Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4j7ErfaMlbc-p5CaOgh2nocAog0.roa
File: 4j7ErfaMlbc-p5CaOgh2nocAog0.roa (raw, json)
Hash identifier: ejpHZrtOVM2LXNaFZV/Xx3sagv4DUa3nhxmO35AZIRA=
Subject key identifier: E2:3E:C4:AD:F6:8C:95:B7:3E:A7:90:9A:3A:08:76:9E:87:00:A2:0D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958968ED29BB3280A5A30AF21E8E4B22F4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4j7ErfaMlbc-p5CaOgh2nocAog0.roa
Signing time: Wed 12 Mar 2025 08:11:49 +0000
ROA not before: Wed 12 Mar 2025 08:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:68:ed:29:bb:32:80:a5:a3:0a:f2:1e:8e:4b:22:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 08:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e23ec4adf68c95b73ea7909a3a08769e8700a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:17:1d:4e:31:38:e7:39:cf:82:ef:3a:ad:
3c:f6:01:fc:8a:7d:a7:2e:e3:5d:73:fb:c3:83:f9:
44:1f:fc:ea:7e:2c:0b:db:0c:66:20:6a:fc:69:a0:
c3:dd:25:67:57:1d:29:ac:37:c1:39:7a:57:b6:35:
8c:ed:e0:d5:3d:5a:e2:0f:8b:f6:00:7a:df:5a:0b:
6f:b4:b8:36:59:51:80:ab:08:30:7b:ca:a0:9b:3d:
74:29:39:c4:c5:7d:12:13:2a:78:29:81:11:f6:70:
cc:54:dc:36:69:af:04:31:25:3e:77:2e:32:c4:82:
73:e4:1d:6d:25:55:3a:1c:39:8e:ab:af:b6:21:75:
63:af:b6:db:6d:e7:fd:27:59:44:a5:f0:2b:b6:6d:
a5:64:15:ca:44:a5:5e:c8:93:d5:1e:c9:40:39:8b:
00:66:b5:ce:2b:ae:7e:10:72:2c:5b:18:2f:2f:8e:
12:f0:4e:94:2e:e9:ca:21:00:50:73:97:57:75:c6:
3d:44:a9:13:e5:d2:02:ed:50:79:1e:58:a0:3c:51:
2c:3d:b4:83:d5:05:71:31:ec:ee:7c:f2:7b:b6:96:
75:a5:3a:ff:ee:b5:9c:97:38:de:f2:5f:ec:81:3f:
86:0e:37:6f:18:09:84:89:d0:4d:f1:20:25:92:6f:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:C4:AD:F6:8C:95:B7:3E:A7:90:9A:3A:08:76:9E:87:00:A2:0D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4j7ErfaMlbc-p5CaOgh2nocAog0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
3a:c4:39:11:a2:86:24:3c:63:69:f1:b2:3b:c7:a7:7b:df:e0:
40:c8:70:cf:71:d9:53:38:96:76:af:a6:7d:08:73:d4:73:08:
3e:87:d2:48:3f:5e:12:0e:0a:89:1d:4d:ce:42:05:fa:dc:8d:
39:6f:6a:b6:8b:68:12:f0:2c:29:5e:66:a9:0c:1d:32:59:89:
25:96:3f:e4:7b:9b:9b:d9:5e:3b:cd:f3:1e:3e:7c:ff:d6:74:
86:5b:2e:39:e4:95:0b:5f:c7:3a:98:37:b1:4d:82:e9:0c:d4:
f0:5c:85:2c:3a:29:5f:2c:29:1d:32:35:2f:33:05:8d:4b:ec:
b6:5c:c0:be:6a:db:f8:ef:01:88:09:cc:0b:0a:22:63:f4:8f:
ad:c9:61:18:d6:e9:fd:e4:a7:50:61:68:5f:e5:68:9e:bc:9f:
19:14:35:f6:f4:ea:ce:76:3d:e0:82:a0:a4:16:c3:83:3d:0f:
51:9a:6c:89:db:39:5d:2d:b4:b5:e4:5c:3f:a7:45:3c:44:f8:
8d:73:a7:45:19:94:ad:de:95:c3:b9:53:3a:7c:59:b6:29:84:
aa:71:e0:53:90:cf:96:06:c5:85:e4:55:1e:c8:77:78:a3:82:
05:b9:d8:c3:48:07:83:f9:50:04:d3:d8:43:2f:fd:41:f2:70:
9a:ec:19:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:50:45 2025 by rpki-client