Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Qyk6UkZ2iXRmXYmmptk9UpieF4.roa
File: 5Qyk6UkZ2iXRmXYmmptk9UpieF4.roa (raw, json)
Hash identifier: h/nRe+SDaK6Cx23blSDIVytUyd1iCN4K4HuJB9pUgKs=
Subject key identifier: E5:0C:A4:E9:49:19:DA:25:D1:99:76:26:9A:9B:64:F5:4A:62:78:5E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911E5A111EFBA85C107F27A16FEDA8300E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Qyk6UkZ2iXRmXYmmptk9UpieF4.roa
Signing time: Sun 04 Aug 2024 17:05:04 +0000
ROA not before: Sun 04 Aug 2024 17:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:1e59:9f43/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1e:5a:11:1e:fb:a8:5c:10:7f:27:a1:6f:ed:a8:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 17:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e50ca4e94919da25d19976269a9b64f54a62785e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:be:02:99:b7:8e:2e:2f:e9:1d:18:cd:8d:
8c:b5:8d:5b:f4:ae:7e:92:56:ff:23:f7:72:37:9b:
10:bd:08:e0:73:4b:55:42:91:37:7b:1c:6b:86:c0:
8e:5b:eb:68:cc:07:fa:f0:2b:78:b3:9b:a3:9b:45:
f0:90:10:25:34:ba:c1:0d:89:e0:b4:14:d2:4e:73:
2e:68:92:9b:1b:aa:24:20:79:2c:78:2a:24:dd:b7:
45:23:af:e7:5e:61:9e:df:28:e0:51:44:3e:e5:45:
d2:ab:cc:c1:89:c8:29:6b:e8:7d:41:55:59:95:bc:
21:b6:11:fd:ea:ba:f0:70:04:58:05:08:0d:e9:4a:
e5:90:50:6a:c2:7a:7e:71:09:dd:8b:39:fa:da:08:
1b:e7:6d:62:6e:da:7d:e7:28:30:14:93:bb:7d:b3:
55:88:bd:53:62:03:2f:d4:dd:9b:b8:ca:03:66:12:
c1:88:4f:18:58:62:8b:4f:fc:7e:c7:f2:8b:85:2c:
e9:a4:95:f2:42:31:22:73:33:a4:77:27:67:66:89:
91:e1:80:7c:9f:1c:3d:0c:d6:1f:c0:4d:e9:dd:05:
c1:19:d3:08:ef:b1:e2:76:b9:b6:74:b1:5c:12:e4:
70:bf:d3:7d:11:a6:eb:f1:6b:ce:ff:8e:e9:9e:6f:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:A4:E9:49:19:DA:25:D1:99:76:26:9A:9B:64:F5:4A:62:78:5E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Qyk6UkZ2iXRmXYmmptk9UpieF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:1e59:9f43/128
Signature Algorithm: sha256WithRSAEncryption
93:11:36:6c:21:13:29:e9:3f:df:6e:60:4e:e9:b2:e5:ae:e6:
a1:eb:9a:30:c1:b4:e0:bd:4b:34:b4:29:87:b1:9d:02:01:3c:
99:01:00:17:11:9b:05:dd:c2:b5:8c:0f:97:24:87:40:ec:b5:
54:74:92:ea:10:0c:65:e4:9e:c6:86:14:24:0c:b4:37:e5:f7:
59:b2:6e:2b:e8:de:b7:c1:f2:af:ae:3b:ac:f4:83:c3:97:93:
88:6a:ee:55:a5:44:19:97:ab:2a:b9:d4:14:40:86:ca:f9:21:
9d:f4:49:63:3f:c9:ce:7a:14:d7:c7:30:59:b1:34:46:79:d0:
70:ce:44:02:57:82:e2:ff:aa:8f:64:88:2d:1c:5e:c1:13:b3:
67:a3:4e:3d:dd:4c:6d:21:77:df:b6:b0:0b:3e:0f:05:57:09:
ce:19:99:14:83:b1:d9:60:a0:8c:53:88:85:77:b2:2b:23:ab:
05:c7:0a:20:c5:aa:79:0c:2c:86:df:64:16:63:5e:ee:ef:a7:
13:ab:50:49:36:51:f2:51:53:ab:5d:10:e6:f7:20:2f:c6:c7:
be:29:c0:9d:78:96:91:67:63:c8:2f:af:69:e9:6a:13:0f:b7:
92:d9:c2:41:79:f7:7a:3c:7b:85:84:a2:2a:2d:fa:ee:65:d4:
f1:d8:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:55:32 2025 by rpki-client