Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/A0iiqT1rcsasQFa6OfT_W9FqyOQ.roa
File: A0iiqT1rcsasQFa6OfT_W9FqyOQ.roa (raw, json)
Hash identifier: R/yIoG/gM8utt4fMJ0M4SqQdGYP2OFQr9R6ANOjtoX8=
Subject key identifier: 03:48:A2:A9:3D:6B:72:C6:AC:40:56:BA:39:F4:FF:5B:D1:6A:C8:E4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019115C4CC9041FE88C1AA31A2D9BBA3E887
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/A0iiqT1rcsasQFa6OfT_W9FqyOQ.roa
Signing time: Sat 03 Aug 2024 01:05:04 +0000
ROA not before: Sat 03 Aug 2024 01:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:15c4:a02/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:15:c4:cc:90:41:fe:88:c1:aa:31:a2:d9:bb:a3:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 3 01:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0348a2a93d6b72c6ac4056ba39f4ff5bd16ac8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:0a:88:29:69:e0:fa:5b:54:ca:4f:da:db:
ed:fe:ec:8a:1a:35:7a:a1:10:5d:a3:8f:ca:95:33:
1e:e9:a7:87:bb:f9:a0:63:64:99:35:5b:23:9a:33:
00:15:d1:6d:c2:9d:e1:b2:aa:44:c1:75:f1:de:1c:
af:4e:02:d2:95:ee:69:95:7c:db:1a:b5:d6:19:ac:
b7:4c:dd:60:58:c8:6e:cd:ef:6c:83:42:34:7c:0d:
23:d6:6c:dc:14:96:e0:1c:27:aa:a9:4a:f6:33:53:
28:96:54:9c:c3:14:f3:a3:3d:06:64:36:c8:b9:1f:
9f:8e:6e:7b:d5:8d:af:bc:64:4f:be:5d:1a:81:78:
b0:ed:f5:67:86:18:98:0c:68:dc:ea:ba:33:2f:20:
fc:88:48:ef:33:3d:ad:ce:2f:00:46:b2:6a:06:ad:
0a:ba:f6:b4:cf:2c:c4:4c:17:4c:a3:10:04:62:0d:
4b:9b:fb:53:2d:69:0a:2d:80:74:ed:32:cc:de:58:
04:8f:49:25:7c:99:5b:57:04:4c:43:c2:60:50:08:
98:6b:10:d2:d0:37:e5:e7:b2:97:ee:20:4e:84:99:
6f:31:b5:c2:c2:d7:50:46:c3:ab:0c:f2:86:d4:27:
b7:2e:d7:f7:92:4d:2a:9c:3e:df:d1:ab:f3:61:45:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:48:A2:A9:3D:6B:72:C6:AC:40:56:BA:39:F4:FF:5B:D1:6A:C8:E4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/A0iiqT1rcsasQFa6OfT_W9FqyOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:15c4:a02/128
Signature Algorithm: sha256WithRSAEncryption
46:57:11:c5:3e:dc:af:69:34:2a:ca:90:6c:87:18:5e:3a:9f:
79:c1:93:ec:bc:ca:b8:3d:25:f9:9a:db:54:c7:6b:f5:47:a8:
65:dc:4e:77:a0:b0:4f:04:42:8a:14:7f:35:0b:75:4b:08:a2:
07:31:23:fe:0c:dd:6d:87:48:f8:c9:7c:b2:b7:14:39:70:15:
24:e4:bc:cd:05:b7:39:d4:d0:4e:2e:c7:fa:fe:68:d5:ad:c6:
4b:2e:da:c9:2f:05:51:ed:23:47:23:fc:18:88:4c:d1:98:f4:
aa:35:6b:de:b0:7d:af:58:fa:f2:4e:22:04:21:64:41:85:95:
5e:d3:6d:19:b4:ee:8d:e3:f0:59:03:86:79:64:45:85:cc:a0:
8e:37:be:36:ec:21:47:04:9e:a3:b1:0e:a9:b0:df:14:7f:4b:
87:9d:f0:9c:1b:70:79:c3:2c:e2:5d:c4:22:70:01:7d:a0:38:
9b:fb:cf:76:02:c6:98:eb:65:52:1b:57:cc:fb:69:a1:79:af:
ca:ef:a5:af:02:cf:d2:96:3c:fd:2e:b9:d5:32:c6:5d:ec:68:
84:03:c9:17:d7:cb:0d:2a:84:d3:03:79:08:3e:46:5a:3a:6e:
44:8d:c2:f9:8e:9f:61:b8:66:59:ee:44:de:5e:b8:c0:59:56:
e2:3d:e7:17
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZEVxMyQQf6Iwaoxotm7o+iHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODAzMDEwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzQ4YTJhOTNkNmI3MmM2YWM0MDU2YmEzOWY0ZmY1YmQxNmFjOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA498KiClp4PpbVMpP2tvt/uyKGjV6
oRBdo4/KlTMe6aeHu/mgY2SZNVsjmjMAFdFtwp3hsqpEwXXx3hyvTgLSle5plXzb
GrXWGay3TN1gWMhuze9sg0I0fA0j1mzcFJbgHCeqqUr2M1MollScwxTzoz0GZDbI
uR+fjm571Y2vvGRPvl0agXiw7fVnhhiYDGjc6rozLyD8iEjvMz2tzi8ARrJqBq0K
uva0zyzETBdMoxAEYg1Lm/tTLWkKLYB07TLM3lgEj0klfJlbVwRMQ8JgUAiYaxDS
0Dfl57KX7iBOhJlvMbXCwtdQRsOrDPKG1Ce3Ltf3kk0qnD7f0avzYUUnAQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFANIoqk9a3LGrEBWujn0/1vRasjkMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQTBpaXFUMXJjc2FzUUZhNk9mVF9XOUZxeU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkRXECgIwDQYJKoZIhvcNAQELBQADggEB
AEZXEcU+3K9pNCrKkGyHGF46n3nBk+y8yrg9Jfma21THa/VHqGXcTnegsE8EQooU
fzULdUsIogcxI/4M3W2HSPjJfLK3FDlwFSTkvM0FtznU0E4ux/r+aNWtxksu2skv
BVHtI0cj/BiITNGY9Ko1a96wfa9Y+vJOIgQhZEGFlV7TbRm07o3j8FkDhnlkRYXM
oI43vjbsIUcEnqOxDqmw3xR/S4ed8JwbcHnDLOJdxCJwAX2gOJv7z3YCxpjrZVIb
V8z7aaF5r8rvpa8Cz9KWPP0uudUyxl3saIQDyRfXyw0qhNMDeQg+Rlo6bkSNwvmO
n2G4ZlnuRN5euMBZVuI95xc=
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:50 2025 by rpki-client