Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C4qByO3YeXcosLv8693Ct6MAYao.roa
File: C4qByO3YeXcosLv8693Ct6MAYao.roa (raw, json)
Hash identifier: YEs1MCduKAFAT+p0AIv8R/s+gBCeVol/SV9AVGEV+f4=
Subject key identifier: 0B:8A:81:C8:ED:D8:79:77:28:B0:BB:FC:EB:DD:C2:B7:A3:00:61:AA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958FDAB4A19D434ABE219F00B92B031166
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C4qByO3YeXcosLv8693Ct6MAYao.roa
Signing time: Thu 13 Mar 2025 14:13:49 +0000
ROA not before: Thu 13 Mar 2025 14:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:da:b4:a1:9d:43:4a:be:21:9f:00:b9:2b:03:11:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 14:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b8a81c8edd8797728b0bbfcebddc2b7a30061aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:45:2d:8d:41:c2:f9:17:8a:f9:e2:07:43:
74:24:be:c5:06:7b:2a:63:32:8b:dd:da:a4:c9:d1:
1f:64:19:38:75:58:7b:c8:ad:1d:72:30:61:e1:0e:
57:aa:be:a5:5d:67:c6:b9:85:49:42:a2:71:2a:42:
b6:c1:6d:f1:d3:bd:be:c5:d7:f5:7e:ab:47:9e:ed:
93:c0:9c:cd:3e:ec:fd:44:1f:c4:59:a0:25:69:dd:
cd:e1:31:d6:17:f7:81:c3:0a:76:ec:12:63:1e:e4:
fc:38:e8:66:bb:8d:db:72:46:c8:0c:8a:05:43:6b:
af:41:a1:ee:27:b0:0e:ee:f7:46:0a:12:f7:ba:8b:
1f:3f:db:fc:60:21:96:7e:d5:ca:f9:69:de:09:d9:
06:de:4b:f7:aa:91:26:6e:0c:3c:c4:40:f7:7d:3d:
83:5d:99:63:c1:34:78:d7:ca:1c:a0:81:d2:a3:8b:
bb:c2:46:5a:6f:91:d0:ae:59:52:25:6b:34:93:9b:
73:1d:e6:31:b6:c9:6d:92:0e:c8:de:bc:f3:e2:cc:
77:56:e5:43:5e:12:d3:82:d3:bd:cd:09:82:6e:42:
ac:fd:27:2c:c9:dd:30:9f:3d:dd:a6:78:a5:b1:23:
a0:e7:40:08:41:d2:03:5e:e2:04:39:7d:cd:a0:da:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:81:C8:ED:D8:79:77:28:B0:BB:FC:EB:DD:C2:B7:A3:00:61:AA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/C4qByO3YeXcosLv8693Ct6MAYao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
0a:e3:2b:fb:3b:73:a2:6d:16:18:d6:c2:78:0e:ef:ab:ed:5e:
56:f1:a1:45:5e:3a:c3:c2:ff:ea:b4:5f:f2:45:08:95:a5:0d:
7a:3c:b7:3c:05:d4:33:8c:bb:22:c8:b7:13:09:9e:18:82:03:
02:ce:e2:55:57:74:a6:1b:63:0a:5a:37:1f:9c:87:af:c9:1d:
90:12:90:e1:7a:6b:00:5b:cb:97:1f:e1:70:4a:68:f8:0a:b1:
0f:15:ef:11:b1:b2:4c:87:6b:66:6f:e7:75:dc:8c:d7:c4:79:
bd:bc:1a:aa:f0:28:ab:dc:5c:bc:96:78:d7:da:dc:1a:72:cb:
69:7c:5e:d8:0b:e3:e9:29:45:84:f3:82:b0:b0:c7:ed:70:bd:
e1:61:a0:c1:cd:8c:f5:3b:d6:fa:27:14:18:4b:d3:a9:60:72:
53:0d:79:ee:94:9d:5f:c8:92:5e:be:04:ed:66:2d:a3:d9:7a:
2c:b6:93:dd:fb:10:3e:9f:8e:cb:5a:c8:26:43:a2:fa:3a:87:
ee:c9:40:b6:49:dc:f2:6c:a6:78:b6:94:12:1e:86:42:1a:28:
33:89:5a:14:69:4f:ce:99:2c:cd:e9:6f:a3:79:cf:a1:a7:4d:
b5:9c:88:88:8a:fb:9e:50:37:9b:9a:b2:a7:23:37:ae:4d:8e:
c7:70:6c:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:25:07 2025 by rpki-client