Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEW2nBfNp2qKQUOM2pMtcd-qls4.roa
File: GEW2nBfNp2qKQUOM2pMtcd-qls4.roa (raw, json)
Hash identifier: 2k+Ct9T7MxjB+dAjonwY52Pe2STH5aFysp+sQuNS8zg=
Subject key identifier: 18:45:B6:9C:17:CD:A7:6A:8A:41:43:8C:DA:93:2D:71:DF:AA:96:CE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A8191198B08E6D622E8C65A6AD9C5F55
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEW2nBfNp2qKQUOM2pMtcd-qls4.roa
Signing time: Tue 18 Mar 2025 07:12:49 +0000
ROA not before: Tue 18 Mar 2025 07:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:19:11:98:b0:8e:6d:62:2e:8c:65:a6:ad:9c:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 07:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1845b69c17cda76a8a41438cda932d71dfaa96ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:cf:d7:b2:c3:98:99:d3:41:d1:27:45:0e:
9e:fe:16:af:33:60:8b:37:c7:a0:63:49:a4:d0:cd:
05:a8:af:5c:2d:92:f7:4d:5f:c9:4b:a5:2c:58:f6:
b0:26:6a:29:2c:53:da:0f:19:28:6f:ed:e9:3a:2f:
d3:de:65:b5:96:0d:dc:d5:4e:01:69:c5:8f:eb:23:
5e:0b:82:44:59:99:05:9d:78:17:6d:a8:86:97:bf:
0d:df:91:d3:be:c2:ee:b5:26:ec:58:6c:3e:d1:c5:
93:03:77:9e:26:d9:e2:11:0a:39:d2:50:29:18:3a:
4f:64:90:4d:10:3c:6c:58:8a:1d:e3:cd:32:90:1d:
2f:9e:04:6c:64:c4:91:da:63:75:b2:e1:76:ef:ad:
09:58:f0:c4:ae:a2:31:48:09:1a:94:06:ca:ec:8c:
67:7d:1b:1f:73:6e:fb:99:82:17:b7:d3:a5:1c:4c:
50:54:61:c1:7c:b4:2b:7c:89:ea:c0:8a:1f:68:51:
d0:bb:85:4f:32:ca:aa:de:dc:14:3d:7c:e0:cf:1d:
40:c6:17:70:93:2e:ca:95:72:73:45:1f:90:49:5e:
b1:91:6c:b5:64:ee:3c:dc:5e:e2:fc:1a:3f:a9:1f:
09:12:f3:24:2b:58:5c:85:6b:83:ee:5d:5f:3c:a7:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:B6:9C:17:CD:A7:6A:8A:41:43:8C:DA:93:2D:71:DF:AA:96:CE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEW2nBfNp2qKQUOM2pMtcd-qls4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
3e:c4:f2:c0:53:e2:de:de:96:fe:bb:17:6e:d4:99:c0:9a:d5:
59:26:5d:8c:26:3a:eb:b8:9d:c9:99:d4:75:10:2d:ad:05:61:
c1:8d:d1:60:a0:1b:24:8f:ca:cf:61:6e:13:78:ee:c4:54:d5:
b3:ae:9d:39:70:ea:83:c9:63:57:fe:8c:d9:f2:47:16:e2:76:
d9:30:87:b8:f5:1c:28:55:b0:c2:22:bd:86:21:02:b9:ad:1d:
dd:3a:21:9d:9d:4f:04:17:cd:98:5a:b5:2f:68:07:ff:7f:e8:
91:90:35:cc:2f:43:f5:85:8f:75:11:92:c6:89:1d:83:78:2e:
36:73:00:3d:8e:b0:e2:f6:8f:6b:1b:ec:ea:71:17:b1:b3:c9:
a3:93:c9:70:dd:8a:97:07:6c:7a:c0:ba:d5:ba:f2:56:c7:f6:
43:a7:ac:7b:a9:21:d3:20:01:03:f8:c0:f0:d3:7c:eb:69:7e:
c7:4a:45:34:d6:23:db:8e:0b:af:07:aa:08:59:c1:71:59:02:
e3:fd:1e:d3:64:97:c1:eb:9f:1c:26:9d:c7:74:c6:c8:0c:1c:
b6:f1:23:55:d3:0b:ce:df:52:14:ad:94:b7:40:43:d6:70:49:
c0:d5:77:0d:2b:76:6f:25:4b:b1:2c:24:05:87:a7:46:1c:7a:
3f:9a:af:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:08 2025 by rpki-client