Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6QplZ_NEAclj2Ixf79V9cPZ1awg.roa
File: 6QplZ_NEAclj2Ixf79V9cPZ1awg.roa (raw, json)
Hash identifier: syL5DsSMPybDIIyggtYqdoPTKl1kWTZJKT6VPE9+jzc=
Subject key identifier: E9:0A:65:67:F3:44:01:C9:63:D8:8C:5F:EF:D5:7D:70:F6:75:6B:08
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A92466534B2508FB21FF7A79DAC0A243
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6QplZ_NEAclj2Ixf79V9cPZ1awg.roa
Signing time: Tue 18 Mar 2025 12:04:49 +0000
ROA not before: Tue 18 Mar 2025 12:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:a924:86e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:24:66:53:4b:25:08:fb:21:ff:7a:79:da:c0:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 12:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e90a6567f34401c963d88c5fefd57d70f6756b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:b8:b6:2a:f1:da:19:b6:f5:05:65:b9:d3:
2b:35:d8:4c:90:2e:dd:78:e1:0f:f8:50:4f:4c:57:
33:eb:c1:89:cc:7a:e0:3f:32:8c:5b:d9:00:de:e5:
e6:a7:8f:2c:b0:78:e2:f3:51:af:27:6c:d1:f4:93:
ba:f0:3c:6c:92:15:ab:84:d7:82:b5:4d:86:0e:2d:
6e:be:cf:3b:94:05:72:fd:f3:9a:ca:04:f6:41:60:
c3:18:1d:29:bd:cb:15:9f:20:cc:23:ef:24:4f:82:
f1:56:50:46:31:aa:21:f1:9f:16:cc:12:b6:56:99:
cc:ab:c8:54:53:aa:3e:b2:a7:54:8d:5f:84:17:27:
e2:a3:cd:4d:10:44:54:0d:45:d4:c6:5e:d1:6b:a5:
3e:61:83:14:54:fa:38:ee:64:ab:07:fd:48:31:7e:
39:2a:91:35:dc:05:d0:f2:42:be:40:c5:ed:f5:bd:
d9:78:d3:04:03:41:b6:35:e2:08:37:5f:7f:37:e1:
c4:1b:53:8c:a4:fa:58:5a:c9:87:77:26:20:6b:39:
f9:9c:74:9e:ab:1d:56:2c:d0:5b:2b:e4:e4:9c:d6:
ad:27:10:f1:2c:28:02:d5:e9:fe:9c:b5:c2:aa:da:
b4:67:5c:35:0f:27:38:52:50:00:c7:39:58:95:a2:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:65:67:F3:44:01:C9:63:D8:8C:5F:EF:D5:7D:70:F6:75:6B:08
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6QplZ_NEAclj2Ixf79V9cPZ1awg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:a924:86e/128
Signature Algorithm: sha256WithRSAEncryption
4e:50:f1:3a:81:19:95:da:33:40:33:ff:2e:81:df:e1:26:71:
be:a5:81:28:1b:22:25:26:1c:11:f0:11:a3:f9:57:85:5a:a4:
14:46:cb:7d:71:2f:11:21:3d:56:2b:c5:a7:c4:4f:45:08:6f:
72:66:a5:db:94:44:43:00:52:9d:37:c1:c9:53:0d:47:08:fe:
1a:e7:8d:17:4c:e6:73:0d:dc:3c:1f:a7:86:35:6f:c8:37:78:
3d:b3:00:dc:d2:d5:de:0a:62:65:a2:38:6d:98:4b:cf:59:cc:
fa:aa:48:48:ba:6b:2b:f9:a1:bc:58:43:e3:17:ab:72:34:08:
19:ec:04:a7:bb:dd:5f:01:d3:a8:eb:c3:48:42:41:2b:3d:dd:
d7:32:a6:23:44:a2:fc:bc:6e:60:2e:8d:39:5a:05:5e:07:45:
06:73:8d:80:2f:39:d7:85:29:9c:76:ae:62:3c:d2:ec:3d:67:
88:46:26:48:fb:3a:24:55:35:b3:20:cf:bd:7c:48:c2:c4:e6:
36:92:e0:0d:3f:8a:10:b4:de:75:2e:c5:ba:fa:66:7c:6b:29:
5e:27:e6:02:31:7a:2d:fd:ee:28:d6:9b:bd:fc:ad:0d:02:f7:
6f:ee:e9:57:db:78:a6:62:13:fe:72:2e:3e:a2:bc:f2:e9:f8:
23:9d:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:08 2025 by rpki-client