Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EpMNlDgbzT2e3C97_6k9j-BQwN0.roa
File: EpMNlDgbzT2e3C97_6k9j-BQwN0.roa (raw, json)
Hash identifier: 4w491vTj2AG+mazm/w/wtryrLwSVRJLAY7CQlcnr5+k=
Subject key identifier: 12:93:0D:94:38:1B:CD:3D:9E:DC:2F:7B:FF:A9:3D:8F:E0:50:C0:DD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959B6F2EB375A960F596DED2A689E2C2DD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EpMNlDgbzT2e3C97_6k9j-BQwN0.roa
Signing time: Sat 15 Mar 2025 20:11:49 +0000
ROA not before: Sat 15 Mar 2025 20:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9b:6f:2e:b3:75:a9:60:f5:96:de:d2:a6:89:e2:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 20:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12930d94381bcd3d9edc2f7bffa93d8fe050c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:8e:18:93:57:44:44:18:19:16:63:3e:41:
7c:d7:2c:f7:89:ec:98:18:92:f9:22:a9:4a:f5:93:
ec:a5:b6:9f:3b:71:3e:16:fb:58:e9:7e:87:84:20:
f1:58:77:90:41:9a:62:d4:e4:0a:cf:3a:ae:31:83:
f5:e6:a3:61:c4:56:b2:ba:3f:f4:de:22:45:80:0b:
ad:d2:69:ae:70:39:dc:02:0b:28:dd:9f:45:82:57:
83:28:76:6d:1a:c0:0e:13:98:d8:25:ed:ec:7d:ef:
88:53:f4:69:49:ab:aa:1e:50:cd:0b:5f:e5:2b:b9:
71:9e:d0:71:a3:7b:45:57:a3:00:1f:1b:eb:40:94:
e3:55:72:0a:17:27:24:8a:3d:08:d1:5b:d6:62:53:
43:e4:7e:49:f2:12:08:99:30:5f:11:ee:a4:18:d0:
2e:6a:dc:56:db:d1:ee:b3:9c:1c:5c:b9:4d:11:5b:
5a:af:81:fe:31:b1:4e:2a:97:38:46:68:ab:48:d1:
a8:51:cf:86:04:1f:de:ff:f7:89:79:a8:64:f7:5d:
25:80:1f:1e:e6:96:7c:07:22:f7:43:a1:34:f6:67:
d5:ea:e4:75:8b:48:c7:d5:a7:7c:5f:b0:dd:46:3a:
29:ee:f0:07:10:cc:1e:46:05:73:40:7b:b9:1f:4a:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:0D:94:38:1B:CD:3D:9E:DC:2F:7B:FF:A9:3D:8F:E0:50:C0:DD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EpMNlDgbzT2e3C97_6k9j-BQwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
7a:2d:56:55:e5:84:6e:62:50:06:b7:26:11:0f:c8:ff:70:69:
f4:39:7e:ac:3e:98:5a:84:38:b5:07:be:96:49:4c:04:d4:78:
f5:69:44:82:d6:e6:9a:d8:83:f8:7d:55:b7:d4:3e:8d:3e:5d:
d4:3a:6b:df:e1:fe:2f:41:3d:df:5c:b2:25:4e:3f:18:4e:c0:
39:af:d8:06:23:23:58:5e:c9:af:f7:a9:98:11:44:01:d0:54:
23:ed:de:42:53:f3:e3:7c:1a:e6:4f:46:72:d2:1e:00:09:de:
ae:f2:5b:35:69:81:44:b8:95:cb:ed:0c:ee:19:95:22:69:fe:
d3:a3:10:fd:aa:4c:eb:34:b7:e4:31:15:d1:8f:a6:cf:52:a2:
69:33:1c:98:8a:e6:05:02:e3:67:ce:9f:57:be:48:6f:1f:94:
2c:a9:6c:d1:23:84:07:fb:3f:00:26:36:a8:2c:24:67:b3:7c:
c8:1e:16:85:5a:34:2b:a0:98:1b:32:0c:f8:7f:ca:f5:69:b8:
ff:da:52:d5:c2:da:29:fa:47:3e:7b:79:aa:a1:6a:28:5f:92:
c6:f4:05:d6:c6:76:1e:70:da:d8:d3:d8:92:ea:78:4a:16:e6:
4b:ce:1d:ce:94:b6:87:07:65:77:d5:28:2d:a1:9d:86:97:c2:
4c:6a:9b:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:43 2025 by rpki-client