Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8T7w0z3kGpnGUpv6Hd5lQ_0t5iA.roa
File: 8T7w0z3kGpnGUpv6Hd5lQ_0t5iA.roa (raw, json)
Hash identifier: Wnw0w9lflIs4ibzRtmJKcWQrCFspIy0vGDKA5ML89gQ=
Subject key identifier: F1:3E:F0:D3:3D:E4:1A:99:C6:52:9B:FA:1D:DE:65:43:FD:2D:E6:20
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959F15EFD1C21C5D339F4E89A3296AE953
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8T7w0z3kGpnGUpv6Hd5lQ_0t5iA.roa
Signing time: Sun 16 Mar 2025 13:12:49 +0000
ROA not before: Sun 16 Mar 2025 13:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:15:ef:d1:c2:1c:5d:33:9f:4e:89:a3:29:6a:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 13:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f13ef0d33de41a99c6529bfa1dde6543fd2de620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:51:e5:d0:f6:53:ac:49:49:04:c4:a2:0f:
e7:08:8f:ea:cd:31:f6:c0:b0:2f:31:4d:d5:b9:59:
c6:51:e6:d0:03:2e:f7:6d:6c:23:f3:22:b7:ec:57:
c0:d2:4f:95:e5:85:f7:4a:ee:d9:d3:6c:c5:74:d2:
e9:d2:70:90:8b:40:3d:36:9e:3a:f0:6e:3a:6d:7f:
1a:5f:c7:15:49:c6:78:e6:e8:e9:4f:d7:f1:95:17:
1c:f1:ee:4f:e1:f7:31:94:ba:17:86:ba:c4:b2:9d:
32:90:01:f0:6d:8c:6b:d6:6e:36:51:2a:22:1d:9c:
90:fd:20:1a:2b:0d:cb:28:f2:15:80:76:2a:f8:53:
bd:71:45:15:9f:37:53:60:5e:26:dc:e5:06:82:bb:
bf:5a:b6:38:67:35:f5:15:79:94:dd:79:c0:25:8c:
bd:ed:0a:e3:37:ca:c9:4f:e3:a8:4a:77:1f:d2:74:
64:87:10:2f:03:87:d1:a9:a9:16:4a:95:18:84:f5:
65:4a:0c:74:93:3a:dd:35:e0:95:19:f8:50:e8:0c:
21:d1:a6:cc:d6:1f:6b:81:1a:49:03:d4:c8:71:83:
cd:6d:b3:0c:06:68:c5:5c:a0:ff:7f:b0:f3:4c:45:
1e:4d:c8:82:c1:6f:a1:47:21:52:54:3f:de:79:6a:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3E:F0:D3:3D:E4:1A:99:C6:52:9B:FA:1D:DE:65:43:FD:2D:E6:20
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8T7w0z3kGpnGUpv6Hd5lQ_0t5iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
72:d5:54:15:5f:e6:c4:d0:c0:9a:f8:74:90:fb:27:4d:08:53:
6f:4d:59:9f:39:f1:d4:68:71:7c:28:47:15:86:93:2c:62:85:
dc:87:f6:cd:a2:29:d5:a5:94:f8:f4:51:cc:ce:33:52:87:ac:
a6:e4:6f:f2:c1:25:e3:62:de:12:42:98:13:47:1a:31:14:64:
c3:33:7b:31:c7:d4:1d:bb:09:f9:3e:f6:e1:5b:d0:ce:b6:54:
f6:db:d3:87:b6:f2:81:b4:c3:b0:4d:33:5f:58:e7:94:e1:76:
87:1e:f8:37:0a:2c:96:37:a0:7b:fb:44:18:fc:6a:7c:dc:ac:
61:ff:62:fc:ae:98:68:c0:e0:87:ab:85:0b:5c:80:8f:a7:74:
f1:85:39:90:7b:99:75:df:c9:e5:1e:bc:85:82:89:53:c7:c3:
8b:43:f7:96:dd:b1:34:ac:0e:76:ed:39:cf:20:de:a2:59:eb:
7e:e5:47:a1:d1:90:01:60:8b:7f:f0:4d:b4:e6:9e:58:42:2e:
51:8a:96:31:a5:bf:7a:da:34:f0:d5:51:24:d7:b4:a8:c3:ae:
f3:0e:63:92:c4:96:82:be:31:cd:c6:01:2d:53:45:72:b8:53:
8d:bc:5b:fc:86:9c:0a:08:44:08:eb:16:15:f1:2d:4a:5c:93:
73:5d:45:34
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWfFe/RwhxdM59OiaMpaulTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE2MTMxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTNlZjBkMzNkZTQxYTk5YzY1MjliZmExZGRlNjU0M2ZkMmRlNjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv9R5dD2U6xJSQTEog/nCI/qzTH2
wLAvMU3VuVnGUebQAy73bWwj8yK37FfA0k+V5YX3Su7Z02zFdNLp0nCQi0A9Np46
8G46bX8aX8cVScZ45ujpT9fxlRcc8e5P4fcxlLoXhrrEsp0ykAHwbYxr1m42USoi
HZyQ/SAaKw3LKPIVgHYq+FO9cUUVnzdTYF4m3OUGgru/WrY4ZzX1FXmU3XnAJYy9
7QrjN8rJT+OoSncf0nRkhxAvA4fRqakWSpUYhPVlSgx0kzrdNeCVGfhQ6Awh0abM
1h9rgRpJA9TIcYPNbbMMBmjFXKD/f7DzTEUeTciCwW+hRyFSVD/eeWqQuQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPE+8NM95BqZxlKb+h3eZUP9LeYgMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvOFQ3dzB6M2tHcG5HVXB2NkhkNWxRXzB0NWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEActVUFV/mxNDAmvh0kPsnTQhT
b01Znznx1GhxfChHFYaTLGKF3If2zaIp1aWU+PRRzM4zUoespuRv8sEl42LeEkKY
E0caMRRkwzN7McfUHbsJ+T724VvQzrZU9tvTh7bygbTDsE0zX1jnlOF2hx74Nwos
ljege/tEGPxqfNysYf9i/K6YaMDgh6uFC1yAj6d08YU5kHuZdd/J5R68hYKJU8fD
i0P3lt2xNKwOdu05zyDeolnrfuVHodGQAWCLf/BNtOaeWEIuUYqWMaW/eto08NVR
JNe0qMOu8w5jksSWgr4xzcYBLVNFcrhTjbxb/IacCghECOsWFfEtSlyTc11FNA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:33:57 2025 by rpki-client