Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C2hC4dt1G4g_cVk8vbtCs0wBUj0.roa
File: C2hC4dt1G4g_cVk8vbtCs0wBUj0.roa (raw, json)
Hash identifier: 3+GKTtqqft1QM2L9pfyAFmdfMYrdqjjry/1XIDzEdeA=
Subject key identifier: 0B:68:42:E1:DB:75:1B:88:3F:71:59:3C:BD:BB:42:B3:4C:01:52:3D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019442D454B6FCE8A7CEF95F95C1FAA07955
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C2hC4dt1G4g_cVk8vbtCs0wBUj0.roa
Signing time: Tue 07 Jan 2025 22:13:19 +0000
ROA not before: Tue 07 Jan 2025 22:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:d4:54:b6:fc:e8:a7:ce:f9:5f:95:c1:fa:a0:79:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 7 22:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6842e1db751b883f71593cbdbb42b34c01523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:18:de:cc:d5:c1:82:c6:b9:b6:32:2b:88:
04:23:ec:ee:04:b2:99:dc:e0:4d:3b:56:98:c1:07:
a6:4d:33:d2:a1:4b:8c:62:61:8c:a3:99:53:8c:90:
6b:fc:15:4a:39:84:ac:36:dc:1a:82:f9:b6:9d:bc:
d0:6c:83:aa:93:26:cd:53:8e:d8:71:04:29:97:fa:
b9:13:81:b1:4e:51:fd:e6:a5:f3:77:a7:8e:21:dd:
73:36:15:b4:1f:0a:eb:1d:d2:10:a9:9a:06:75:94:
2a:af:9b:3d:65:11:94:ac:fc:37:ff:24:fb:ad:2c:
30:e6:69:2c:04:94:b8:1f:d0:24:58:da:80:df:72:
c5:4d:c7:b7:73:12:6a:5c:95:06:ef:19:f3:dc:de:
94:e9:93:24:09:2d:9d:7b:6a:3e:71:c5:ce:77:70:
85:3d:ef:23:5c:86:62:06:af:28:59:a3:4f:9e:f6:
32:0b:02:56:59:e0:38:83:2a:a4:3e:16:3b:06:fd:
0f:19:7c:ea:9e:8f:d1:9a:39:32:af:0a:f2:0c:61:
0f:26:26:64:22:94:44:37:b9:51:26:3f:f0:25:78:
0e:0b:f4:35:f2:dd:22:78:09:87:23:ac:ff:2a:69:
1c:58:ef:a8:52:56:a8:4f:f4:df:3e:6e:86:ef:d6:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:42:E1:DB:75:1B:88:3F:71:59:3C:BD:BB:42:B3:4C:01:52:3D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C2hC4dt1G4g_cVk8vbtCs0wBUj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
4f:9a:9b:88:bf:ea:12:64:61:21:33:77:6d:b9:c3:88:2b:5f:
76:22:9c:14:fb:39:25:48:e2:d2:d0:88:c7:ba:08:41:7f:7e:
8f:95:50:e0:2e:14:09:3a:94:54:a8:b7:a7:dc:f0:4e:ae:dc:
ef:2c:af:ff:be:4f:8a:78:eb:88:90:b8:02:83:39:7e:f2:60:
a1:fd:f3:c7:95:95:61:4d:f3:5a:f2:31:49:89:06:a6:dc:8e:
6f:f6:ab:bb:bb:d6:b4:fb:06:5d:c9:1a:48:0f:d4:38:1b:c9:
e5:e2:f8:0f:09:73:39:17:d6:8a:a2:b7:3f:22:17:25:4a:53:
a8:15:44:00:60:ba:e8:a0:a8:2f:ba:d0:68:74:7a:27:56:a5:
b4:f0:5a:b6:61:5f:5f:b4:0b:72:5a:6b:ad:c2:51:f9:2d:b9:
83:bc:ad:38:44:1c:ff:04:fe:0d:db:fa:ce:ae:0f:eb:42:c3:
d5:33:8e:7a:b7:47:db:f7:e4:ef:db:9a:27:ea:42:54:2a:99:
41:4d:b5:13:02:e9:28:56:62:c1:3b:b3:2d:87:b2:6b:42:8a:
d7:d6:e7:d4:fc:aa:87:ce:15:a0:c1:0d:f6:32:01:a5:74:d0:
9d:81:cc:ae:1e:cc:db:82:c6:d2:64:1d:47:7f:66:a0:27:be:
82:12:32:84
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRC1FS2/OinzvlflcH6oHlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTA3MjIxMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjY4NDJlMWRiNzUxYjg4M2Y3MTU5M2NiZGJiNDJiMzRjMDE1MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01cY3szVwYLGubYyK4gEI+zuBLKZ
3OBNO1aYwQemTTPSoUuMYmGMo5lTjJBr/BVKOYSsNtwagvm2nbzQbIOqkybNU47Y
cQQpl/q5E4GxTlH95qXzd6eOId1zNhW0HwrrHdIQqZoGdZQqr5s9ZRGUrPw3/yT7
rSww5mksBJS4H9AkWNqA33LFTce3cxJqXJUG7xnz3N6U6ZMkCS2de2o+ccXOd3CF
Pe8jXIZiBq8oWaNPnvYyCwJWWeA4gyqkPhY7Bv0PGXzqno/RmjkyrwryDGEPJiZk
IpREN7lRJj/wJXgOC/Q18t0ieAmHI6z/KmkcWO+oUlaoT/TfPm6G79ZVSQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAtoQuHbdRuIP3FZPL27QrNMAVI9MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQzJoQzRkdDFHNGdfY1ZrOHZidENzMHdCVWowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAT5qbiL/qEmRhITN3bbnDiCtf
diKcFPs5JUji0tCIx7oIQX9+j5VQ4C4UCTqUVKi3p9zwTq7c7yyv/75PinjriJC4
AoM5fvJgof3zx5WVYU3zWvIxSYkGptyOb/aru7vWtPsGXckaSA/UOBvJ5eL4Dwlz
ORfWiqK3PyIXJUpTqBVEAGC66KCoL7rQaHR6J1altPBatmFfX7QLclprrcJR+S25
g7ytOEQc/wT+Ddv6zq4P60LD1TOOerdH2/fk79uaJ+pCVCqZQU21EwLpKFZiwTuz
LYeya0KK19bn1Pyqh84VoMEN9jIBpXTQnYHMrh7M24LG0mQdR39moCe+ghIyhA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:25 2025 by rpki-client