Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K60XBFBz9VuGxX7W7utP9Z7-4B0.roa
File: K60XBFBz9VuGxX7W7utP9Z7-4B0.roa (raw, json)
Hash identifier: xcPf5esKa4Bl2MZnV5ufOxCGXFW8C+/4jNmTbN2xRAg=
Subject key identifier: 2B:AD:17:04:50:73:F5:5B:86:C5:7E:D6:EE:EB:4F:F5:9E:FE:E0:1D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945ADAB9A9A2DA256A3A7A2EF97C9F89CD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K60XBFBz9VuGxX7W7utP9Z7-4B0.roa
Signing time: Sun 12 Jan 2025 14:11:11 +0000
ROA not before: Sun 12 Jan 2025 14:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5a:da:b9:a9:a2:da:25:6a:3a:7a:2e:f9:7c:9f:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 14:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bad17045073f55b86c57ed6eeeb4ff59efee01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:f4:7e:81:71:e7:fb:70:35:a7:2b:7e:6e:
e4:fa:f1:06:7e:65:45:95:bf:03:26:72:1f:7e:fa:
74:d5:bb:0b:10:56:cc:ca:ee:2f:c6:7e:ff:98:2e:
8f:35:a9:7e:af:b1:b3:69:e9:38:c1:19:33:08:2e:
ca:b7:a4:62:4e:4e:48:ce:75:63:33:f2:67:28:b8:
99:17:02:19:94:cf:95:e4:3b:3b:8f:45:b8:e0:d3:
cc:62:9f:33:bb:9e:17:8c:4f:f1:ac:5f:b7:f4:7f:
33:eb:e6:b5:14:e0:a6:5a:be:3c:de:7d:a5:11:ae:
5a:aa:bd:93:35:51:ad:f9:79:62:4d:d4:8a:b0:95:
28:e7:de:91:18:37:b7:77:c7:6b:a7:47:d8:9e:d0:
2b:7a:0d:ca:94:99:20:c9:1a:26:7d:32:b2:00:25:
b0:82:1c:27:13:98:6a:2c:33:29:86:91:66:a3:d0:
d1:f3:80:98:81:d8:df:9b:21:42:b2:93:98:15:27:
e8:f3:47:d5:11:59:a6:7d:24:3b:c9:f8:93:59:f6:
3f:21:37:fa:14:fe:54:bd:96:e7:4a:80:4b:5d:8e:
1e:63:f8:ad:ec:5e:4a:6b:a4:9f:b3:07:6d:0a:5d:
40:1c:c4:19:e0:dd:33:7b:63:6e:8d:36:86:1f:91:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AD:17:04:50:73:F5:5B:86:C5:7E:D6:EE:EB:4F:F5:9E:FE:E0:1D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/K60XBFBz9VuGxX7W7utP9Z7-4B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
57:75:4e:8a:32:75:24:24:18:f2:7c:0c:6e:6c:2b:52:81:f7:
01:5f:d2:81:f3:13:15:8f:31:2e:c9:57:6c:b3:80:cc:30:53:
31:0f:86:f6:45:a1:5b:fd:1e:b9:b3:6a:87:98:fe:3b:92:9b:
e5:ad:70:06:e9:9d:30:2a:d0:1d:6f:1e:c8:9a:60:b7:51:2a:
95:4c:73:3d:4d:cb:34:2a:e7:08:91:30:0f:38:97:c0:1a:f1:
1f:b6:a1:d4:4a:a1:bb:10:0e:2f:a8:36:86:dd:8b:31:e6:73:
bb:91:bd:c7:7e:21:89:8b:95:f7:0a:44:30:2f:70:05:ac:32:
d0:05:d9:24:89:c4:47:53:0f:7d:f7:33:76:ce:c9:78:db:8c:
09:56:70:cc:31:6d:69:84:1b:bf:28:c3:41:78:e9:29:50:11:
0f:38:6a:b1:66:97:26:b6:3a:55:01:ab:a9:49:d0:3b:8c:b0:
d3:ed:b1:05:f5:e8:3b:1d:4e:36:92:ee:28:77:86:c4:63:d1:
c4:33:8d:8d:df:99:94:2e:42:12:b1:8d:cc:fc:e6:76:da:16:
dd:2b:ac:e8:7d:69:c1:68:08:42:6a:92:b3:ba:2d:83:03:e3:
75:c3:c7:33:0d:95:a7:f8:13:e6:43:47:4e:16:1d:0e:72:5a:
e1:5f:49:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:24:26 2025 by rpki-client