Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6WmL3dPpF9SZuJUMWDAyLIN61wE.roa
File: 6WmL3dPpF9SZuJUMWDAyLIN61wE.roa (raw, json)
Hash identifier: 8m+BsGxjroIJc0V3/VT6Ac+wdGQieUEC7Sg0lsDp6W8=
Subject key identifier: E9:69:8B:DD:D3:E9:17:D4:99:B8:95:0C:58:30:32:2C:83:7A:D7:01
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959647E84AABA125D5EAF32B06913083B4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6WmL3dPpF9SZuJUMWDAyLIN61wE.roa
Signing time: Fri 14 Mar 2025 20:10:49 +0000
ROA not before: Fri 14 Mar 2025 20:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:47:e8:4a:ab:a1:25:d5:ea:f3:2b:06:91:30:83:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 14 20:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9698bddd3e917d499b8950c5830322c837ad701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:3f:6d:c0:92:ec:d3:8c:27:48:7e:81:e9:
30:85:6a:d4:16:76:bb:c9:29:c7:8e:b9:db:4b:1f:
ca:2c:30:04:cd:7d:93:db:5a:d4:65:4a:af:d2:28:
bd:6e:c9:93:a5:5a:f5:75:3b:94:02:12:e5:13:94:
6d:af:0c:71:d3:8c:45:1e:98:44:82:53:ba:b9:5a:
a4:35:da:71:8f:44:d9:d2:d6:77:a6:f0:8d:3d:74:
89:6c:be:a7:7e:d1:db:1d:2d:cf:ec:9e:96:3f:ec:
e5:dd:b0:da:e1:3d:5a:ab:01:c6:8e:d5:42:7f:02:
af:ed:a1:e0:27:98:1a:5e:e1:6b:ee:b2:c1:89:76:
9b:ac:68:3f:0d:b5:c8:55:5f:d0:db:ff:5d:3d:6a:
d3:d9:3b:6a:e1:74:08:55:27:4c:03:90:78:03:c7:
ed:aa:cb:20:64:58:23:24:22:62:27:22:71:90:f7:
dd:ea:2c:db:ae:e4:2f:36:5f:eb:5e:18:9a:53:95:
c7:60:c0:da:b7:63:0f:62:72:0d:cd:ba:8f:a1:cc:
21:3a:ab:8f:d2:07:e4:e5:cb:2a:a8:1b:cd:2b:eb:
52:b3:4f:a7:37:80:69:a2:69:af:42:08:bb:ad:f6:
f4:2f:aa:ec:22:3b:60:8c:eb:fd:40:a4:84:91:cd:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:8B:DD:D3:E9:17:D4:99:B8:95:0C:58:30:32:2C:83:7A:D7:01
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6WmL3dPpF9SZuJUMWDAyLIN61wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
3b:ca:0a:e2:6e:66:f1:fa:e2:f5:7a:3c:ee:d1:f0:6b:8b:96:
00:0a:9e:82:41:de:f3:e4:c3:eb:81:a9:fd:39:68:aa:f3:fc:
08:66:a1:05:49:13:31:45:e9:d9:3f:2c:2e:3e:9b:4a:48:97:
71:ff:72:90:1e:b8:23:b5:86:8f:ba:c7:38:df:ce:d4:ae:8d:
d2:01:cb:94:3d:3c:e2:34:c4:1d:93:d0:8e:52:ed:5d:18:20:
07:97:79:41:d8:0a:8f:77:ce:3e:d9:8f:6c:8a:b8:d5:3c:17:
86:3a:00:d1:f1:25:f7:ff:98:5b:d9:1a:da:37:31:62:3e:58:
6e:4e:98:90:53:f2:93:df:d7:5d:76:11:4c:d4:01:89:10:b7:
e3:61:48:fc:a8:64:9b:25:0a:d2:1f:b5:bf:64:5d:09:cf:28:
cd:24:39:62:db:b6:f1:ce:b6:ab:3c:97:20:ef:96:33:8d:26:
4a:5e:62:05:8e:c1:15:f9:f2:29:e2:f7:c4:59:0d:0d:49:00:
29:e1:43:a5:91:fd:d3:3d:da:8e:4d:20:c0:61:62:a7:aa:14:
6b:aa:e9:8b:0c:6c:e8:32:07:84:b7:51:ba:74:77:f5:b4:86:
b6:ce:60:24:12:e2:0c:10:bf:88:e0:a9:5f:ec:4a:52:b6:d1:
14:09:63:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:48 2025 by rpki-client