Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9V-uStV6MyEwR8orl6VSFQhtmyc.roa
File: 9V-uStV6MyEwR8orl6VSFQhtmyc.roa (raw, json)
Hash identifier: ewxUOSnGEUd9lZamPFz+unZzdvqsHlnQzNFxuCzfUao=
Subject key identifier: F5:5F:AE:4A:D5:7A:33:21:30:47:CA:2B:97:A5:52:15:08:6D:9B:27
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019594FF3C04A91AD615AADE3CF08D21E4FE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9V-uStV6MyEwR8orl6VSFQhtmyc.roa
Signing time: Fri 14 Mar 2025 14:11:49 +0000
ROA not before: Fri 14 Mar 2025 14:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:ff:3c:04:a9:1a:d6:15:aa:de:3c:f0:8d:21:e4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 14 14:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55fae4ad57a33213047ca2b97a55215086d9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:21:6f:38:31:2c:1b:e3:0e:64:92:7d:e2:
fb:77:37:6b:2f:dc:d7:1c:1e:df:85:5e:8c:ac:fc:
46:44:42:d2:f0:84:ec:24:6a:ad:c8:74:1f:6b:6f:
16:a3:3c:1a:4b:58:1f:69:7e:13:13:e7:d0:22:1c:
22:67:66:20:e9:b0:05:f1:7c:fe:53:c4:00:e9:62:
f8:af:76:35:12:65:cb:a4:9e:00:b2:ae:1f:57:67:
6d:bc:69:3f:46:21:d8:5a:3a:0c:1d:ad:e6:7d:52:
85:e4:11:55:d0:f6:03:d5:03:f8:38:cd:c8:1e:25:
cb:39:f6:46:c6:dd:37:c1:b7:c5:17:be:82:80:07:
e2:40:a7:98:c2:79:e4:58:7f:92:32:22:c1:dd:13:
29:99:e9:aa:d3:04:8d:ea:15:78:9b:b3:dd:16:19:
bd:df:fb:5c:ee:ac:00:f4:29:f6:8c:1c:d4:9d:01:
27:e8:cb:b0:ce:30:67:1d:e7:0b:3a:de:7a:01:45:
61:1a:ab:c2:34:86:c5:e7:8d:c1:7a:e7:f6:de:2f:
4e:99:3b:01:d1:24:12:89:c6:a2:fb:61:ae:c0:92:
61:37:51:20:99:53:67:55:44:06:8e:53:30:99:16:
88:a6:49:62:a2:89:10:b3:e3:f1:59:ae:22:54:01:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:AE:4A:D5:7A:33:21:30:47:CA:2B:97:A5:52:15:08:6D:9B:27
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9V-uStV6MyEwR8orl6VSFQhtmyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
57:ea:c3:ef:11:ac:f1:84:44:33:91:01:be:c4:da:04:4a:07:
c6:c8:02:7e:d2:98:5b:6f:26:e5:35:31:89:d8:d8:3d:33:b5:
9e:aa:1a:fc:a1:ea:64:a9:db:0c:53:65:fa:1d:ea:8f:ee:4e:
9d:33:eb:91:d6:05:82:d5:5c:f5:6f:ac:80:38:9e:2c:9d:db:
2e:06:11:49:50:38:a2:77:9b:ff:5c:d5:e7:c5:f8:9c:66:7f:
92:81:da:5c:0c:be:42:77:fb:b1:0d:77:2a:d2:1d:9f:b2:4c:
a1:d3:10:41:3b:c4:91:10:14:f4:d1:40:19:d3:2f:66:95:52:
6a:c8:dc:83:c5:25:af:e4:ae:7c:7e:61:18:34:66:d9:59:32:
18:38:77:af:aa:b7:c0:83:57:7e:c3:18:b6:96:47:c0:46:5f:
a4:9e:a1:d6:49:7f:e2:e6:23:46:95:39:11:45:47:9d:bf:81:
b1:6d:2e:2e:ad:b5:37:f1:77:06:d9:af:96:fa:3c:82:8d:ea:
f3:5e:39:69:0b:bc:d2:dc:4d:cf:6b:a0:6a:85:44:d7:ae:24:
07:68:95:aa:0c:48:a8:ee:ad:95:cd:3b:c3:9a:9c:94:42:a9:
31:05:af:93:84:16:b1:5a:47:44:d6:9b:a2:39:4b:32:53:91:
ec:fc:38:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:20:46 2025 by rpki-client