Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3vbnIQ5DTBHA-9758woNtOKg-aU.roa
File: 3vbnIQ5DTBHA-9758woNtOKg-aU.roa (raw, json)
Hash identifier: dvd0o+UFdKK2Ab3KKj2MAV2S2rVd9IaixY0zfqvn1nw=
Subject key identifier: DE:F6:E7:21:0E:43:4C:11:C0:FB:DE:F9:F3:0A:0D:B4:E2:A0:F9:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191EC8F4033DA99184AAA33E21A358E1B53
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3vbnIQ5DTBHA-9758woNtOKg-aU.roa
Signing time: Fri 13 Sep 2024 18:04:56 +0000
ROA not before: Fri 13 Sep 2024 18:04:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:ec8e:b1f6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:8f:40:33:da:99:18:4a:aa:33:e2:1a:35:8e:1b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 13 18:04:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=def6e7210e434c11c0fbdef9f30a0db4e2a0f9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:80:7e:c2:6f:0e:17:1e:54:80:26:74:e5:
9c:7b:2e:69:4b:be:5a:31:78:e0:cf:57:37:79:c1:
6a:e9:57:10:e8:22:9f:db:a3:6b:29:9b:f7:ce:0f:
59:c8:9e:26:ea:a8:63:1a:60:cd:11:f5:6f:72:9c:
10:26:d7:5d:fc:b5:35:77:f0:a1:0b:3f:4e:fd:e4:
75:82:db:43:2b:f4:20:1b:68:54:4e:f3:02:3e:0c:
5b:16:77:a6:e4:65:8a:dd:d4:ae:66:9e:7e:a3:89:
86:4d:1f:b0:c3:5b:6a:69:5f:45:c7:48:6d:3a:01:
77:97:f4:a3:b2:5b:ce:a1:6e:dd:e5:67:aa:e0:4b:
59:5d:4b:e1:dc:db:ce:96:1e:70:5f:fb:ec:1f:b4:
17:00:44:b6:be:d7:32:e0:05:d3:e4:0e:73:c2:84:
7c:4d:fc:cf:69:10:ac:66:85:25:8e:03:ef:5f:34:
e3:d5:3e:b8:33:81:03:92:59:69:86:59:4f:a9:a3:
38:83:ca:fc:5a:18:64:1a:eb:26:5f:c4:d9:05:81:
b4:8d:7d:35:42:d0:77:ff:67:0e:a2:1e:ef:58:84:
b7:16:97:7f:08:4f:06:dc:9b:22:dd:ce:0e:af:f1:
97:82:b8:8a:d9:a7:58:f5:60:67:19:2c:c1:91:8d:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:E7:21:0E:43:4C:11:C0:FB:DE:F9:F3:0A:0D:B4:E2:A0:F9:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3vbnIQ5DTBHA-9758woNtOKg-aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:ec8e:b1f6/128
Signature Algorithm: sha256WithRSAEncryption
91:fb:87:28:bb:bf:eb:1a:80:ea:18:bf:b5:49:9c:f5:7c:c0:
bb:88:80:6f:59:db:b7:40:76:f0:67:73:58:71:f7:46:46:87:
e8:fb:1c:8c:de:d2:4a:c7:62:84:b8:af:42:ac:27:0d:9f:09:
f7:13:4b:a6:6d:29:fd:af:8b:9b:1a:f1:5e:f5:36:05:3e:97:
d6:e9:b3:35:f4:f8:55:91:b3:83:f3:3e:57:3e:76:98:1f:a5:
59:92:99:b1:84:dc:39:6c:15:5e:5f:d4:ef:c3:12:70:d7:93:
4c:af:02:79:30:23:3a:64:8a:f2:b9:38:80:37:c2:d2:4f:ca:
3d:a5:08:ea:4f:bb:08:28:5a:64:0b:63:1c:9d:2c:51:43:7c:
c6:99:09:c5:db:e1:48:06:65:3b:79:e2:62:0c:d3:8b:56:ac:
65:58:ef:f3:14:30:fb:bb:a9:97:4b:ad:16:91:95:7e:7b:f4:
72:ff:ac:79:21:0f:0a:36:a5:f3:80:2f:f6:1a:73:2a:1f:da:
26:0c:99:16:51:71:ac:79:c0:7f:c5:1e:69:b9:71:49:81:74:
76:11:55:7c:a8:60:e3:f6:e9:70:46:cc:a2:11:53:a3:85:1c:
b3:aa:b6:c9:f2:a7:18:03:8e:4c:91:0c:9d:a6:27:52:e6:6d:
f8:91:fb:c1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHsj0Az2pkYSqoz4ho1jhtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTEzMTgwNDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWY2ZTcyMTBlNDM0YzExYzBmYmRlZjlmMzBhMGRiNGUyYTBmOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzOAfsJvDhceVIAmdOWcey5pS75a
MXjgz1c3ecFq6VcQ6CKf26NrKZv3zg9ZyJ4m6qhjGmDNEfVvcpwQJtdd/LU1d/Ch
Cz9O/eR1gttDK/QgG2hUTvMCPgxbFnem5GWK3dSuZp5+o4mGTR+ww1tqaV9Fx0ht
OgF3l/SjslvOoW7d5Weq4EtZXUvh3NvOlh5wX/vsH7QXAES2vtcy4AXT5A5zwoR8
TfzPaRCsZoUljgPvXzTj1T64M4EDkllphllPqaM4g8r8WhhkGusmX8TZBYG0jX01
QtB3/2cOoh7vWIS3Fpd/CE8G3Jsi3c4Or/GXgriK2adY9WBnGSzBkY3yUwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFN725yEOQ0wRwPve+fMKDbTioPmlMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvM3ZibklRNURUQkhBLTk3NTh3b050T0tnLWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGR7I6x9jANBgkqhkiG9w0BAQsFAAOCAQEAkfuHKLu/6xqA6hi/tUmc9XzA
u4iAb1nbt0B28GdzWHH3RkaH6PscjN7SSsdihLivQqwnDZ8J9xNLpm0p/a+Lmxrx
XvU2BT6X1umzNfT4VZGzg/M+Vz52mB+lWZKZsYTcOWwVXl/U78MScNeTTK8CeTAj
OmSK8rk4gDfC0k/KPaUI6k+7CChaZAtjHJ0sUUN8xpkJxdvhSAZlO3niYgzTi1as
ZVjv8xQw+7upl0utFpGVfnv0cv+seSEPCjal84Av9hpzKh/aJgyZFlFxrHnAf8Ue
ablxSYF0dhFVfKhg4/bpcEbMohFTo4Ucs6q2yfKnGAOOTJEMnaYnUuZt+JH7wQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:52:50 2025 by rpki-client