Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F-MXOWqCcuHxJxVY5Tp0j-xLcyY.roa
File: F-MXOWqCcuHxJxVY5Tp0j-xLcyY.roa (raw, json)
Hash identifier: l0f1KFvGidTxJSCgcck2tfKMlxGHSzJGJHtHd32CaQ4=
Subject key identifier: 17:E3:17:39:6A:82:72:E1:F1:27:15:58:E5:3A:74:8F:EC:4B:73:26
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910A656C50CB07588571C4251721CD9054
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F-MXOWqCcuHxJxVY5Tp0j-xLcyY.roa
Signing time: Wed 31 Jul 2024 20:05:04 +0000
ROA not before: Wed 31 Jul 2024 20:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:a64:c8b3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:65:6c:50:cb:07:58:85:71:c4:25:17:21:cd:90:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 31 20:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17e317396a8272e1f1271558e53a748fec4b7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:fb:9d:2c:f9:78:5f:0d:9e:4a:39:74:a6:
cd:99:1c:a8:28:a6:d9:02:eb:90:4c:9f:50:d8:15:
24:0e:03:c4:04:f4:57:6d:bb:10:6a:12:56:b5:ac:
3a:4f:17:51:23:86:83:22:ee:a8:03:bd:1e:9d:73:
a7:7c:22:3f:78:04:fe:fe:1d:d6:50:03:82:2b:78:
5e:7f:39:0d:63:28:b9:51:7f:ac:0d:72:9e:b1:46:
cd:8d:58:c6:cb:3a:b2:60:ab:4a:cc:71:ae:4f:09:
7e:af:e6:78:19:3e:b3:bf:3d:ef:e4:15:f3:f6:57:
52:35:b6:a9:43:c3:8c:1b:2f:65:7a:c7:7f:5c:a7:
e9:63:3b:16:1c:62:b3:c4:a8:19:43:a6:5b:63:1e:
42:38:11:e8:08:33:c8:82:b4:0e:03:fb:9c:d0:37:
8b:ea:71:9f:77:55:27:b2:c5:da:f1:6e:9a:33:16:
7b:ce:e2:db:66:9e:99:55:d0:b2:e4:a5:53:cc:fb:
6f:44:5a:1d:b6:7c:97:89:20:4a:ea:84:66:3a:6a:
90:c3:1b:98:4b:ef:bb:0d:cf:b0:5e:cd:f0:5d:ca:
ae:e9:e5:b6:10:3b:3d:b6:bd:c2:4b:e2:d3:e6:14:
9e:57:ec:37:f7:02:90:4d:4a:82:71:0a:48:93:c1:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:17:39:6A:82:72:E1:F1:27:15:58:E5:3A:74:8F:EC:4B:73:26
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F-MXOWqCcuHxJxVY5Tp0j-xLcyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:a64:c8b3/128
Signature Algorithm: sha256WithRSAEncryption
30:f8:77:b5:63:ae:40:84:d0:7d:79:26:df:fb:fe:7b:6d:31:
9b:f3:82:bf:32:43:6b:fb:18:6a:19:d0:9a:08:f1:8b:dd:d1:
d5:91:04:fe:38:2a:1c:e7:7d:7e:aa:e3:d2:a6:6f:e0:8b:84:
51:37:b6:be:09:6b:d6:b0:99:f1:de:95:a0:bb:33:88:21:e7:
42:87:41:66:45:01:15:32:6e:91:4c:4f:58:99:19:8f:9f:f9:
7e:1c:78:f4:f2:ab:ba:e0:2b:b7:b2:a6:d2:0f:f8:f7:ae:4f:
ff:8f:83:41:67:60:a2:98:d3:c1:d4:20:7c:e8:9b:c3:d1:b8:
c4:fd:70:e6:a0:48:ef:02:6e:4b:95:db:31:c9:fe:02:05:72:
9d:18:fb:0e:84:38:7f:e3:a0:e3:64:b8:96:1c:fd:63:a3:01:
07:08:01:45:40:fd:38:35:45:b6:41:6d:99:25:9f:d4:03:4b:
ae:9b:78:f7:6d:c8:7b:a4:de:58:4e:91:15:7a:60:9b:bc:93:
38:82:de:37:74:c5:05:95:22:1b:d0:a2:93:e6:b0:d6:4f:be:
22:f9:3e:76:33:e8:a6:08:64:77:a6:22:ba:2f:c1:bd:59:76:
4a:6b:4d:5b:f1:9f:e2:e0:22:cb:42:e5:be:96:50:67:5e:44:
2e:37:32:dd
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZEKZWxQywdYhXHEJRchzZBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzMxMjAwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2UzMTczOTZhODI3MmUxZjEyNzE1NThlNTNhNzQ4ZmVjNGI3MzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O37nSz5eF8Nnko5dKbNmRyoKKbZ
AuuQTJ9Q2BUkDgPEBPRXbbsQahJWtaw6TxdRI4aDIu6oA70enXOnfCI/eAT+/h3W
UAOCK3hefzkNYyi5UX+sDXKesUbNjVjGyzqyYKtKzHGuTwl+r+Z4GT6zvz3v5BXz
9ldSNbapQ8OMGy9lesd/XKfpYzsWHGKzxKgZQ6ZbYx5COBHoCDPIgrQOA/uc0DeL
6nGfd1UnssXa8W6aMxZ7zuLbZp6ZVdCy5KVTzPtvRFodtnyXiSBK6oRmOmqQwxuY
S++7Dc+wXs3wXcqu6eW2EDs9tr3CS+LT5hSeV+w39wKQTUqCcQpIk8FdPwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBfjFzlqgnLh8ScVWOU6dI/sS3MmMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRi1NWE9XcUNjdUh4SnhWWTVUcDBqLXhMY3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkQpkyLMwDQYJKoZIhvcNAQELBQADggEB
ADD4d7VjrkCE0H15Jt/7/nttMZvzgr8yQ2v7GGoZ0JoI8Yvd0dWRBP44KhznfX6q
49Kmb+CLhFE3tr4Ja9awmfHelaC7M4gh50KHQWZFARUybpFMT1iZGY+f+X4cePTy
q7rgK7eyptIP+PeuT/+Pg0FnYKKY08HUIHzom8PRuMT9cOagSO8CbkuV2zHJ/gIF
cp0Y+w6EOH/joONkuJYc/WOjAQcIAUVA/Tg1RbZBbZkln9QDS66bePdtyHuk3lhO
kRV6YJu8kziC3jd0xQWVIhvQopPmsNZPviL5PnYz6KYIZHemIrovwb1ZdkprTVvx
n+LgIstC5b6WUGdeRC43Mt0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:04 2025 by rpki-client