Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7NCelSBVS3bb9nufp7fylWUw16M.roa
File: 7NCelSBVS3bb9nufp7fylWUw16M.roa (raw, json)
Hash identifier: rOfqMGSzYQlKjTs2W8LZjw8dIOEFDkN/xIeS8BBG0M4=
Subject key identifier: EC:D0:9E:95:20:55:4B:76:DB:F6:7B:9F:A7:B7:F2:95:65:30:D7:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019469A3A14C1EA03CBFAD24656F951C6B8D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7NCelSBVS3bb9nufp7fylWUw16M.roa
Signing time: Wed 15 Jan 2025 11:05:18 +0000
ROA not before: Wed 15 Jan 2025 11:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:69a2:bbc3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:a3:a1:4c:1e:a0:3c:bf:ad:24:65:6f:95:1c:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 15 11:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecd09e9520554b76dbf67b9fa7b7f2956530d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:43:ef:01:eb:83:e7:42:f9:6d:e6:24:ea:
fa:cc:c4:c1:24:52:d7:98:50:ae:92:12:5e:4f:59:
98:56:a1:ca:b4:8f:d9:93:13:40:bb:02:13:3d:24:
de:bc:41:a5:51:0b:ea:8c:96:38:7d:7d:14:af:1e:
1e:c1:09:f2:47:f3:55:33:f4:c9:6b:d5:c9:b9:dd:
88:ee:7a:fb:5a:9e:cf:ed:80:b7:f4:71:7e:05:ba:
ca:df:4b:fd:ef:c6:2c:45:9c:21:8f:d4:bb:82:3c:
e8:a8:75:2f:fb:f1:27:d6:14:23:4f:3d:38:15:9b:
35:6e:a5:a0:bc:fa:0f:8b:d4:ec:e3:d0:30:42:c9:
36:6b:19:45:76:49:22:ac:a2:01:1a:76:f0:36:c7:
c8:73:09:b2:9d:42:9a:e8:6e:e7:37:72:5d:0a:87:
f2:be:27:2c:f3:53:ee:c4:80:ee:9c:ed:db:02:23:
4c:0f:4e:d1:49:aa:f9:f2:e5:06:35:a9:e9:6c:ea:
b7:55:b4:7f:10:48:c8:85:c0:16:4e:8f:cb:b2:64:
5e:46:6e:81:34:5a:b2:54:cf:e6:db:40:f3:15:e3:
fa:89:88:7c:72:1c:ed:22:c3:d7:fc:b0:40:4a:0a:
94:26:c6:67:e8:3f:b8:75:7a:3e:fe:45:0e:9b:3c:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:9E:95:20:55:4B:76:DB:F6:7B:9F:A7:B7:F2:95:65:30:D7:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7NCelSBVS3bb9nufp7fylWUw16M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:69a2:bbc3/128
Signature Algorithm: sha256WithRSAEncryption
7c:9a:7f:19:f1:e6:32:b6:33:0b:51:2c:81:77:42:72:7b:84:
55:21:e7:22:6c:1d:ed:ff:bd:3f:f5:4e:11:44:55:68:fa:05:
52:94:fd:c2:7b:25:b0:0f:fd:fe:f8:63:00:15:3c:af:71:82:
9d:e2:a5:98:73:9d:d6:32:6d:c8:4d:31:52:aa:f7:45:1f:4e:
9b:91:de:b6:93:23:89:0c:b6:f6:5d:9d:6c:fb:92:5d:9f:95:
76:7f:fb:72:8f:1a:09:3e:46:5c:ef:6a:f3:e8:2b:a1:f1:c3:
e9:34:42:59:1a:4a:86:a2:15:98:f3:6e:6f:6b:54:be:89:e1:
8f:be:d0:26:15:45:75:e6:1c:17:2c:7f:ca:df:15:bd:b8:19:
ee:94:b9:c9:1d:8e:1e:fc:90:0c:13:16:ad:cc:94:e9:39:b2:
a8:30:bc:7d:48:37:61:d1:6e:e0:7a:d0:49:5f:73:dc:65:43:
a8:f6:a6:da:f9:10:89:ff:4b:87:18:42:99:32:55:c9:c9:51:
ef:13:8b:2c:04:0d:74:62:07:24:2c:cd:31:e8:68:ae:65:ed:
29:0b:d2:65:a6:3e:e4:6d:73:14:de:08:7b:0c:93:18:8d:26:
e6:44:f2:c8:f1:c7:c5:da:e6:fb:7d:26:7f:d8:90:a9:cc:3d:
b1:9a:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:45:13 2025 by rpki-client