Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fv97bIX7QU1nvZDrI_KrVoT6-oU.roa
File: Fv97bIX7QU1nvZDrI_KrVoT6-oU.roa (raw, json)
Hash identifier: F6jaZZ6oEF7MJVMMdYATR8HHwe6z8Z8OaEuA0qIGzS4=
Subject key identifier: 16:FF:7B:6C:85:FB:41:4D:67:BD:90:EB:23:F2:AB:56:84:FA:FA:85
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194F1402545260F44740A02373F46727AAC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fv97bIX7QU1nvZDrI_KrVoT6-oU.roa
Signing time: Mon 10 Feb 2025 19:05:00 +0000
ROA not before: Mon 10 Feb 2025 19:05:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:f13f:753b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:40:25:45:26:0f:44:74:0a:02:37:3f:46:72:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 10 19:05:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ff7b6c85fb414d67bd90eb23f2ab5684fafa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:98:a7:a4:46:34:3f:af:29:f3:03:db:dd:
82:56:55:f1:14:24:95:11:8f:c0:ef:1d:0c:e7:69:
46:a0:2e:46:6e:03:0b:ab:4e:2c:8e:0e:14:11:5e:
b7:0d:6d:9a:26:f7:67:4c:87:a2:ef:36:f3:de:b2:
21:7c:ac:e5:e9:60:23:c5:c3:62:c8:eb:c4:55:db:
79:86:2e:de:25:18:74:b3:09:49:e2:af:5e:d0:90:
ae:d7:8d:6d:6c:5a:bc:89:25:d6:58:85:8d:33:10:
e5:4f:78:58:c5:18:a5:5b:3c:e1:72:78:6f:c2:93:
b9:44:3b:52:98:df:a2:3d:08:c0:61:bf:08:28:82:
6d:9d:09:52:7e:14:35:09:08:f3:8c:9c:0b:1c:e8:
ee:41:0d:9d:6c:86:a4:fb:21:9c:b1:a4:cb:03:5d:
d8:cf:5d:01:db:ce:01:4b:48:61:6e:b1:e9:01:1d:
84:0c:24:5d:6a:49:b9:13:b8:bb:0e:28:09:ea:a4:
15:b0:6c:a9:9f:c7:54:97:a2:07:37:e9:6d:2e:89:
0f:46:b6:d5:2a:88:f1:6e:8f:93:72:46:46:22:80:
42:73:e7:43:db:ad:f0:18:ba:40:6b:28:fe:9e:9d:
92:48:cf:ef:8f:73:31:c4:5a:3e:ea:78:63:9c:80:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FF:7B:6C:85:FB:41:4D:67:BD:90:EB:23:F2:AB:56:84:FA:FA:85
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fv97bIX7QU1nvZDrI_KrVoT6-oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:f13f:753b/128
Signature Algorithm: sha256WithRSAEncryption
10:43:f3:eb:c8:2b:3f:72:c4:ba:5a:9f:dd:08:94:38:d3:36:
37:a3:b8:7f:8a:c2:59:b5:29:cd:44:d2:91:de:94:2c:5e:4f:
83:d2:98:01:10:5d:49:46:f4:0b:36:96:77:eb:eb:01:ff:7b:
4f:39:b9:0d:c3:30:e2:38:a7:ea:1b:b0:fd:27:31:b9:48:94:
d5:29:e9:2e:c7:8f:43:93:13:cd:a5:b7:0f:22:e9:06:0a:62:
c2:b7:43:d7:55:6d:67:16:ab:b1:f4:ba:dd:ce:67:ed:e9:dd:
f2:de:c8:4f:bf:40:0e:1e:8e:98:3f:15:df:eb:29:4e:e4:4b:
24:05:82:b0:08:ff:93:ce:9b:4b:fb:e5:33:b1:50:fd:43:62:
b5:64:da:4d:41:6d:1c:72:c4:fd:55:64:0d:96:3c:ae:3a:a0:
4f:f9:96:22:ab:d6:d4:5c:4d:50:b4:82:4d:24:55:25:8b:5e:
37:4a:18:6a:26:31:46:f2:59:ea:14:0c:2d:02:6b:02:72:d2:
34:c9:ef:0e:9b:51:33:ec:78:62:4e:c1:0a:ca:b5:3b:41:df:
e2:a7:7f:98:71:cd:5c:b2:ea:9b:13:ff:50:6b:cf:bc:2f:65:
64:35:03:18:27:1f:88:d1:08:fd:02:43:66:71:23:a4:41:0d:
ad:8c:ca:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:50 2025 by rpki-client