Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CcG8vE2DwQy8IiP_nE4QvsQ1o1U.roa
File: CcG8vE2DwQy8IiP_nE4QvsQ1o1U.roa (raw, json)
Hash identifier: gCb2rvluWgUs9cxQlhDSbgYd4hUKh4b1l7WV5D4RDeI=
Subject key identifier: 09:C1:BC:BC:4D:83:C1:0C:BC:22:23:FF:9C:4E:10:BE:C4:35:A3:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01947D9F68D47E5B6D983F21C94DAEBFB6AF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CcG8vE2DwQy8IiP_nE4QvsQ1o1U.roa
Signing time: Sun 19 Jan 2025 08:13:06 +0000
ROA not before: Sun 19 Jan 2025 08:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7d:9f:68:d4:7e:5b:6d:98:3f:21:c9:4d:ae:bf:b6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 19 08:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09c1bcbc4d83c10cbc2223ff9c4e10bec435a355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:5e:ec:49:e4:7a:15:f6:cc:3c:56:cb:0b:
01:cb:88:44:91:f2:b2:91:34:ca:9a:cd:74:2d:5b:
22:2d:92:f9:d8:77:5e:15:af:81:1a:92:bc:02:30:
45:c2:f3:22:c5:a6:ab:75:a9:0e:90:61:c7:c8:91:
50:7e:74:e9:46:7d:fc:62:68:28:e2:09:ac:a6:7a:
01:ae:c0:31:5f:40:d9:40:a4:67:10:24:f9:32:1c:
f4:8e:1d:19:19:b1:d5:0c:c5:de:fc:84:e1:65:2c:
bf:80:a7:ca:cb:b3:31:c6:95:57:62:ca:a0:82:4f:
58:d4:6f:93:30:fc:27:e8:15:b1:19:2d:5d:19:7a:
86:59:4b:66:ed:e7:dc:1e:fc:49:b6:4c:a9:d9:26:
a5:a4:29:5f:ec:33:2f:4e:91:62:4e:20:7b:eb:06:
15:d3:c4:d8:7e:ec:2b:4d:6b:d9:c6:ec:c1:43:dd:
7c:82:43:5e:31:99:10:0c:99:d1:70:9b:da:e9:aa:
41:2a:70:f7:ff:4f:79:1b:b1:eb:8f:ba:4e:2a:d5:
07:1f:99:6e:fc:72:ec:ac:41:a0:0a:cf:c8:13:91:
ac:cd:1a:eb:32:20:e2:41:99:52:19:4d:1b:0e:9e:
6e:e4:55:16:f9:e6:e8:d7:76:73:db:89:4e:90:92:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:BC:BC:4D:83:C1:0C:BC:22:23:FF:9C:4E:10:BE:C4:35:A3:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/CcG8vE2DwQy8IiP_nE4QvsQ1o1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
9a:07:cc:dc:06:0c:40:9c:02:f0:6f:93:9c:99:50:8c:38:c7:
cd:f2:54:c0:42:6e:ac:fd:83:8e:ca:db:1d:6e:ad:5f:9b:77:
b6:ea:4f:64:02:75:5b:16:bc:1b:f1:01:b8:c2:69:4e:a6:f5:
5a:7f:ee:8f:19:b7:54:a6:36:7f:0d:3a:27:70:be:33:1a:3d:
03:5f:03:a0:cd:bd:c2:4e:e3:1a:d3:84:44:ed:41:23:c9:6d:
b2:88:a8:79:64:db:56:f1:b7:54:61:ca:01:e9:9a:98:63:b6:
8f:1b:f9:fa:72:6d:37:a0:ef:60:97:8b:da:03:82:5b:0b:2a:
c3:5b:79:fa:b6:5c:b4:9b:7e:e9:3d:6c:a4:aa:07:92:24:89:
1f:4a:0c:fc:88:ac:5d:11:c7:f9:af:cb:96:91:f1:e4:df:c6:
40:d4:1f:47:36:9f:d6:23:c3:25:b0:0b:ee:50:f2:51:80:35:
09:83:5d:a1:7e:25:b2:54:65:d8:1a:3b:25:da:a4:9b:34:f8:
25:59:da:29:40:fc:a7:32:9b:77:e1:41:1d:98:e5:e5:a0:e9:
9c:4f:6c:b9:42:f8:8c:69:74:96:34:76:31:16:04:65:29:e4:
62:c5:ec:a4:36:6b:59:72:1e:8d:15:60:ad:3b:b1:65:3a:15:
ca:50:cc:69
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZR9n2jUflttmD8hyU2uv7avMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE5MDgxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWMxYmNiYzRkODNjMTBjYmMyMjIzZmY5YzRlMTBiZWM0MzVhMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEVe7EnkehX2zDxWywsBy4hEkfKy
kTTKms10LVsiLZL52HdeFa+BGpK8AjBFwvMixaardakOkGHHyJFQfnTpRn38Ymgo
4gmspnoBrsAxX0DZQKRnECT5Mhz0jh0ZGbHVDMXe/IThZSy/gKfKy7MxxpVXYsqg
gk9Y1G+TMPwn6BWxGS1dGXqGWUtm7efcHvxJtkyp2SalpClf7DMvTpFiTiB76wYV
08TYfuwrTWvZxuzBQ918gkNeMZkQDJnRcJva6apBKnD3/095G7Hrj7pOKtUHH5lu
/HLsrEGgCs/IE5GszRrrMiDiQZlSGU0bDp5u5FUW+ebo13Zz24lOkJI5GQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAnBvLxNg8EMvCIj/5xOEL7ENaNVMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQ2NHOHZFMkR3UXk4SWlQX25FNFF2c1ExbzFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAmgfM3AYMQJwC8G+TnJlQjDjH
zfJUwEJurP2DjsrbHW6tX5t3tupPZAJ1Wxa8G/EBuMJpTqb1Wn/ujxm3VKY2fw06
J3C+Mxo9A18DoM29wk7jGtOERO1BI8ltsoioeWTbVvG3VGHKAemamGO2jxv5+nJt
N6DvYJeL2gOCWwsqw1t5+rZctJt+6T1spKoHkiSJH0oM/IisXRHH+a/LlpHx5N/G
QNQfRzaf1iPDJbAL7lDyUYA1CYNdoX4lslRl2Bo7JdqkmzT4JVnaKUD8pzKbd+FB
HZjl5aDpnE9suUL4jGl0ljR2MRYEZSnkYsXspDZrWXIejRVgrTuxZToVylDMaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:58 2025 by rpki-client