Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZDdHoBA8GlAG2EZWJkS4zLe-no.roa
File: BZDdHoBA8GlAG2EZWJkS4zLe-no.roa (raw, json)
Hash identifier: YNEngCabYoP4olDlF6DmAEKvYvyBigGyN48H0MMc7x8=
Subject key identifier: 05:90:DD:1E:80:40:F0:69:40:1B:61:19:58:99:12:E3:32:DE:FA:7A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959047A769B319AE4D3EC98366805653EC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZDdHoBA8GlAG2EZWJkS4zLe-no.roa
Signing time: Thu 13 Mar 2025 16:12:49 +0000
ROA not before: Thu 13 Mar 2025 16:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:47:a7:69:b3:19:ae:4d:3e:c9:83:66:80:56:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 16:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0590dd1e8040f069401b6119589912e332defa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:69:12:7b:2e:2f:a8:62:45:ab:60:31:b0:
9e:ba:7f:f0:cf:9a:0d:c8:18:47:37:e8:3d:4c:ac:
8b:c4:56:46:00:e9:de:28:73:bd:d2:e8:80:1e:bc:
1e:74:11:de:25:67:63:79:5f:a2:1e:dd:ac:6d:28:
13:41:5c:30:4b:36:06:86:e3:49:bb:93:8b:3a:af:
06:e8:6f:00:3a:99:eb:cf:7c:a6:3f:bc:e9:01:53:
02:07:96:26:ff:d0:0e:ad:98:9a:86:cc:4b:90:b0:
b1:88:65:0a:b1:9b:0a:d9:3c:e7:6e:0a:8b:2c:1b:
7b:f9:73:16:73:d5:91:1b:a2:5a:a5:c8:9c:41:52:
11:82:f7:dc:d4:d3:f5:96:ca:87:de:85:a8:1f:d8:
bc:4b:88:01:f0:20:c3:34:9a:0f:95:06:03:05:a8:
50:87:a9:5c:48:23:7c:34:9a:62:e9:e2:a6:17:9a:
04:64:c9:cc:db:30:6d:73:25:23:8c:30:13:e3:c5:
4c:95:a9:a2:63:71:f1:56:0b:9d:4b:31:b4:3f:97:
a7:2c:47:84:80:ed:fa:45:d8:c9:ac:21:99:dc:6e:
a1:d0:29:c3:42:1f:3c:ba:70:cb:a1:8f:35:dd:2a:
0e:fa:c9:4b:2b:7f:1f:90:6e:91:b4:a4:36:f2:9e:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:DD:1E:80:40:F0:69:40:1B:61:19:58:99:12:E3:32:DE:FA:7A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZDdHoBA8GlAG2EZWJkS4zLe-no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
08:ac:9e:fb:ee:c8:c7:ba:ce:a4:f9:ea:45:7f:60:f9:a1:e8:
35:73:61:63:1b:c7:65:cd:cf:56:00:46:a6:81:51:22:6b:ff:
46:80:e5:c6:82:5b:23:79:9d:2e:eb:5a:1e:ae:0f:ed:f5:7f:
01:a0:05:9b:73:9e:da:61:b5:ee:ac:1e:e5:c5:c6:46:5b:29:
2f:45:63:cc:1b:02:5e:63:6d:3a:08:93:5b:b1:3f:d6:b9:19:
f1:12:e7:26:f7:26:6c:23:bb:40:52:3b:f5:de:1e:b4:67:7f:
5e:88:4e:e7:3c:f2:22:25:1e:5a:fc:ca:96:56:9d:a1:78:d5:
50:fd:7d:ee:ad:1a:e6:c8:e0:10:c7:db:a0:90:81:58:65:cf:
44:d6:26:b4:77:47:ab:e7:1a:d8:81:66:3c:0e:0c:f7:3b:70:
5c:a7:1b:c9:b9:1f:5a:ed:e4:4c:9d:e8:e4:c0:af:b1:91:0e:
aa:d4:43:ec:b9:4e:a0:ef:e0:8f:36:67:1d:84:88:43:1f:43:
d3:b2:08:21:a4:42:2e:08:39:8e:0f:5b:a7:77:09:fc:d5:24:
d3:78:8e:4a:13:e0:fa:64:74:55:32:c0:4e:a8:7e:df:f5:43:
d2:e2:98:d4:62:16:f6:c6:43:ea:44:b7:f1:f1:c1:6f:08:8e:
cc:a4:9d:02
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWQR6dpsxmuTT7Jg2aAVlPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzEzMTYxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTkwZGQxZTgwNDBmMDY5NDAxYjYxMTk1ODk5MTJlMzMyZGVmYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PBpEnsuL6hiRatgMbCeun/wz5oN
yBhHN+g9TKyLxFZGAOneKHO90uiAHrwedBHeJWdjeV+iHt2sbSgTQVwwSzYGhuNJ
u5OLOq8G6G8AOpnrz3ymP7zpAVMCB5Ym/9AOrZiahsxLkLCxiGUKsZsK2TznbgqL
LBt7+XMWc9WRG6JapcicQVIRgvfc1NP1lsqH3oWoH9i8S4gB8CDDNJoPlQYDBahQ
h6lcSCN8NJpi6eKmF5oEZMnM2zBtcyUjjDAT48VMlamiY3HxVgudSzG0P5enLEeE
gO36RdjJrCGZ3G6h0CnDQh88unDLoY813SoO+slLK38fkG6RtKQ28p68+QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAWQ3R6AQPBpQBthGViZEuMy3vp6MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQlpEZEhvQkE4R2xBRzJFWldKa1M0ekxlLW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEACKye++7Ix7rOpPnqRX9g+aHo
NXNhYxvHZc3PVgBGpoFRImv/RoDlxoJbI3mdLutaHq4P7fV/AaAFm3Oe2mG17qwe
5cXGRlspL0VjzBsCXmNtOgiTW7E/1rkZ8RLnJvcmbCO7QFI79d4etGd/XohO5zzy
IiUeWvzKlladoXjVUP197q0a5sjgEMfboJCBWGXPRNYmtHdHq+ca2IFmPA4M9ztw
XKcbybkfWu3kTJ3o5MCvsZEOqtRD7LlOoO/gjzZnHYSIQx9D07IIIaRCLgg5jg9b
p3cJ/NUk03iOShPg+mR0VTLATqh+3/VD0uKY1GIW9sZD6kS38fHBbwiOzKSdAg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:28:01 2025 by rpki-client