Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/I0fVo36VXJXavQUN1Lby_Tc1A3g.roa
File: I0fVo36VXJXavQUN1Lby_Tc1A3g.roa (raw, json)
Hash identifier: m/8Fla49+isLYFFoG0D33pUo6jxfF9G5n9QOe69Hh5Q=
Subject key identifier: 23:47:D5:A3:7E:95:5C:95:DA:BD:05:0D:D4:B6:F2:FD:37:35:03:78
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019432BB8A9548DE41D026C8B8A3D0CDFB8A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/I0fVo36VXJXavQUN1Lby_Tc1A3g.roa
Signing time: Sat 04 Jan 2025 19:12:18 +0000
ROA not before: Sat 04 Jan 2025 19:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:32:bb:8a:95:48:de:41:d0:26:c8:b8:a3:d0:cd:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 4 19:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2347d5a37e955c95dabd050dd4b6f2fd37350378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ac:08:0a:85:62:84:60:f2:af:b8:cd:36:
eb:41:c9:f3:53:fd:f0:44:90:2c:5a:ef:da:f4:2e:
03:ed:db:29:fe:1c:b4:7b:fd:e3:fb:a0:65:a6:d8:
3e:94:23:d6:ac:76:11:62:1b:ca:b3:63:0c:6d:2c:
2d:5b:05:d7:4d:84:fb:5d:2e:82:cb:2d:7b:d9:77:
00:85:53:c3:7a:f3:df:52:09:4a:eb:22:9c:42:12:
b4:ca:d4:41:27:16:4b:0f:8c:73:3b:9e:b4:13:cd:
62:27:7b:a2:77:15:5b:18:9d:09:2e:c7:56:e8:ee:
34:73:4a:2b:91:fe:57:ac:6e:5c:47:47:b3:80:28:
49:24:91:c2:2c:f1:63:53:a0:ac:63:ed:94:ca:7f:
7a:95:0e:62:d8:a4:d6:6e:1a:fd:9c:2d:9b:5f:dd:
e6:37:5b:d0:b9:29:00:f4:d2:c7:ae:be:77:f7:e9:
ed:ca:ac:ac:40:84:1a:95:f3:18:2b:a0:6b:04:1f:
a6:30:1e:bb:19:b3:58:dc:5c:1e:ce:46:84:07:6d:
3d:36:94:61:4b:57:a5:29:6a:ff:31:ee:97:84:46:
ff:7c:4d:85:f3:19:1c:8d:13:f5:5b:93:91:a1:80:
70:8c:81:dd:ce:b6:b8:06:ac:28:ae:74:fa:27:22:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:47:D5:A3:7E:95:5C:95:DA:BD:05:0D:D4:B6:F2:FD:37:35:03:78
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/I0fVo36VXJXavQUN1Lby_Tc1A3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
06:42:10:2c:4a:7c:50:ff:16:e7:18:af:4a:5a:0a:58:c9:f2:
cb:79:37:38:5b:cf:3b:55:b5:18:cd:89:5b:3b:5f:ad:67:c2:
7a:19:5f:c1:15:77:7c:13:c1:34:03:19:8d:bc:00:b7:cf:38:
e1:68:24:15:f6:b5:d5:fb:0e:97:8a:aa:e6:60:0b:74:b6:b4:
5e:4b:23:bb:a9:b1:75:9d:65:66:76:38:42:bd:7c:24:bd:5b:
26:7e:43:99:1b:26:16:10:af:69:e1:89:72:52:52:40:24:21:
7b:72:f1:b3:e5:0e:2b:cf:b3:73:5f:18:50:bc:2d:f6:2f:6a:
6b:f3:de:a6:da:8f:32:fc:6b:75:fa:6f:9c:5e:80:a0:a7:e1:
3c:87:84:06:a2:6f:af:d6:0a:b7:d4:e1:b3:ca:99:0e:29:5b:
37:fe:4c:22:f8:39:c5:74:26:c8:d5:20:33:9a:9b:57:5b:fd:
2e:2f:b1:5a:fe:df:78:3b:07:5a:cb:49:3f:9a:b4:c9:13:2f:
c8:af:8e:8c:4d:02:3c:e6:2f:9a:5d:85:e5:d0:32:8f:a7:b4:
e9:32:50:84:1e:be:78:00:c1:0e:e4:c8:05:85:84:4c:06:ca:
5a:d0:c2:ff:39:ef:45:ae:a7:10:5d:4d:d4:2d:4c:64:c8:a4:
00:04:c3:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:37:38 2025 by rpki-client