Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Imn2FVswDUAfsELaNSWfqN81AUI.roa
File: Imn2FVswDUAfsELaNSWfqN81AUI.roa (raw, json)
Hash identifier: lLThMO3W1GFjKczqtOBguyCq0q/PaV+4WDE4mcqlLGI=
Subject key identifier: 22:69:F6:15:5B:30:0D:40:1F:B0:42:DA:35:25:9F:A8:DF:35:01:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194471D21CA86F9F7E84BE0D5FC8007C802
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Imn2FVswDUAfsELaNSWfqN81AUI.roa
Signing time: Wed 08 Jan 2025 18:11:18 +0000
ROA not before: Wed 08 Jan 2025 18:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:1d:21:ca:86:f9:f7:e8:4b:e0:d5:fc:80:07:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 8 18:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2269f6155b300d401fb042da35259fa8df350142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:69:27:8b:3b:a6:13:ef:49:4f:2e:ee:f8:
c4:21:9f:1f:fd:5a:27:0b:d9:76:ad:f3:c5:1b:2d:
b7:19:ae:cd:87:db:0b:13:8e:ab:18:ed:e3:ca:2e:
54:b6:9a:2f:93:b0:78:e7:03:41:78:22:1e:94:7f:
a5:61:d5:98:ce:bb:ee:8c:a6:b0:9a:05:2a:c1:ed:
8c:63:d3:71:02:0e:95:0b:e4:6d:2b:86:35:d6:f1:
76:a1:20:c6:66:39:65:bb:cf:b8:85:11:f3:1f:a8:
33:7c:14:d7:cc:10:14:f6:dc:04:9a:55:a1:bf:de:
13:99:fc:5a:b3:71:9f:49:07:25:5a:e0:db:01:9c:
41:ee:2d:47:06:c2:ad:e1:d2:55:65:0f:e6:1c:86:
cc:1a:58:d2:8c:2c:77:c4:ab:2d:b1:ec:21:e5:5b:
e1:cf:bd:94:3c:27:3a:3b:42:d1:2a:64:1e:e7:fb:
92:c9:34:9b:80:88:5d:d5:d3:e4:e3:18:5f:79:b3:
aa:c8:7b:cf:44:33:a6:8d:3c:f1:43:d2:67:13:58:
89:07:50:f4:3f:9d:22:4d:cf:7a:5a:c9:aa:70:f5:
0b:56:6c:91:23:8f:eb:54:59:ca:89:c8:a5:29:d6:
54:73:53:4e:e4:1c:3c:22:3f:ad:f1:b3:4b:f5:95:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:69:F6:15:5B:30:0D:40:1F:B0:42:DA:35:25:9F:A8:DF:35:01:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Imn2FVswDUAfsELaNSWfqN81AUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
79:11:0a:47:51:29:e8:3d:66:34:99:19:35:3e:65:bb:7c:80:
ec:38:2b:e3:ea:fc:25:65:da:80:00:c6:1b:b5:29:72:33:ff:
f6:f0:f3:49:a6:7c:d1:9f:71:99:16:18:1f:40:2c:84:82:b9:
c0:30:d8:24:4d:f5:dd:65:25:df:2a:d9:58:f4:cd:2f:15:88:
af:a0:f7:0a:a5:eb:d9:9a:ba:95:fd:41:26:7c:84:56:a9:77:
64:74:a7:e2:bf:91:8b:42:a5:5c:fa:19:4e:e0:14:c1:af:47:
0d:ca:7e:fe:1e:8a:fa:35:3f:e5:8e:1c:65:03:ad:ca:45:19:
30:e9:8e:07:19:62:d5:96:94:45:88:6b:5c:27:eb:4d:a3:99:
d0:05:21:02:0e:b1:c5:c7:68:e0:61:08:d1:d5:24:74:0e:ec:
48:5f:72:16:a2:2a:c3:f2:d6:1e:70:44:e0:3f:bb:47:c0:44:
74:c0:3d:7c:d7:51:24:37:2a:d1:fe:c5:86:51:09:40:9c:ae:
03:6a:01:84:92:d3:33:dd:eb:c7:dd:f5:ed:82:03:b7:e3:67:
c9:a1:ea:b8:9b:5d:4a:44:46:a5:e9:fe:76:77:b2:22:2d:f4:
da:6f:14:db:ca:18:9c:7e:79:7d:88:00:4e:ed:ad:0e:c6:c0:
6c:51:1f:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:10:42 2025 by rpki-client