7B:71:B9:18:04:A0:3F:59:B1:78
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958E2083B4931BDE7FE6C8481363C1B6B5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3u0V8dAavTCyVHtxuRgEoD9ZsXg.roa
Signing time: Thu 13 Mar 2025 06:10:50 +0000
ROA not before: Thu 13 Mar 2025 06:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:20:83:b4:93:1b:de:7f:e6:c8:48:13:63:c1:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 06:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deed15f1d01abd30b2547b71b91804a03f59b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:28:1a:c3:61:3d:79:75:b9:6b:fb:40:88:
8d:23:df:c3:eb:de:10:fd:14:0c:8b:a9:2a:2b:07:
ef:b9:94:10:20:4c:37:45:42:12:2b:42:0c:25:b8:
6d:f4:6c:25:c0:90:60:7f:ad:f6:2d:4a:ff:78:51:
eb:6a:e5:49:9e:48:78:59:67:a4:f1:8a:81:d1:27:
84:8a:68:60:5a:68:fc:96:79:73:70:cc:89:fe:10:
32:14:03:12:f2:1f:3b:cd:e0:db:36:1c:1b:09:01:
7d:ba:19:3a:a9:42:7a:aa:7e:c7:ea:07:68:19:69:
d4:97:d2:e4:2c:0b:b7:f7:13:da:24:f1:38:86:91:
97:eb:10:66:9e:00:7d:ad:5c:72:14:c3:bb:7d:3e:
2b:14:e0:c5:61:90:25:bc:a5:96:d6:e5:04:af:09:
75:49:a6:64:57:b8:88:a8:84:1c:61:ab:f5:87:a6:
13:6b:47:87:ea:01:3f:1e:54:cc:bd:d1:3c:9c:fa:
a8:5c:6d:78:77:4f:f4:5f:7a:54:86:57:37:97:b2:
30:d2:db:67:89:41:9e:2d:82:7c:39:ad:ae:c0:68:
97:46:0e:1a:e0:f9:de:3b:a5:63:9e:75:df:aa:eb:
4a:d5:1f:42:85:f8:68:d6:8d:ab:e6:a0:f2:ea:1f:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:ED:15:F1:D0:1A:BD:30:B2:54:7B:71:B9:18:04:A0:3F:59:B1:78
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3u0V8dAavTCyVHtxuRgEoD9ZsXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
8a:b8:19:da:e1:78:ee:4f:ef:15:8c:c2:83:f5:a8:c9:3f:b1:
9f:77:52:1f:30:a7:b1:2c:7f:36:64:43:30:8b:8d:ce:7f:48:
a6:ea:17:f3:7e:63:c5:a7:ba:41:fd:f8:4c:43:a5:b9:ff:6e:
f0:5e:73:c0:f5:69:af:42:55:27:de:34:37:22:46:86:93:9f:
c5:47:86:fa:c7:3b:56:37:c6:d3:57:74:f0:00:c6:f8:42:9a:
ef:a8:c5:fb:51:e9:6e:e9:a6:99:54:3f:5f:4e:bb:31:7f:d0:
f3:e3:aa:ce:b7:5c:f6:81:d3:6f:ef:7e:5d:e9:3d:20:37:eb:
c0:52:52:e2:05:83:e4:4c:0c:eb:2d:bd:4a:18:44:dc:64:c3:
df:0c:dc:5f:5f:c8:cf:4d:66:64:6b:4f:d2:6b:7f:ea:2d:a0:
02:0b:f7:f1:7b:11:49:7b:3f:94:40:66:70:e0:80:ed:a9:42:
39:e5:31:e5:fc:e2:7a:4f:78:2b:b3:35:cf:a4:a7:68:73:c6:
38:77:26:97:1f:f6:fe:cb:45:9a:32:d9:fb:e9:e7:47:40:fd:
31:2c:42:50:06:2b:e6:84:69:71:35:63:6c:ba:15:ac:dd:ed:
df:90:14:e4:f8:c1:75:87:ab:8f:27:30:9a:a7:87:8d:c3:b7:
14:cf:c4:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:07 2025 by rpki-client