Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IJv369RPppckdHkKHl-aQW1kHlA.roa
File: IJv369RPppckdHkKHl-aQW1kHlA.roa (raw, json)
Hash identifier: Pnt/5f21gPCBCiHRPF6+LaxSFk4TfqgP/at8J1IX5OI=
Subject key identifier: 20:9B:F7:EB:D4:4F:A6:97:24:74:79:0A:1E:5F:9A:41:6D:64:1E:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019186DDB5B3058EC8943939D378DC6DBA15
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IJv369RPppckdHkKHl-aQW1kHlA.roa
Signing time: Sun 25 Aug 2024 00:09:22 +0000
ROA not before: Sun 25 Aug 2024 00:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:86:dd:b5:b3:05:8e:c8:94:39:39:d3:78:dc:6d:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 25 00:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=209bf7ebd44fa6972474790a1e5f9a416d641e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:90:67:24:ac:64:fa:ab:81:2b:93:3c:45:
a1:43:53:0a:69:a8:30:94:89:bc:11:6e:08:eb:50:
52:fb:d4:cc:77:0e:22:10:42:d4:5d:1f:a3:8f:7f:
dc:ac:34:2f:c7:ee:00:67:b2:23:32:12:4f:9f:43:
3f:cd:30:da:97:57:1e:22:f7:ad:98:07:e0:35:18:
90:50:87:91:86:42:9b:cd:25:f6:1e:60:13:d7:77:
13:bf:a7:69:3e:4b:fe:67:a6:54:21:d8:3f:88:95:
d2:7e:22:18:e7:55:61:d3:88:36:49:c7:f3:e0:fd:
cf:a5:e4:a5:12:36:8f:44:23:c0:3b:81:45:51:8a:
fa:c5:97:a9:a7:60:38:ab:d5:1e:65:90:df:8b:02:
dd:e8:d8:59:46:00:f0:bc:82:80:7a:16:e5:d9:32:
2d:c1:69:bd:9a:9f:a5:4b:66:e9:c4:40:83:b6:f7:
82:4c:f1:32:eb:20:b9:7e:08:7d:50:57:a3:77:03:
26:91:c0:d3:45:af:64:b6:6f:dd:f7:02:84:9c:b8:
6a:03:da:d4:24:c6:47:86:22:dc:c4:58:82:26:28:
29:2e:35:35:93:8a:8e:4c:ff:01:23:a5:85:14:7b:
1b:1e:5d:15:d0:40:66:21:d2:90:19:6f:6c:40:ca:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:F7:EB:D4:4F:A6:97:24:74:79:0A:1E:5F:9A:41:6D:64:1E:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IJv369RPppckdHkKHl-aQW1kHlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
28:ae:b9:72:5c:98:52:8c:cd:a0:c1:36:81:42:b9:ae:c5:0a:
2e:61:33:65:bf:38:83:a0:8e:d7:72:d1:91:5f:b7:f6:1b:c9:
f6:d4:e5:d0:c2:c6:a8:93:cb:57:7a:69:70:c9:e3:a3:b3:26:
c5:dc:64:73:78:46:16:2f:f2:a8:82:c7:84:d9:fa:f2:3f:4a:
43:d4:21:f9:b2:73:72:a0:30:89:ab:93:bc:30:e8:e6:cb:90:
c3:bb:ee:cc:62:e7:8e:7e:05:1d:02:cf:8e:c4:f7:24:e0:cf:
64:c6:7e:70:fd:f5:16:7c:cd:fc:1a:2f:1b:38:9b:82:10:f8:
ed:27:a4:b7:d9:43:c2:4b:b7:53:d9:71:ca:ae:98:a2:f5:a4:
f4:b7:2e:42:ac:32:7e:9a:ab:20:43:18:8d:af:80:23:e8:d6:
2f:1d:97:8c:cb:a4:47:f1:0b:eb:e3:41:4b:bb:06:a1:3e:4a:
f4:e4:a3:99:2c:f6:b0:51:f4:47:3c:4c:3f:4d:97:21:d8:71:
aa:8a:23:dc:95:79:46:14:98:e8:49:1b:73:60:6b:59:b9:b0:
b4:ef:81:d8:0c:1e:9c:e2:40:61:ed:8d:f9:a4:c7:c8:a8:a4:
38:f7:65:c9:11:a4:eb:37:1a:3b:9b:2b:42:32:06:79:27:f6:
a0:c7:25:ed
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGG3bWzBY7IlDk503jcbboVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI1MDAwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDliZjdlYmQ0NGZhNjk3MjQ3NDc5MGExZTVmOWE0MTZkNjQxZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lmQZySsZPqrgSuTPEWhQ1MKaagw
lIm8EW4I61BS+9TMdw4iEELUXR+jj3/crDQvx+4AZ7IjMhJPn0M/zTDal1ceIvet
mAfgNRiQUIeRhkKbzSX2HmAT13cTv6dpPkv+Z6ZUIdg/iJXSfiIY51Vh04g2Scfz
4P3PpeSlEjaPRCPAO4FFUYr6xZepp2A4q9UeZZDfiwLd6NhZRgDwvIKAehbl2TIt
wWm9mp+lS2bpxECDtveCTPEy6yC5fgh9UFejdwMmkcDTRa9ktm/d9wKEnLhqA9rU
JMZHhiLcxFiCJigpLjU1k4qOTP8BI6WFFHsbHl0V0EBmIdKQGW9sQMq5AwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFCCb9+vUT6aXJHR5Ch5fmkFtZB5QMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvSUp2MzY5UlBwcGNrZEhrS0hsLWFRVzFrSGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAKK65clyYUozNoME2gUK5rsUK
LmEzZb84g6CO13LRkV+39hvJ9tTl0MLGqJPLV3ppcMnjo7Mmxdxkc3hGFi/yqILH
hNn68j9KQ9Qh+bJzcqAwiauTvDDo5suQw7vuzGLnjn4FHQLPjsT3JODPZMZ+cP31
FnzN/BovGzibghD47Sekt9lDwku3U9lxyq6YovWk9LcuQqwyfpqrIEMYja+AI+jW
Lx2XjMukR/EL6+NBS7sGoT5K9OSjmSz2sFH0RzxMP02XIdhxqooj3JV5RhSY6Ekb
c2BrWbmwtO+B2AwenOJAYe2N+aTHyKikOPdlyRGk6zcaO5srQjIGeSf2oMcl7Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:00 2025 by rpki-client