Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6UAVPtlAFmBwrqlKCoh1f4IDhKs.roa
File: 6UAVPtlAFmBwrqlKCoh1f4IDhKs.roa (raw, json)
Hash identifier: y07Wo93uJTtMde0LB12YaAsNI+XRS/6gP9JRlcgUuOg=
Subject key identifier: E9:40:15:3E:D9:40:16:60:70:AE:A9:4A:0A:88:75:7F:82:03:84:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019465285D2BF3B1BC0075FBB986482C0CBF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6UAVPtlAFmBwrqlKCoh1f4IDhKs.roa
Signing time: Tue 14 Jan 2025 14:12:11 +0000
ROA not before: Tue 14 Jan 2025 14:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:28:5d:2b:f3:b1:bc:00:75:fb:b9:86:48:2c:0c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 14 14:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e940153ed940166070aea94a0a88757f820384ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:ec:29:7e:dc:d6:ac:e5:91:ef:a3:4e:94:
df:23:fc:06:25:e3:e8:c0:b7:07:c5:40:6e:13:8d:
ac:c1:de:ef:21:c8:15:16:38:1c:df:6f:6a:21:be:
d8:7b:2a:a7:45:cd:1a:f5:85:0a:a7:b8:e3:46:f3:
4d:cb:20:dd:63:b6:14:06:a9:d1:61:59:f1:30:6a:
68:73:c0:55:7d:fa:0a:f1:01:64:59:6d:e6:80:31:
07:29:33:67:1e:a7:c2:af:9e:41:0e:13:61:91:cb:
1d:21:70:93:d9:c3:bf:b2:5a:cc:fd:43:69:be:72:
c0:2d:f7:c6:e7:a3:69:0f:3f:1b:42:fa:9d:5a:58:
4e:20:0e:06:63:75:8f:c9:8d:9a:90:1e:9d:09:b7:
d3:04:50:3d:17:af:33:45:07:33:7b:8d:94:de:be:
9c:f2:a5:d6:d9:a4:f1:bf:e0:3e:4d:23:5d:f7:85:
86:68:08:ca:e0:49:dc:2e:5c:28:46:e5:5f:0e:90:
ec:46:d0:f0:22:6e:68:26:df:47:59:74:60:ec:19:
77:4f:1d:ee:d0:93:22:c0:be:52:50:07:6a:d7:6a:
71:ee:27:aa:90:be:d8:75:d7:d5:57:d9:07:c5:94:
b0:51:a0:06:3b:c7:65:60:96:53:cd:fe:aa:a8:58:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:15:3E:D9:40:16:60:70:AE:A9:4A:0A:88:75:7F:82:03:84:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6UAVPtlAFmBwrqlKCoh1f4IDhKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
7c:5f:ff:8f:6a:54:81:88:23:c2:10:0e:8f:7f:75:8e:31:e3:
2b:8a:8d:ed:5e:be:a5:c5:df:d7:e1:a1:c2:52:bb:e2:a3:65:
a9:96:95:3c:8a:18:4f:c6:08:81:fe:0f:15:dc:37:2a:02:83:
8d:9c:86:31:55:89:6b:13:9b:c7:9b:0a:b8:8f:32:0f:d3:8c:
2c:9c:49:d7:e5:81:bc:9f:a4:3a:23:4b:a3:d0:f9:5b:b8:7b:
de:1f:4a:41:45:c1:99:39:d3:51:5f:10:16:71:a5:4f:68:bc:
cf:95:0a:3c:24:15:71:b7:c1:69:45:00:d0:c8:b4:35:b0:81:
e2:ff:37:d4:a9:3a:f8:b1:c4:ec:16:ef:bc:1e:4c:c6:85:f3:
1f:16:a4:86:50:e2:09:3c:d0:5b:fc:3a:db:da:2e:db:cc:a6:
61:5a:a6:ac:0f:49:7d:b9:2c:e2:2a:c8:e7:db:3e:96:d0:4b:
a3:86:9b:7c:3e:f6:f6:f8:95:86:c5:c6:64:20:f8:1d:13:da:
bc:ab:48:ce:27:81:27:42:74:a9:e5:ef:9d:f9:b4:49:71:8e:
4d:8e:07:0e:fd:52:13:65:10:61:b9:ef:2a:b1:7f:99:63:a6:
43:61:4b:99:e1:2a:9e:e0:54:fb:a3:cc:10:cd:ea:be:7c:b2:
04:af:59:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:17 2025 by rpki-client