Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Jtjip69LRKOurOO9eMi55BIiE0.roa
File: 7Jtjip69LRKOurOO9eMi55BIiE0.roa (raw, json)
Hash identifier: yIYJF04FxyLdVs3ym3ERNpmID3FfiWsADk9UWB46qes=
Subject key identifier: EC:9B:63:8A:9E:BD:2D:12:8E:BA:B3:8E:F5:E3:22:E7:90:48:88:4D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194EE3F1B9409A149A213AE104953DA24D5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Jtjip69LRKOurOO9eMi55BIiE0.roa
Signing time: Mon 10 Feb 2025 05:05:00 +0000
ROA not before: Mon 10 Feb 2025 05:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:ee3e:7662/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:3f:1b:94:09:a1:49:a2:13:ae:10:49:53:da:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 10 05:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9b638a9ebd2d128ebab38ef5e322e79048884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:3c:5c:ac:f9:ed:9f:bd:7b:e0:4a:11:53:
6e:05:17:76:4a:c1:57:d3:3b:ff:70:37:86:12:3a:
db:c8:9c:46:14:6d:10:18:09:83:61:64:3b:48:08:
0a:0b:d2:a2:aa:82:01:9c:01:29:c2:7a:af:28:67:
fc:0d:bd:d5:7c:90:38:18:6e:15:8d:3e:f0:cc:43:
3a:ae:05:d5:00:8b:76:f6:1c:a5:5a:d7:eb:0e:92:
7f:3c:da:d5:89:11:a1:40:b4:0a:9c:86:2a:7a:c0:
1c:43:11:81:27:da:79:d7:5b:0b:f1:72:5f:78:c0:
11:fb:be:66:3f:30:09:2e:c0:85:d9:5e:01:54:fb:
ef:47:e8:75:65:df:75:65:12:b8:23:2a:71:b6:cd:
66:75:a5:d9:4e:51:35:51:25:50:8b:e7:d3:59:2a:
57:a1:7a:2f:8a:06:b9:45:19:9f:42:7d:4d:df:26:
e5:1e:6a:43:11:b6:4d:08:0d:a4:6d:06:de:20:c6:
93:cb:bd:11:d1:4b:38:65:ce:83:43:4a:6f:89:2d:
57:cd:54:de:a3:b9:68:36:04:7a:13:95:b5:42:83:
7a:d4:43:47:83:c1:c2:b8:7c:c4:b2:87:ce:a1:98:
7b:26:61:0f:18:03:fc:55:eb:f0:c7:60:46:b4:65:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:63:8A:9E:BD:2D:12:8E:BA:B3:8E:F5:E3:22:E7:90:48:88:4D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7Jtjip69LRKOurOO9eMi55BIiE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:ee3e:7662/128
Signature Algorithm: sha256WithRSAEncryption
85:15:cf:47:33:e6:04:7a:5b:27:dd:1b:75:1a:29:df:37:5b:
90:11:a4:33:7c:fe:4b:79:b5:26:4b:27:e3:de:f3:81:cc:0d:
b7:cc:55:ff:79:cd:cf:4e:eb:b3:16:2c:4b:37:60:8a:32:c2:
7d:fc:93:80:c5:be:de:c2:8d:51:ef:c1:ad:bd:e9:1e:42:25:
fd:0a:08:12:c5:da:c8:e2:97:df:e6:cf:75:40:b2:cf:76:a1:
37:3c:49:de:91:4c:e2:2c:97:41:33:a3:ff:1e:ac:c6:ab:33:
7d:ca:87:e0:6d:3d:b3:b9:2e:00:9f:85:0e:48:bd:0d:f9:3a:
fa:5f:0f:ab:af:a3:3a:f1:8e:d5:d6:41:97:3f:45:c2:42:ef:
91:f4:b8:26:6c:dd:5e:b8:95:91:38:24:ca:8f:72:d1:4e:b0:
20:ea:3d:ca:30:e9:60:97:5f:e8:4f:4b:fc:c2:d8:79:c6:5a:
8a:d4:99:aa:71:5e:f5:d1:11:31:5b:91:35:ea:12:89:64:b0:
6c:e5:4f:c8:99:4f:d3:99:1f:66:92:c5:40:9c:a2:50:f8:b1:
8c:4e:be:4e:39:f7:70:dc:61:ea:13:e5:0c:44:82:24:f4:7f:
22:5f:22:29:ee:38:0a:68:b2:4b:03:10:8d:6b:eb:ba:55:82:
af:b4:f5:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:25 2025 by rpki-client