Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fayoto0eo4Mt50bL_-q_MI0klYM.roa
File: Fayoto0eo4Mt50bL_-q_MI0klYM.roa (raw, json)
Hash identifier: mbkFzKH/f1C8d1djLljChuOWxp8eJzkS5yx1QQwVuRI=
Subject key identifier: 15:AC:A8:B6:8D:1E:A3:83:2D:E7:46:CB:FF:EA:BF:30:8D:24:95:83
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01955506BD28AB43F16A443BD9D1B8F0118F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fayoto0eo4Mt50bL_-q_MI0klYM.roa
Signing time: Sun 02 Mar 2025 04:04:19 +0000
ROA not before: Sun 02 Mar 2025 04:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:5506:a389/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:55:06:bd:28:ab:43:f1:6a:44:3b:d9:d1:b8:f0:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 2 04:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15aca8b68d1ea3832de746cbffeabf308d249583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:cc:3d:99:dd:b0:15:60:e2:a9:cf:74:a1:
5d:2a:bb:c5:29:8f:e0:5f:21:39:b9:63:e4:d3:95:
c1:01:8f:d2:1c:59:d6:d7:65:88:11:4c:0c:4a:40:
f2:d2:5a:7b:6a:78:2a:f1:84:9a:a1:df:30:9f:c6:
ba:45:c4:18:7d:e8:c5:95:5a:77:03:b9:02:18:66:
06:94:42:22:ad:32:c3:b3:43:81:49:3f:4f:ac:be:
1b:56:d2:8a:35:5e:ae:5f:6d:07:31:56:cc:fb:32:
be:7a:55:72:b1:ba:5c:99:d9:55:e6:65:8f:bf:80:
ee:aa:42:7a:23:7e:16:59:bc:3d:ea:61:d6:6c:15:
3c:1f:b0:bd:59:a3:08:3a:5e:a5:83:80:97:be:d8:
4d:03:58:8e:15:81:13:24:83:03:4f:27:2b:86:5c:
fe:8d:f8:d3:9e:e6:ec:e5:d9:5d:98:fa:50:68:cd:
36:41:7f:42:48:68:15:f4:14:48:98:a0:3f:96:59:
86:54:83:28:88:63:66:98:56:e5:12:03:4e:41:da:
3f:c1:92:41:de:4c:e3:ec:2c:ed:a1:5d:ce:31:3f:
47:12:01:da:16:1e:28:a0:30:35:db:b2:e9:ec:32:
a1:42:c8:53:23:e8:a7:0a:53:3e:42:a7:ef:54:02:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:A8:B6:8D:1E:A3:83:2D:E7:46:CB:FF:EA:BF:30:8D:24:95:83
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fayoto0eo4Mt50bL_-q_MI0klYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:5506:a389/128
Signature Algorithm: sha256WithRSAEncryption
27:c1:db:b8:9a:80:a4:26:e6:f3:4d:14:55:51:3d:a4:9e:15:
a2:f1:e4:ce:32:2b:21:ac:af:fb:08:a9:6a:c3:64:2c:ec:c7:
2b:66:1d:4a:cd:c0:83:d2:d3:76:9a:5d:1f:db:2c:0a:d0:38:
52:ca:66:71:2d:7f:d4:8a:46:81:ca:fd:78:93:c2:92:67:29:
dc:25:7d:b9:d9:91:74:b0:0b:02:79:81:f9:43:ff:fa:7b:aa:
21:d0:f9:de:6c:32:f0:ef:79:54:41:74:3d:5d:39:8f:fb:01:
f7:cd:03:ee:5f:41:13:08:48:d3:16:10:19:f0:86:19:ca:f9:
81:63:20:29:3c:11:1e:7e:16:e0:f4:d3:14:58:16:df:19:9b:
20:f8:6f:bd:72:46:82:36:e9:97:96:e8:f0:7c:8e:2b:26:f2:
79:7f:65:93:38:16:53:21:6c:c7:44:46:d4:48:dd:1b:71:d3:
7b:98:1f:e2:d6:98:21:e1:21:37:0e:36:44:80:a5:64:fe:e0:
5c:1e:ef:bb:eb:97:bc:1e:24:1c:13:78:cf:00:6e:30:e0:a0:
49:74:39:82:98:60:c5:46:a7:ed:f7:1c:e4:32:b8:20:c6:1e:
9f:28:4c:41:be:04:4e:a3:6c:d5:9c:95:81:f9:d7:11:bc:da:
71:bc:41:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:25 2025 by rpki-client