Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ikUM8ulIoa9t47mQOtKh168Wjc.roa
File: 9ikUM8ulIoa9t47mQOtKh168Wjc.roa (raw, json)
Hash identifier: KHdkWGso0f1Nb6V5ye/4YT1gev0a3EXdUie2UeeVAAI=
Subject key identifier: F6:29:14:33:CB:A5:22:86:BD:B7:8E:E6:40:EB:4A:87:5E:BC:5A:37
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194F17714AD092B880B5AA755F1D0AAC2AD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ikUM8ulIoa9t47mQOtKh168Wjc.roa
Signing time: Mon 10 Feb 2025 20:05:00 +0000
ROA not before: Mon 10 Feb 2025 20:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:f176:ad81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:77:14:ad:09:2b:88:0b:5a:a7:55:f1:d0:aa:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 10 20:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6291433cba52286bdb78ee640eb4a875ebc5a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:99:2e:13:51:d7:2f:ba:7e:d6:21:bf:39:
b2:7e:92:75:b0:61:5e:17:d5:ac:d0:d2:56:c6:c2:
25:21:21:4c:31:59:ff:5d:6d:94:bf:fa:d6:c1:1e:
41:bc:53:00:d4:98:99:ce:c5:96:52:0d:75:e7:1d:
59:94:b1:26:22:53:fc:2f:c7:2b:88:70:6d:c9:06:
74:ef:5d:f4:66:6b:c3:ee:e0:36:18:43:0a:d2:24:
05:98:df:d8:38:aa:f9:22:c9:5a:7d:63:8b:81:f9:
18:4c:fa:c8:98:91:5d:9c:15:6b:69:28:57:b2:18:
31:1f:b9:08:c4:04:c6:98:fb:24:39:9d:97:23:12:
2c:52:a9:b4:ef:6d:50:1f:fa:d1:86:17:cb:53:f7:
ec:48:36:a3:00:9a:4c:b8:1e:b2:f7:33:b9:00:84:
37:62:2f:fc:a5:bc:ea:69:00:7e:45:a8:94:2a:27:
42:a4:64:07:71:a9:db:31:f3:96:ad:ba:51:0c:ae:
de:1e:17:84:01:cc:14:26:d1:81:ae:af:26:2b:68:
51:d0:99:1f:41:04:3a:bc:f5:90:86:11:6b:7d:c5:
db:8a:83:90:98:e8:1b:23:af:d7:32:37:d4:00:5d:
3a:79:59:99:19:17:99:32:51:91:b1:1f:cf:d0:5b:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:14:33:CB:A5:22:86:BD:B7:8E:E6:40:EB:4A:87:5E:BC:5A:37
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9ikUM8ulIoa9t47mQOtKh168Wjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:f176:ad81/128
Signature Algorithm: sha256WithRSAEncryption
96:d5:4f:33:e7:1d:9f:4f:96:d6:b3:45:e0:26:31:36:b0:a4:
f2:a7:f8:7f:e5:bf:53:35:e5:2a:06:aa:5c:46:91:dc:e9:ab:
41:8e:e0:e2:87:f9:bb:94:a8:ac:4a:18:a3:47:f9:5d:10:02:
11:b3:b8:75:e0:f3:58:8b:ba:e7:49:25:2a:cb:7f:aa:96:18:
ed:a6:b2:fe:8a:36:d5:9b:ad:2a:74:a7:45:ee:75:8a:48:ba:
81:78:7a:5a:44:12:53:8f:67:c5:77:05:d0:3b:68:85:05:b9:
fb:54:7a:53:8a:de:d7:96:ab:d3:fa:c3:ce:3f:92:75:a2:da:
46:ad:86:11:9c:81:e6:7c:46:5c:fc:27:d4:f9:12:1a:7f:ce:
c7:c1:7b:24:7b:67:ad:68:04:19:e9:05:93:45:c8:22:65:01:
e6:35:6b:33:2a:37:b3:ea:f9:66:4f:13:ac:76:a4:6a:82:a1:
89:c4:da:f0:1d:75:9e:04:1a:27:8f:48:8d:95:a3:0c:cf:18:
fe:62:8e:ce:1d:cf:e4:b2:46:45:b1:d8:ae:5c:56:56:81:79:
72:65:15:fa:cd:ed:41:44:73:c1:ce:d9:86:7d:67:b6:25:60:
e3:28:ed:db:86:0d:41:cb:9b:f3:f4:c8:6a:61:09:1d:2f:5e:
39:42:a1:49
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZTxdxStCSuIC1qnVfHQqsKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMjEwMjAwNTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjI5MTQzM2NiYTUyMjg2YmRiNzhlZTY0MGViNGE4NzVlYmM1YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MWZLhNR1y+6ftYhvzmyfpJ1sGFe
F9Ws0NJWxsIlISFMMVn/XW2Uv/rWwR5BvFMA1JiZzsWWUg115x1ZlLEmIlP8L8cr
iHBtyQZ07130ZmvD7uA2GEMK0iQFmN/YOKr5IslafWOLgfkYTPrImJFdnBVraShX
shgxH7kIxATGmPskOZ2XIxIsUqm0721QH/rRhhfLU/fsSDajAJpMuB6y9zO5AIQ3
Yi/8pbzqaQB+RaiUKidCpGQHcanbMfOWrbpRDK7eHheEAcwUJtGBrq8mK2hR0Jkf
QQQ6vPWQhhFrfcXbioOQmOgbI6/XMjfUAF06eVmZGReZMlGRsR/P0FtmbwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPYpFDPLpSKGvbeO5kDrSodevFo3MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvOWlrVU04dWxJb2E5dDQ3bVFPdEtoMTY4V2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGU8XatgTANBgkqhkiG9w0BAQsFAAOCAQEAltVPM+cdn0+W1rNF4CYxNrCk
8qf4f+W/UzXlKgaqXEaR3OmrQY7g4of5u5SorEoYo0f5XRACEbO4deDzWIu650kl
Kst/qpYY7aay/oo21ZutKnSnRe51iki6gXh6WkQSU49nxXcF0DtohQW5+1R6U4re
15ar0/rDzj+SdaLaRq2GEZyB5nxGXPwn1PkSGn/Ox8F7JHtnrWgEGekFk0XIImUB
5jVrMyo3s+r5Zk8TrHakaoKhicTa8B11ngQaJ49IjZWjDM8Y/mKOzh3P5LJGRbHY
rlxWVoF5cmUV+s3tQURzwc7Zhn1ntiVg4yjt24YNQcub8/TIamEJHS9eOUKhSQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:47:28 2025 by rpki-client