Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J0pHIg55S2XTJ5CAWjiwHzBgKBk.roa
File: J0pHIg55S2XTJ5CAWjiwHzBgKBk.roa (raw, json)
Hash identifier: x12tKC0wCkh/p95Jv6jFRgMeyBl7Apc1ANj7SBd8sXc=
Subject key identifier: 27:4A:47:22:0E:79:4B:65:D3:27:90:80:5A:38:B0:1F:30:60:28:19
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019367B7A9FBAEDC6BBBE121A8398C8C3190
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J0pHIg55S2XTJ5CAWjiwHzBgKBk.roa
Signing time: Tue 26 Nov 2024 09:05:09 +0000
ROA not before: Tue 26 Nov 2024 09:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:67b6:e336/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:b7:a9:fb:ae:dc:6b:bb:e1:21:a8:39:8c:8c:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 26 09:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=274a47220e794b65d32790805a38b01f30602819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:fe:98:b3:d6:2f:94:9d:4a:57:ca:d3:69:
50:a9:3b:01:80:fb:55:e0:72:8d:9d:6f:fe:c6:da:
6a:c9:70:80:ea:d0:cf:0d:6a:e7:67:8c:80:0a:b7:
44:d1:de:3b:77:07:64:69:5f:b0:8a:bb:a2:cd:67:
fe:6a:6a:4e:4b:c9:8a:a4:b3:06:21:d6:1d:1f:4c:
ea:77:b4:69:de:4a:8c:78:ea:69:0f:9d:0b:f0:d5:
f8:1e:90:21:28:24:3a:7c:dd:85:40:23:05:06:dc:
fb:b2:b6:7a:9f:fa:2d:c8:1f:49:74:32:73:dc:3e:
37:11:fe:c8:03:ec:3d:68:65:77:4d:fd:b6:89:b7:
02:e4:c1:8a:91:8f:06:6f:b9:63:bb:48:8c:c6:8b:
b0:fa:d9:a4:23:55:c6:70:89:68:91:52:5b:42:23:
23:55:49:d1:99:07:e0:fb:39:87:fe:1c:b2:4f:d3:
56:04:e3:a2:e9:be:0a:d7:7a:e8:b4:fb:49:e0:a6:
17:ed:40:12:c5:de:5c:f0:59:9e:d0:10:da:20:22:
96:0e:33:eb:10:9f:d8:09:64:90:5a:31:df:8d:ea:
07:a0:f2:c4:86:b6:00:05:51:78:a6:f6:70:fd:80:
58:e2:9e:bf:d9:96:5c:81:c3:5e:15:36:b6:42:77:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:47:22:0E:79:4B:65:D3:27:90:80:5A:38:B0:1F:30:60:28:19
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J0pHIg55S2XTJ5CAWjiwHzBgKBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:67b6:e336/128
Signature Algorithm: sha256WithRSAEncryption
2e:d7:eb:79:6f:62:24:20:d8:cd:93:c6:2a:dc:a8:82:c1:cf:
20:74:72:71:df:0d:56:b7:d2:85:6b:d4:c6:7f:c3:3e:f2:1c:
9f:75:48:14:0b:52:33:4a:5b:dd:9a:99:e1:43:f8:cf:f3:36:
10:2a:53:d5:58:ad:5d:51:53:90:41:ae:e0:30:8e:33:7d:17:
4a:28:c2:47:9d:46:bb:72:64:bd:1e:09:c3:b2:2e:7f:08:d4:
de:c5:13:5c:d6:b5:2b:eb:5a:31:35:05:d9:a1:a3:a0:70:72:
b8:49:45:9e:a7:68:b8:67:9a:4e:3c:61:bb:12:5f:74:32:24:
bb:02:7b:e9:7d:a7:71:56:6e:82:63:3c:52:58:64:29:8d:ed:
2e:9a:6f:a0:cb:a1:16:33:96:a9:a5:0b:55:6d:cf:c0:a6:e5:
e8:89:b0:e4:3b:45:50:bc:6e:ec:75:10:93:16:fc:69:d4:a9:
61:4a:d8:b6:a6:6e:92:53:24:be:f9:92:73:99:76:d9:4e:87:
fc:9d:aa:48:ab:97:1d:f9:ba:54:ba:00:69:7a:ef:75:47:dd:
f0:28:26:ea:f9:96:cc:49:4b:f4:67:dc:78:57:55:ef:f1:35:
91:dc:b2:a1:82:0d:b1:56:9c:1e:0c:3d:47:e0:ce:58:ae:dc:
eb:6c:21:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZNnt6n7rtxru+EhqDmMjDGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMTI2MDkwNTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzRhNDcyMjBlNzk0YjY1ZDMyNzkwODA1YTM4YjAxZjMwNjAyODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaj+mLPWL5SdSlfK02lQqTsBgPtV
4HKNnW/+xtpqyXCA6tDPDWrnZ4yACrdE0d47dwdkaV+wiruizWf+ampOS8mKpLMG
IdYdH0zqd7Rp3kqMeOppD50L8NX4HpAhKCQ6fN2FQCMFBtz7srZ6n/otyB9JdDJz
3D43Ef7IA+w9aGV3Tf22ibcC5MGKkY8Gb7lju0iMxouw+tmkI1XGcIlokVJbQiMj
VUnRmQfg+zmH/hyyT9NWBOOi6b4K13rotPtJ4KYX7UASxd5c8Fme0BDaICKWDjPr
EJ/YCWSQWjHfjeoHoPLEhrYABVF4pvZw/YBY4p6/2ZZcgcNeFTa2QneofQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFCdKRyIOeUtl0yeQgFo4sB8wYCgZMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvSjBwSElnNTVTMlhUSjVDQVdqaXdIekJnS0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGTZ7bjNjANBgkqhkiG9w0BAQsFAAOCAQEALtfreW9iJCDYzZPGKtyogsHP
IHRycd8NVrfShWvUxn/DPvIcn3VIFAtSM0pb3ZqZ4UP4z/M2ECpT1VitXVFTkEGu
4DCOM30XSijCR51Gu3JkvR4Jw7IufwjU3sUTXNa1K+taMTUF2aGjoHByuElFnqdo
uGeaTjxhuxJfdDIkuwJ76X2ncVZugmM8UlhkKY3tLppvoMuhFjOWqaULVW3PwKbl
6Imw5DtFULxu7HUQkxb8adSpYUrYtqZuklMkvvmSc5l22U6H/J2qSKuXHfm6VLoA
aXrvdUfd8Cgm6vmWzElL9GfceFdV7/E1kdyyoYINsVacHgw9R+DOWK7c62wh3A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:41 2025 by rpki-client