Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/67jf0xVYz2cHXTgFTUxCshyG9Wg.roa
File: 67jf0xVYz2cHXTgFTUxCshyG9Wg.roa (raw, json)
Hash identifier: 95xXCW+4glMVxIR49k2th6UypyARnReS9IVLUI6HYzk=
Subject key identifier: EB:B8:DF:D3:15:58:CF:67:07:5D:38:05:4D:4C:42:B2:1C:86:F5:68
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195919054A42E5F882AE3A16F2FD28067DE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/67jf0xVYz2cHXTgFTUxCshyG9Wg.roa
Signing time: Thu 13 Mar 2025 22:11:49 +0000
ROA not before: Thu 13 Mar 2025 22:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:91:90:54:a4:2e:5f:88:2a:e3:a1:6f:2f:d2:80:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 22:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb8dfd31558cf67075d38054d4c42b21c86f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:fa:03:0e:b2:82:a9:4c:d6:49:32:e4:d2:
3c:83:eb:34:d5:f2:f6:90:7f:35:40:40:f9:2a:a0:
9d:d8:89:2b:d2:5a:2e:71:a5:49:76:0f:47:b5:70:
17:b5:6a:4e:b5:fb:00:21:f1:74:e4:61:b5:a7:4b:
ef:58:7f:c5:a2:fe:7e:7b:bf:89:e7:8a:e9:9c:38:
5f:19:0e:73:b5:dc:74:99:0f:35:a7:eb:f5:f0:d2:
51:39:3a:34:f4:5b:66:e2:b2:9b:43:0d:07:3f:1d:
36:ad:8e:c9:0a:f0:03:cf:f5:d4:0a:18:09:92:96:
ce:4e:46:fa:57:67:16:8d:7b:48:01:29:7e:2c:5f:
27:c1:8c:10:6f:79:d6:42:60:a7:fb:ff:8c:95:74:
6a:8e:b2:2d:22:85:c7:21:00:48:53:7d:62:df:d4:
73:ad:1d:67:85:34:58:21:5d:ee:7c:57:84:0f:cf:
8f:8c:f3:93:db:b9:5f:fe:8b:2c:78:49:06:30:41:
99:ac:5f:7f:7d:63:ba:90:54:a3:b2:67:d2:62:45:
ce:ec:02:17:ed:2e:3b:7d:0d:6b:6a:37:5c:4a:56:
d4:72:90:2e:61:0d:da:ca:36:7c:da:16:56:44:3d:
57:6b:67:f3:94:9a:80:9d:37:7a:5a:69:f3:0b:cf:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B8:DF:D3:15:58:CF:67:07:5D:38:05:4D:4C:42:B2:1C:86:F5:68
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/67jf0xVYz2cHXTgFTUxCshyG9Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
60:b8:bd:4c:22:a4:84:96:15:61:7c:14:de:ea:d7:a8:38:5a:
bd:c2:50:52:44:16:f3:47:d2:57:90:a2:c4:1e:ca:8f:ac:51:
cd:b3:4a:2e:95:54:0f:26:3d:0d:c8:24:33:37:24:e2:3e:1d:
45:ba:49:35:d9:f7:75:67:43:34:55:e7:d4:9c:ec:b1:89:42:
3f:a7:67:52:79:41:07:c8:5f:f0:4d:ea:f3:44:cb:3b:b6:8f:
76:89:29:93:fe:f1:9f:d5:24:c0:2c:59:a2:fe:0e:d8:73:ba:
28:1b:4d:00:d7:70:7d:21:2e:82:4a:74:2d:93:b7:ed:b6:37:
69:53:36:59:c6:c4:e1:cf:e8:82:11:98:49:38:94:73:72:79:
93:d2:76:ed:89:e5:bd:af:c9:ed:50:67:c0:b1:3a:a7:10:fe:
62:01:cd:ac:25:ed:e3:c0:7a:8e:94:be:33:24:f1:e4:61:06:
2f:73:ed:70:c1:33:a9:6e:37:65:76:49:c3:5e:ab:05:e0:b1:
90:31:d7:a1:aa:6b:20:1e:66:37:f8:64:f9:bc:59:82:74:ac:
35:ee:f0:d1:cd:f0:9b:a4:ba:98:a9:64:4f:21:01:d5:b2:ba:
1f:71:41:b8:af:a9:96:01:27:9e:a9:66:87:3a:83:03:f1:3c:
a7:3c:c1:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:22:19 2025 by rpki-client