Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7ZLsZwHnkYnReW21jOHAxp1qVZo.roa
File: 7ZLsZwHnkYnReW21jOHAxp1qVZo.roa (raw, json)
Hash identifier: n6V2w+9Fr0NRQ446/JaQXe+HwwtnDERg/ZhoysvE3FI=
Subject key identifier: ED:92:EC:67:01:E7:91:89:D1:79:6D:B5:8C:E1:C0:C6:9D:6A:55:9A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01956C335B9663FBA24A79D1A0493A11394D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7ZLsZwHnkYnReW21jOHAxp1qVZo.roa
Signing time: Thu 06 Mar 2025 16:04:19 +0000
ROA not before: Thu 06 Mar 2025 16:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:6c33:4898/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:33:5b:96:63:fb:a2:4a:79:d1:a0:49:3a:11:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 6 16:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed92ec6701e79189d1796db58ce1c0c69d6a559a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:02:ad:e7:c7:02:e1:05:29:fd:bc:81:bb:
d8:ce:ef:ca:34:f5:56:b1:a5:d9:0b:39:24:6a:a0:
a1:f1:f2:e1:e9:42:32:4f:b7:de:4f:c4:32:9f:57:
cb:a8:48:7b:1e:9d:07:1e:b3:58:55:40:e4:ac:ed:
15:61:c2:53:7b:93:ef:50:7f:be:c9:8d:f4:05:8f:
bb:b8:30:e8:a9:6a:28:11:40:cf:56:d1:0d:c7:85:
8b:39:0a:39:9a:0c:b4:61:14:b2:a6:2a:f0:4f:cf:
51:81:51:39:01:15:95:97:a2:98:44:1f:b5:4a:6e:
e4:35:20:2a:25:57:14:fa:12:93:b4:33:c6:ef:ad:
20:2d:b8:6b:04:7a:c8:49:00:a8:5c:8f:9c:d8:67:
28:65:3f:ef:5b:32:e2:b6:98:f0:1d:62:25:25:35:
ab:b7:c7:91:1c:05:1a:18:27:2f:46:c5:bf:ed:fb:
36:2b:51:fd:27:8f:1d:94:77:7d:ac:f8:af:2d:d1:
12:d1:3b:25:11:fc:4f:d8:97:b6:20:d7:76:98:42:
83:c4:a3:f0:f5:fa:31:07:72:ae:17:1c:e1:a9:86:
78:02:5b:63:de:b2:ed:2a:d4:34:30:47:5b:79:d5:
be:6f:cc:34:82:8c:79:89:c3:bd:c4:6f:16:09:45:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:EC:67:01:E7:91:89:D1:79:6D:B5:8C:E1:C0:C6:9D:6A:55:9A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7ZLsZwHnkYnReW21jOHAxp1qVZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:6c33:4898/128
Signature Algorithm: sha256WithRSAEncryption
7d:73:31:b5:31:58:a2:85:a8:95:48:17:44:38:60:ed:22:87:
33:56:f4:25:28:53:4c:97:64:72:b4:f5:64:78:1b:fd:bc:82:
a7:af:17:e5:69:53:23:bf:90:0a:18:38:5d:c8:34:2e:e2:35:
37:94:ab:be:66:af:a1:2c:61:91:38:47:ed:3c:7e:00:8e:bd:
d5:43:b6:7b:2d:26:ca:a1:5c:53:81:5f:d7:50:3f:9e:7e:81:
db:2f:5d:76:5c:35:b3:0b:41:a7:6c:53:9c:86:ff:b0:79:c5:
24:ca:12:40:9a:7a:d5:8d:76:84:7b:fc:42:d2:72:3d:7a:5d:
b9:a7:bb:76:35:8f:e0:d5:69:5d:f4:38:c0:43:5a:39:c9:03:
f3:73:a2:83:31:2a:a4:92:60:f9:ab:86:e5:a9:31:48:c7:97:
b7:4b:ea:c9:7b:67:e6:d1:2d:ae:5b:8b:23:b6:ef:95:b8:93:
62:e5:9c:4e:d9:94:73:d3:9c:ba:68:77:09:76:8a:7f:03:71:
b8:e6:ce:23:3c:ee:31:08:d3:9e:00:cf:7c:f6:85:48:ce:d5:
d6:52:a4:76:f2:8c:c5:fa:c5:68:8c:5e:41:92:f3:1a:7e:04:
81:9a:74:6a:a3:6e:37:f9:6b:6d:d4:b9:44:34:9e:bc:9a:ab:
4d:bb:30:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:12 2025 by rpki-client