Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6BN2taGI2IU3KdPA-jIIljsrYbk.roa
File: 6BN2taGI2IU3KdPA-jIIljsrYbk.roa (raw, json)
Hash identifier: byFJA78rnfQvx9WEmbUIgg6ImWZY8NuGU7UZI8enB6g=
Subject key identifier: E8:13:76:B5:A1:88:D8:85:37:29:D3:C0:FA:32:08:96:3B:2B:61:B9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A24CFF8C34FE69D9C7654CC3D732E19C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6BN2taGI2IU3KdPA-jIIljsrYbk.roa
Signing time: Mon 17 Mar 2025 04:11:49 +0000
ROA not before: Mon 17 Mar 2025 04:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:4c:ff:8c:34:fe:69:d9:c7:65:4c:c3:d7:32:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 04:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81376b5a188d8853729d3c0fa3208963b2b61b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:d5:84:22:77:87:29:dc:75:f8:d8:2b:36:
71:40:1f:e4:a3:4c:b9:42:88:87:51:1d:a9:cb:20:
62:8c:3d:14:07:36:3e:92:b8:aa:12:46:e5:07:ca:
60:b6:16:ad:5d:40:e2:ab:d6:09:d2:5f:f0:bf:9a:
38:31:3b:2f:20:bc:ae:32:4f:c1:02:76:bf:46:f4:
42:20:b3:44:04:32:36:24:6d:cd:7e:6d:46:1e:ab:
8a:b7:41:68:5a:c0:27:55:dd:80:33:85:6e:15:fa:
86:ee:5f:da:bd:8e:17:74:fc:a1:0a:03:3e:3a:93:
66:d3:23:06:bc:84:90:e2:06:de:0a:c9:d9:e1:56:
1d:5f:b0:11:c9:5b:09:78:ef:5e:a5:a0:0f:5f:77:
19:87:98:57:57:03:27:71:5f:c3:42:f4:a7:34:39:
43:ec:12:7a:1f:ac:45:29:8d:02:05:89:d1:ba:e9:
4e:aa:ec:37:ff:1a:e1:c8:04:68:38:cf:81:9f:40:
0e:37:5b:73:e4:ce:b4:38:4f:c6:67:85:f5:98:14:
b1:8c:38:f4:9d:06:8e:ae:63:4e:a3:6e:d3:53:82:
84:56:fb:a3:5e:67:c9:e8:45:b0:ca:a2:5d:41:03:
04:08:23:9d:ee:5c:a3:c5:c8:70:3e:27:44:5e:42:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:76:B5:A1:88:D8:85:37:29:D3:C0:FA:32:08:96:3B:2B:61:B9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6BN2taGI2IU3KdPA-jIIljsrYbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
38:5e:a2:ee:a4:91:13:62:e4:d5:ab:69:c0:70:db:21:e2:b1:
87:54:ae:47:10:c1:de:1a:ec:38:36:a8:51:8f:65:b5:dc:3b:
8e:ff:7d:18:78:09:9a:14:9d:11:a3:76:95:e4:f1:aa:07:1b:
81:c9:99:4d:0a:42:62:b1:fd:13:5d:c7:51:71:27:76:6d:6a:
51:5d:60:11:4d:67:48:90:64:ca:b2:ff:4c:6d:69:1b:a6:dc:
48:62:3b:a9:a2:24:12:83:11:75:91:bc:f0:76:9b:77:92:4a:
d5:d2:2b:e4:7f:cf:9a:21:67:18:2e:87:9f:ae:9d:78:c9:06:
7a:e0:3a:2c:70:4e:72:2c:ea:8c:7d:54:ca:78:16:d9:f3:dd:
8a:52:21:e0:2a:5e:4e:02:d6:5a:97:87:db:c3:c7:d1:e5:4f:
20:a2:bd:6f:58:fb:c6:a7:0c:9f:e4:1d:00:7b:8a:8b:37:bb:
6e:42:0e:29:82:a9:b8:29:fe:18:f3:63:06:9f:7b:20:ec:11:
c5:2f:54:09:85:ec:f7:1c:0f:8c:18:7a:3f:7f:60:7f:b6:a3:
a4:3e:bb:46:6c:56:8d:0f:05:45:98:a9:6f:3d:24:31:25:df:
bb:95:5f:c2:47:42:77:70:72:cc:db:1d:18:52:a6:18:86:78:
9e:e9:59:d4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWiTP+MNP5p2cdlTMPXMuGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE3MDQxMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODEzNzZiNWExODhkODg1MzcyOWQzYzBmYTMyMDg5NjNiMmI2MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPXVhCJ3hyncdfjYKzZxQB/ko0y5
QoiHUR2pyyBijD0UBzY+kriqEkblB8pgthatXUDiq9YJ0l/wv5o4MTsvILyuMk/B
Ana/RvRCILNEBDI2JG3Nfm1GHquKt0FoWsAnVd2AM4VuFfqG7l/avY4XdPyhCgM+
OpNm0yMGvISQ4gbeCsnZ4VYdX7ARyVsJeO9epaAPX3cZh5hXVwMncV/DQvSnNDlD
7BJ6H6xFKY0CBYnRuulOquw3/xrhyARoOM+Bn0AON1tz5M60OE/GZ4X1mBSxjDj0
nQaOrmNOo27TU4KEVvujXmfJ6EWwyqJdQQMECCOd7lyjxchwPidEXkLbrQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOgTdrWhiNiFNynTwPoyCJY7K2G5MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNkJOMnRhR0kySVUzS2RQQS1qSUlsanNyWWJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAOF6i7qSRE2Lk1atpwHDbIeKx
h1SuRxDB3hrsODaoUY9ltdw7jv99GHgJmhSdEaN2leTxqgcbgcmZTQpCYrH9E13H
UXEndm1qUV1gEU1nSJBkyrL/TG1pG6bcSGI7qaIkEoMRdZG88Habd5JK1dIr5H/P
miFnGC6Hn66deMkGeuA6LHBOcizqjH1UyngW2fPdilIh4CpeTgLWWpeH28PH0eVP
IKK9b1j7xqcMn+QdAHuKize7bkIOKYKpuCn+GPNjBp97IOwRxS9UCYXs9xwPjBh6
P39gf7ajpD67RmxWjQ8FRZipbz0kMSXfu5VfwkdCd3ByzNsdGFKmGIZ4nulZ1A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:26 2025 by rpki-client