Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6Qbaua5UJNrhVsb4LTSLbxWn2pg.roa
File: 6Qbaua5UJNrhVsb4LTSLbxWn2pg.roa (raw, json)
Hash identifier: YXEqhZyTpNvyYh5HMVZHXRXY89rFEJ5MFrAYytClwm4=
Subject key identifier: E9:06:DA:B9:AE:54:24:DA:E1:56:C6:F8:2D:34:8B:6F:15:A7:DA:98
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019142DA3DED4A09F89C0244E85895517C07
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6Qbaua5UJNrhVsb4LTSLbxWn2pg.roa
Signing time: Sun 11 Aug 2024 19:11:24 +0000
ROA not before: Sun 11 Aug 2024 19:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:42:da:3d:ed:4a:09:f8:9c:02:44:e8:58:95:51:7c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 11 19:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e906dab9ae5424dae156c6f82d348b6f15a7da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:39:4f:5f:a2:7a:61:72:0d:09:58:c9:dc:
37:85:3b:c5:31:65:01:bc:dd:31:ab:14:d2:cf:72:
44:21:49:f5:36:76:3d:b8:7b:b8:2a:2e:5f:53:ee:
8e:b4:e1:c2:25:83:69:93:02:9a:d5:99:c9:ee:26:
60:23:7a:b8:6c:c1:c2:8b:79:ee:a6:e1:26:b5:86:
b4:29:45:85:04:d8:44:a3:8b:0c:25:2c:72:7f:39:
c5:98:8b:ac:0e:c9:0f:9b:33:e6:6c:92:37:e3:7f:
04:c3:ac:69:c9:4b:21:59:a1:e8:07:99:5b:a8:e0:
9f:6c:56:c9:2f:59:bd:92:47:80:19:6f:f0:8a:68:
c1:07:3d:80:a6:fa:a2:1f:42:b9:97:cd:6d:9d:7c:
ca:b4:08:65:76:f1:f2:c2:fd:34:e2:18:6f:3a:13:
7e:70:ff:72:6a:32:e3:66:6e:1f:5d:a1:e1:6f:51:
5e:4c:52:73:9c:74:83:76:0c:ef:92:c5:80:b9:7a:
15:1f:56:b9:a5:95:a5:dd:b2:66:60:50:5d:87:9e:
5c:a4:0b:bf:25:92:2e:b9:6c:9d:30:05:f0:3e:8b:
de:62:13:79:90:39:90:26:5c:cd:df:5b:3e:ce:d8:
b4:8c:56:de:a4:38:30:58:36:68:7d:2f:04:75:4b:
5d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:DA:B9:AE:54:24:DA:E1:56:C6:F8:2D:34:8B:6F:15:A7:DA:98
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6Qbaua5UJNrhVsb4LTSLbxWn2pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8b:46:19:40:7d:08:3e:6c:fc:53:a4:a2:a1:28:be:4d:f8:9f:
c3:c7:9c:d0:66:bb:85:90:88:e5:61:69:12:08:39:ac:e1:51:
1d:ce:fd:79:d9:a0:86:76:e5:74:80:50:61:32:33:19:d7:a8:
e2:e8:b5:b4:f3:fe:82:26:1d:c1:47:36:f5:0f:63:35:40:b6:
53:f9:e7:86:ac:8a:b5:3c:7d:75:22:1e:cd:e7:0e:1f:13:1a:
7a:06:cb:d2:a1:fd:6a:52:d2:4c:cf:2d:aa:07:84:9f:59:3f:
1a:46:d2:89:97:1d:ba:d4:5d:51:fa:4d:97:e7:a7:af:15:af:
62:6a:98:6f:52:43:c2:97:73:99:a8:d3:05:d5:a8:53:b6:80:
ad:b9:82:25:97:55:df:6c:f3:f0:7e:60:a5:c0:b3:bd:ae:45:
f9:13:27:86:b4:b2:98:fb:29:a5:26:e9:19:7d:02:5f:db:ab:
3f:88:bd:df:45:6c:6f:7d:2c:61:01:8a:9c:79:c6:4a:dc:d3:
35:6c:fd:c5:e1:20:a1:78:c1:d3:7c:af:6f:71:b3:0b:b9:80:
93:1f:e6:5d:43:86:17:5a:10:5a:fb:f8:2f:69:3a:77:f5:df:
8a:4f:08:b1:c2:4a:87:b5:3e:6d:b5:e5:4c:6d:38:1a:80:29:
24:b8:5c:0f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFC2j3tSgn4nAJE6FiVUXwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODExMTkxMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTA2ZGFiOWFlNTQyNGRhZTE1NmM2ZjgyZDM0OGI2ZjE1YTdkYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Js5T1+iemFyDQlYydw3hTvFMWUB
vN0xqxTSz3JEIUn1NnY9uHu4Ki5fU+6OtOHCJYNpkwKa1ZnJ7iZgI3q4bMHCi3nu
puEmtYa0KUWFBNhEo4sMJSxyfznFmIusDskPmzPmbJI3438Ew6xpyUshWaHoB5lb
qOCfbFbJL1m9kkeAGW/wimjBBz2ApvqiH0K5l81tnXzKtAhldvHywv004hhvOhN+
cP9yajLjZm4fXaHhb1FeTFJznHSDdgzvksWAuXoVH1a5pZWl3bJmYFBdh55cpAu/
JZIuuWydMAXwPoveYhN5kDmQJlzN31s+zti0jFbepDgwWDZofS8EdUtdQwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOkG2rmuVCTa4VbG+C00i28Vp9qYMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNlFiYXVhNVVKTnJoVnNiNExUU0xieFduMnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAi0YZQH0IPmz8U6SioSi+Tfif
w8ec0Ga7hZCI5WFpEgg5rOFRHc79edmghnbldIBQYTIzGdeo4ui1tPP+giYdwUc2
9Q9jNUC2U/nnhqyKtTx9dSIezecOHxMaegbL0qH9alLSTM8tqgeEn1k/GkbSiZcd
utRdUfpNl+enrxWvYmqYb1JDwpdzmajTBdWoU7aArbmCJZdV32zz8H5gpcCzva5F
+RMnhrSymPsppSbpGX0CX9urP4i930Vsb30sYQGKnHnGStzTNWz9xeEgoXjB03yv
b3GzC7mAkx/mXUOGF1oQWvv4L2k6d/Xfik8IscJKh7U+bbXlTG04GoApJLhcDw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:16 2025 by rpki-client