Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8H0lUAqvGWTkiCc6B879wO3Q5no.roa
File: 8H0lUAqvGWTkiCc6B879wO3Q5no.roa (raw, json)
Hash identifier: meqSud+4NWZDltjB4DKKS5Bt8dgyBLJXQdTSqZ4HAis=
Subject key identifier: F0:7D:25:50:0A:AF:19:64:E4:88:27:3A:07:CE:FD:C0:ED:D0:E6:7A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911A7D4BA9AE1C710843774006753765C4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8H0lUAqvGWTkiCc6B879wO3Q5no.roa
Signing time: Sat 03 Aug 2024 23:05:04 +0000
ROA not before: Sat 03 Aug 2024 23:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:1a7c:da3b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1a:7d:4b:a9:ae:1c:71:08:43:77:40:06:75:37:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 23:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f07d25500aaf1964e488273a07cefdc0edd0e67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:ea:d0:db:ac:70:44:a5:3c:03:ed:f3:08:
b9:5f:0f:aa:c8:7b:46:40:58:e0:3b:10:63:fb:db:
a8:b6:f6:61:7d:6c:41:12:2f:e8:1b:46:11:59:79:
1c:73:69:3c:24:c7:27:f1:19:6e:01:ec:b6:ec:7e:
e0:fe:cb:27:3d:45:ea:0e:ee:b4:32:0e:96:ff:a4:
af:6e:77:94:76:1a:f3:ba:48:07:c6:43:4f:c2:31:
2b:79:03:c9:6f:d9:93:30:0b:0b:4e:0f:82:64:29:
36:ab:ce:95:7b:fd:ff:72:be:8b:e7:83:01:5a:15:
c0:f3:59:32:5d:55:be:68:6b:95:05:7e:59:d0:5c:
4f:d8:a0:f0:80:ad:e6:ba:6b:7b:de:f5:4b:f5:fa:
5c:19:7a:05:70:ba:9f:de:88:fb:4e:af:42:82:81:
e2:08:8e:5d:77:9f:11:79:f4:9e:e2:ef:26:c0:e8:
46:91:b2:9b:c6:ad:29:0b:ec:72:8e:d8:34:f8:1d:
54:db:7d:09:e6:d3:48:41:31:b0:cf:3d:04:20:74:
98:e2:30:6e:b7:2d:e6:80:e7:d4:17:af:54:96:6b:
a8:c4:fb:b3:3c:89:f1:53:46:fd:66:3e:66:0c:42:
70:e1:24:ef:5e:b2:ed:b3:95:ad:88:09:13:c8:d9:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7D:25:50:0A:AF:19:64:E4:88:27:3A:07:CE:FD:C0:ED:D0:E6:7A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8H0lUAqvGWTkiCc6B879wO3Q5no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:1a7c:da3b/128
Signature Algorithm: sha256WithRSAEncryption
85:1e:23:4a:89:f8:78:69:98:75:c3:5d:4e:23:81:ba:69:aa:
2e:75:07:74:58:8d:99:5b:a1:13:3e:d5:6c:d4:55:0e:fd:c5:
ce:cb:1a:f7:0e:de:59:8a:8f:6c:1a:0b:65:4b:28:7b:14:81:
0f:ed:bf:a5:12:8b:1e:3c:63:d2:2e:2c:c5:d9:0b:5b:9a:63:
86:9c:71:b8:9f:ac:38:21:e4:9b:45:18:40:fc:fd:95:60:82:
a7:87:1d:1b:1f:45:7e:20:62:be:19:bb:40:8f:72:c7:d4:e4:
4b:a6:3b:1a:b6:ed:7a:62:4e:20:cf:a8:e2:a5:43:4e:78:a0:
0e:b1:8b:54:ca:0c:49:5c:ea:78:57:ea:c7:38:bd:2d:dc:37:
3e:82:9b:d4:da:34:a5:68:05:83:a1:d6:47:99:98:6c:d4:c4:
78:94:d4:7f:28:e9:6b:2b:76:83:61:2d:2e:cd:e9:64:16:db:
f4:1d:a9:4d:8d:f2:e1:04:8f:6e:0b:be:2e:7b:c7:06:95:2e:
31:ef:5e:43:95:ef:b7:fe:6d:c1:48:ad:56:13:87:8f:d6:21:
9a:ff:cd:12:d6:ba:ea:48:08:35:ce:f0:f9:fc:3f:6d:78:bd:
77:a3:cc:e6:74:02:bf:e3:25:0b:4b:4c:b4:18:75:a0:e0:fe:
7f:95:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:42 2025 by rpki-client