Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6__IMo4Lpwjmi8zvRaEf6D4N3Bc.roa
File: 6__IMo4Lpwjmi8zvRaEf6D4N3Bc.roa (raw, json)
Hash identifier: 4S+QQyvZ/uZ+9l8L75davAYsEWjyEzpwTFkoUZ5rUNQ=
Subject key identifier: EB:FF:C8:32:8E:0B:A7:08:E6:8B:CC:EF:45:A1:1F:E8:3E:0D:DC:17
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019145007A255D8002577FB7DEB1B24367E3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6__IMo4Lpwjmi8zvRaEf6D4N3Bc.roa
Signing time: Mon 12 Aug 2024 05:12:24 +0000
ROA not before: Mon 12 Aug 2024 05:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:00:7a:25:5d:80:02:57:7f:b7:de:b1:b2:43:67:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 12 05:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebffc8328e0ba708e68bccef45a11fe83e0ddc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:8d:e0:a4:f5:1f:91:00:42:6a:52:f9:ad:
b8:72:eb:0a:93:3b:fc:28:52:33:70:4c:e6:b7:eb:
70:91:0f:f5:bc:53:3f:97:9d:75:13:1b:47:41:0a:
d5:08:9e:3a:4d:78:2c:3d:bc:88:9f:af:e5:9f:4e:
40:b1:40:90:3e:a7:f6:2f:af:5f:2e:08:a3:d6:73:
e0:c1:55:03:4e:e9:5d:f2:01:b7:7a:b3:ff:42:c4:
87:b1:65:3a:92:66:c0:b0:e7:e8:46:54:39:a1:eb:
f6:6f:ba:29:51:2f:37:78:03:b7:c6:73:0b:02:a1:
d6:4d:4c:a4:b9:3f:2e:e4:02:9d:28:d5:cc:f4:0d:
c4:9f:f9:89:3f:88:0b:47:67:33:73:38:94:be:2e:
4d:7f:6a:6b:07:00:86:dd:d3:89:f1:b9:c6:02:a7:
ba:72:34:62:1b:80:58:90:b0:d2:e6:eb:5b:88:87:
bf:3b:af:0d:dc:56:ef:49:c4:76:ad:2c:e2:a1:2a:
ef:4b:67:f0:ec:27:57:03:7b:a2:7b:f4:4f:20:c2:
f4:fb:5b:af:3a:57:ac:71:16:fe:33:51:ff:27:5d:
d9:18:a1:41:9d:f4:fd:51:79:f3:22:dc:11:2f:a1:
fc:dd:5e:85:3c:86:63:a9:9f:ba:36:45:e0:ce:72:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FF:C8:32:8E:0B:A7:08:E6:8B:CC:EF:45:A1:1F:E8:3E:0D:DC:17
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6__IMo4Lpwjmi8zvRaEf6D4N3Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
50:c6:04:68:8b:cf:2c:02:cf:dc:ee:b5:e4:2e:00:ff:fc:af:
c1:18:75:35:8a:e7:3b:33:4b:6a:be:56:8d:fc:cd:79:fa:c4:
17:25:03:de:d9:22:77:53:f7:02:b8:ab:ac:0b:13:84:79:e2:
0a:03:df:70:c0:e7:7a:be:7b:93:a0:e2:77:2a:c8:58:5c:b4:
34:ea:70:83:0b:cb:ce:c1:78:0e:3e:68:e9:eb:5c:4b:af:f8:
43:7e:eb:80:0e:4c:06:d2:1d:69:4a:91:af:bf:8d:0b:c5:51:
b4:04:53:72:e0:47:e1:f1:2c:59:cf:d0:d8:da:34:2a:89:52:
67:7e:9f:f7:50:74:5c:c1:01:fd:70:27:a4:1b:a1:29:3e:9f:
1b:37:69:ce:f7:7d:f1:df:d4:0b:5c:1b:c5:cb:54:01:87:9f:
a5:86:e2:81:77:dd:16:b8:63:c0:06:fd:64:52:a1:ee:d3:9a:
fb:9a:bb:0e:6a:ba:00:e7:fb:77:52:95:52:27:f8:ab:a2:8f:
00:57:2c:70:6d:58:41:96:39:68:6c:df:f0:d1:59:6b:94:0f:
1f:9c:76:b9:00:48:78:95:fc:7f:f3:e8:8f:ef:ac:83:59:d3:
a4:15:5b:69:6d:bd:8f:cf:a4:8f:07:87:e4:24:5e:94:0e:4a:
60:d4:23:cf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFFAHolXYACV3+33rGyQ2fjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODEyMDUxMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZmYzgzMjhlMGJhNzA4ZTY4YmNjZWY0NWExMWZlODNlMGRkYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jaN4KT1H5EAQmpS+a24cusKkzv8
KFIzcEzmt+twkQ/1vFM/l511ExtHQQrVCJ46TXgsPbyIn6/ln05AsUCQPqf2L69f
Lgij1nPgwVUDTuld8gG3erP/QsSHsWU6kmbAsOfoRlQ5oev2b7opUS83eAO3xnML
AqHWTUykuT8u5AKdKNXM9A3En/mJP4gLR2czcziUvi5Nf2prBwCG3dOJ8bnGAqe6
cjRiG4BYkLDS5utbiIe/O68N3FbvScR2rSzioSrvS2fw7CdXA3uie/RPIML0+1uv
OlescRb+M1H/J13ZGKFBnfT9UXnzItwRL6H83V6FPIZjqZ+6NkXgznIBSQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOv/yDKOC6cI5ovM70WhH+g+DdwXMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNl9fSU1vNExwd2ptaTh6dlJhRWY2RDROM0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAUMYEaIvPLALP3O615C4A//yv
wRh1NYrnOzNLar5WjfzNefrEFyUD3tkid1P3ArirrAsThHniCgPfcMDner57k6Di
dyrIWFy0NOpwgwvLzsF4Dj5o6etcS6/4Q37rgA5MBtIdaUqRr7+NC8VRtARTcuBH
4fEsWc/Q2No0KolSZ36f91B0XMEB/XAnpBuhKT6fGzdpzvd98d/UC1wbxctUAYef
pYbigXfdFrhjwAb9ZFKh7tOa+5q7Dmq6AOf7d1KVUif4q6KPAFcscG1YQZY5aGzf
8NFZa5QPH5x2uQBIeJX8f/Poj++sg1nTpBVbaW29j8+kjweH5CRelA5KYNQjzw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:52 2025 by rpki-client