Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9MEMZ4wYus7dgJQatyqIVVgZ5SI.roa
File: 9MEMZ4wYus7dgJQatyqIVVgZ5SI.roa (raw, json)
Hash identifier: ZRHunQHHa85r754zCYEVjL+V2ZU2Ln1IeZ5+Qmbct3g=
Subject key identifier: F4:C1:0C:67:8C:18:BA:CE:DD:80:94:1A:B7:2A:88:55:58:19:E5:22
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D041403804E3F9FBDFFEB74DE1E56FBC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9MEMZ4wYus7dgJQatyqIVVgZ5SI.roa
Signing time: Sun 08 Sep 2024 06:10:22 +0000
ROA not before: Sun 08 Sep 2024 06:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:41:40:38:04:e3:f9:fb:df:fe:b7:4d:e1:e5:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 06:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c10c678c18bacedd80941ab72a88555819e522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:f1:3e:cd:b2:0a:e9:45:c6:1a:95:6c:7e:
8c:0d:79:8f:fd:a9:f6:70:a2:11:9f:85:08:f5:93:
9f:17:a5:52:ce:57:49:7f:69:aa:3b:28:b5:2c:55:
7c:74:02:b8:10:60:68:33:f8:a0:e1:c4:7f:b5:b0:
06:99:cb:28:72:97:38:12:36:15:e7:bd:fb:33:ff:
8f:6f:cc:0d:45:47:43:6d:8a:5c:91:cb:ad:81:d9:
58:15:18:b7:db:50:9b:b7:c8:d1:df:e3:5f:61:de:
50:e4:b5:1f:8c:7b:7d:d2:81:fd:73:13:e7:8d:cf:
24:55:34:1e:bc:a8:2f:85:44:8b:4f:7f:3c:68:b0:
78:bb:d4:f8:d8:84:e3:93:95:cc:dd:f0:10:9e:4e:
66:98:d2:67:68:58:9f:30:b7:53:d0:32:b7:9e:5b:
9e:f1:b4:23:57:e9:c0:1a:22:f5:e0:13:9d:63:93:
bc:04:9b:38:60:53:bd:48:e3:b0:eb:66:c3:56:7d:
2c:e4:08:03:d3:c6:18:c9:50:8a:a8:02:e7:3c:5f:
46:76:96:08:7a:d3:41:5f:a7:8d:c8:fb:6a:4e:90:
fc:4a:85:aa:87:0a:b9:bc:3f:34:fb:b6:84:ac:f6:
e9:fb:9f:02:07:a0:07:f1:20:49:f2:fa:d9:9c:19:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C1:0C:67:8C:18:BA:CE:DD:80:94:1A:B7:2A:88:55:58:19:E5:22
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9MEMZ4wYus7dgJQatyqIVVgZ5SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
5e:8b:0d:b9:b5:d5:cc:07:99:2e:f2:dd:bf:ad:1e:fd:3f:40:
71:bd:c1:4a:72:0f:3d:d0:cd:3f:b8:ab:5e:96:b5:7a:98:b7:
9e:a0:0d:d9:15:83:b7:2e:11:63:0e:e3:dc:f9:32:3c:1f:d3:
01:04:3e:d5:a8:dd:c1:e6:86:aa:93:c2:a1:ed:39:04:1e:5a:
fc:5b:4a:0f:14:20:74:42:48:08:66:7d:e3:08:e3:be:7a:7c:
68:91:da:21:12:7b:ca:c3:a3:65:4a:a4:4c:2a:cd:fb:75:ec:
a0:29:5c:b0:13:1f:a5:86:68:7e:3d:b4:47:15:77:44:75:79:
c3:34:82:0c:81:99:a1:47:2e:7d:06:42:3b:7d:de:50:91:f5:
be:84:a8:16:06:37:44:6e:00:a0:a8:bd:18:16:2d:3b:6a:7b:
53:7a:2c:28:d2:c7:b6:56:6a:a8:0b:f6:9b:1a:4c:0f:2b:88:
74:25:81:b5:67:af:8b:15:59:a8:28:0f:59:79:6d:df:e6:ee:
a7:c8:23:f0:38:27:9b:09:22:e2:ad:63:17:d6:0e:e8:d0:40:
78:fe:ec:bb:2c:0c:25:86:25:34:3c:f9:80:b1:d5:8b:ea:53:
6a:59:3b:10:fb:06:29:57:3a:d6:8f:20:23:c0:9e:5e:a3:ca:
7a:a4:5b:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:43 2025 by rpki-client