Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DYaQAyevNHC_p2cawfqD3VG-jGA.roa
File: DYaQAyevNHC_p2cawfqD3VG-jGA.roa (raw, json)
Hash identifier: 9H+uvOOl8uty3CVK7OMgvcK9Nfw3oYePCHNOhDfOj80=
Subject key identifier: 0D:86:90:03:27:AF:34:70:BF:A7:67:1A:C1:FA:83:DD:51:BE:8C:60
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945DDCAFA5003A6C8C55AEBE63EF7585A7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DYaQAyevNHC_p2cawfqD3VG-jGA.roa
Signing time: Mon 13 Jan 2025 04:12:11 +0000
ROA not before: Mon 13 Jan 2025 04:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5d:dc:af:a5:00:3a:6c:8c:55:ae:be:63:ef:75:85:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 13 04:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d86900327af3470bfa7671ac1fa83dd51be8c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:14:63:35:8b:cf:3d:bc:34:af:2f:f9:a2:
2f:a8:e1:24:2b:6d:7f:5e:be:50:34:96:be:1e:49:
22:d6:8e:a5:ae:4e:09:41:59:6b:51:a9:51:94:f0:
64:53:e6:0e:1b:20:af:50:df:57:22:57:92:82:ea:
21:fe:08:d8:b8:8b:67:95:20:1c:56:4f:79:e7:5d:
f1:9e:32:86:6b:53:7c:15:c6:26:1f:1c:77:27:5d:
c9:93:ed:f5:65:57:84:53:a1:3e:00:95:d3:0f:20:
56:0c:fc:3e:57:1d:e5:13:b6:70:b1:f1:09:10:d0:
2c:45:9f:29:db:8c:c8:41:0f:80:68:30:a0:f8:76:
16:20:ca:e8:56:3a:2e:f2:ed:ba:1c:2a:0b:10:8f:
66:5c:fb:c8:27:cd:43:78:44:68:89:9d:a4:d6:ad:
45:a0:02:83:79:29:d4:6c:05:d9:3f:5a:3b:8f:fc:
19:f9:b7:83:46:ae:69:96:86:54:ea:00:75:8a:56:
f2:b2:6e:f9:d7:5f:ef:cb:9a:40:03:35:c9:21:3d:
95:c4:1f:26:16:91:82:85:e8:6b:32:50:82:f8:28:
27:4c:95:57:7c:23:c1:0d:8f:0d:0e:8c:cf:4a:0c:
35:ab:6d:be:59:c0:7d:06:d5:fd:1f:47:4f:93:ac:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:90:03:27:AF:34:70:BF:A7:67:1A:C1:FA:83:DD:51:BE:8C:60
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DYaQAyevNHC_p2cawfqD3VG-jGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
91:81:b7:2b:3f:2e:13:89:f7:54:35:9f:cc:a0:49:08:75:13:
94:ef:73:5f:c3:9e:18:87:73:94:67:f8:a1:1a:7c:bb:95:9e:
6a:39:07:e5:f3:67:76:17:97:16:10:b2:11:07:4b:ef:79:90:
c9:eb:c0:ba:f8:c1:95:2b:85:ea:d1:f9:4e:83:c8:56:04:a1:
ac:1e:f2:1f:e2:1a:cb:1a:74:87:ec:f3:32:b8:64:13:ea:12:
cd:8f:96:bc:8b:ff:3e:a5:f3:4c:57:d6:23:8d:8d:ea:14:bb:
21:74:af:e5:50:ea:6e:da:8f:5b:74:31:41:fe:96:27:83:f7:
80:5b:4c:88:00:b8:37:3b:96:be:6d:74:81:07:62:59:57:e6:
99:db:05:0d:74:7e:33:19:de:d0:dd:5e:5e:d7:d9:af:ff:dd:
c0:5f:16:b1:67:c9:7b:d8:12:0a:9d:2f:8f:fe:05:1e:11:b3:
ff:21:e7:c1:6c:e9:7b:ac:19:28:7f:40:87:c3:ab:75:75:57:
f1:a4:21:4d:13:0f:ac:6b:b0:2d:3f:77:5c:4c:6a:39:54:8e:
9b:da:8a:33:10:67:ef:5d:f5:4d:ee:4d:59:b1:f9:c6:ff:70:
ff:12:91:43:1a:3c:52:f5:4e:58:66:58:74:63:ce:83:63:8a:
34:14:38:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:26 2025 by rpki-client