Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ch9yTp7OsRLil9U6LL20Kaodawc.roa
File: Ch9yTp7OsRLil9U6LL20Kaodawc.roa (raw, json)
Hash identifier: 8GxqHLKRZ/cu6jJ5V1UxvM9SfYMPOPVV1R7Xhd5AYoc=
Subject key identifier: 0A:1F:72:4E:9E:CE:B1:12:E2:97:D5:3A:2C:BD:B4:29:AA:1D:6B:07
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948AB7276231A50A8BE238194AB019334F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ch9yTp7OsRLil9U6LL20Kaodawc.roa
Signing time: Tue 21 Jan 2025 21:14:06 +0000
ROA not before: Tue 21 Jan 2025 21:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:b7:27:62:31:a5:0a:8b:e2:38:19:4a:b0:19:33:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 21 21:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1f724e9eceb112e297d53a2cbdb429aa1d6b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:0d:5f:de:f7:d9:82:61:5f:50:15:8a:26:
ab:e9:d7:43:3a:63:06:1e:b4:e1:b7:84:fe:05:4e:
76:09:28:c2:9c:1d:8c:74:c3:dd:35:0d:6a:41:9c:
dc:17:9c:30:df:85:a7:85:1d:da:e5:48:4e:86:94:
be:36:fd:24:0e:45:2e:c8:5e:28:66:3e:a8:b6:dc:
be:09:0f:ad:32:e8:26:ef:f6:fa:70:76:9c:38:73:
92:f3:d2:96:74:0f:17:99:fc:4e:6a:fc:fe:26:56:
8d:03:d6:d2:98:d9:23:f5:25:27:9f:48:b1:89:34:
b9:d4:92:02:8d:ab:13:59:ef:6c:8b:57:69:f3:99:
f7:ef:2c:10:8b:7e:16:58:cb:16:7d:6f:6c:39:8a:
39:e1:a5:82:78:a9:e4:34:61:62:ae:e6:83:77:f1:
c9:67:12:31:78:e5:cf:ed:28:a7:43:1b:1c:1f:b4:
20:33:15:14:cf:ea:73:c2:e4:6a:9a:91:ee:15:92:
ca:1a:83:f4:36:21:59:62:1d:cc:d3:08:e3:88:de:
fd:77:f3:62:59:75:31:c7:e4:aa:84:b5:59:e0:55:
75:37:11:7c:d6:32:89:16:2c:c3:3e:32:97:1e:0a:
0a:e3:2d:bc:56:18:e6:f7:58:9b:22:50:b0:5a:f9:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:72:4E:9E:CE:B1:12:E2:97:D5:3A:2C:BD:B4:29:AA:1D:6B:07
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Ch9yTp7OsRLil9U6LL20Kaodawc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
06:92:78:ea:db:83:b4:e6:88:dc:95:f2:75:7d:87:e0:25:bf:
da:08:6b:f5:f1:4a:0f:c7:36:63:80:3f:84:49:f9:75:64:b7:
d6:17:67:59:b1:6b:36:ab:c3:76:22:f4:50:16:15:d3:e4:c1:
b0:6c:dc:9f:45:bd:d7:9b:22:cd:d2:bb:93:94:74:7e:91:e0:
ad:a0:69:09:51:39:07:50:8d:2c:a3:9c:af:10:d8:a5:77:30:
cf:fb:57:df:4a:d5:9a:4a:c2:cd:b9:c5:93:49:ec:a3:21:67:
70:bd:ce:98:d0:8e:70:d7:06:99:28:4a:fc:70:ea:f4:f5:54:
95:2d:b0:72:32:6a:29:89:10:c5:8c:90:b1:67:8d:89:05:4e:
32:0d:79:c3:3b:32:41:7e:f7:c2:b9:04:ca:4d:22:76:95:fc:
f2:c9:4f:7b:88:99:89:51:aa:09:94:49:ac:71:15:07:01:b1:
46:4d:8a:2a:cb:29:76:85:74:3f:d6:cb:e3:12:db:de:fe:8d:
75:27:f0:c9:f0:f6:44:16:09:a1:b7:23:a2:5d:d5:a5:66:57:
c5:98:79:42:e4:bd:c4:20:de:75:96:4e:8e:03:2a:6d:02:40:
8d:40:2f:1b:6f:62:43:64:5b:27:a7:c6:50:ce:83:c7:63:2c:
5e:de:12:33
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZSKtydiMaUKi+I4GUqwGTNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTIxMjExNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTFmNzI0ZTllY2ViMTEyZTI5N2Q1M2EyY2JkYjQyOWFhMWQ2YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61oNX9732YJhX1AViiar6ddDOmMG
HrTht4T+BU52CSjCnB2MdMPdNQ1qQZzcF5ww34WnhR3a5UhOhpS+Nv0kDkUuyF4o
Zj6otty+CQ+tMugm7/b6cHacOHOS89KWdA8XmfxOavz+JlaNA9bSmNkj9SUnn0ix
iTS51JICjasTWe9si1dp85n37ywQi34WWMsWfW9sOYo54aWCeKnkNGFiruaDd/HJ
ZxIxeOXP7SinQxscH7QgMxUUz+pzwuRqmpHuFZLKGoP0NiFZYh3M0wjjiN79d/Ni
WXUxx+SqhLVZ4FV1NxF81jKJFizDPjKXHgoK4y28Vhjm91ibIlCwWvlFqQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFAofck6ezrES4pfVOiy9tCmqHWsHMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvQ2g5eVRwN09zUkxpbDlVNkxMMjBLYW9kYXdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEABpJ46tuDtOaI3JXydX2H4CW/
2ghr9fFKD8c2Y4A/hEn5dWS31hdnWbFrNqvDdiL0UBYV0+TBsGzcn0W915sizdK7
k5R0fpHgraBpCVE5B1CNLKOcrxDYpXcwz/tX30rVmkrCzbnFk0nsoyFncL3OmNCO
cNcGmShK/HDq9PVUlS2wcjJqKYkQxYyQsWeNiQVOMg15wzsyQX73wrkEyk0idpX8
8slPe4iZiVGqCZRJrHEVBwGxRk2KKsspdoV0P9bL4xLb3v6NdSfwyfD2RBYJobcj
ol3VpWZXxZh5QuS9xCDedZZOjgMqbQJAjUAvG29iQ2RbJ6fGUM6Dx2MsXt4SMw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:45 2025 by rpki-client