Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KGyOn7JI74izfZQ9EIlrJdhCWqs.roa
File: KGyOn7JI74izfZQ9EIlrJdhCWqs.roa (raw, json)
Hash identifier: v2/tTLgNAgkd+pXqVlBJu7wnn4nxXn4Y7vzs6GwA5oU=
Subject key identifier: 28:6C:8E:9F:B2:48:EF:88:B3:7D:94:3D:10:89:6B:25:D8:42:5A:AB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019484B33D95A90482B677539C04003456EA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KGyOn7JI74izfZQ9EIlrJdhCWqs.roa
Signing time: Mon 20 Jan 2025 17:12:06 +0000
ROA not before: Mon 20 Jan 2025 17:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:b3:3d:95:a9:04:82:b6:77:53:9c:04:00:34:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 17:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=286c8e9fb248ef88b37d943d10896b25d8425aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:df:1a:d5:1b:4a:e5:f9:e0:d1:02:f6:37:
58:ba:88:c1:c7:d8:57:3c:ea:6f:60:60:d9:8c:5a:
36:84:d6:d5:09:75:3b:7b:78:3e:b2:d2:5e:16:ee:
a9:bf:db:61:d1:3f:17:a1:47:05:5f:63:39:78:b7:
62:58:53:17:64:53:28:a6:52:1a:49:e3:f7:b2:16:
7d:48:fe:c2:3a:6b:fe:9e:2a:74:11:07:78:48:51:
ad:35:37:81:31:ca:21:d0:57:a0:cf:80:60:d1:11:
e8:2c:a2:9d:4c:f2:98:e5:52:55:32:f0:ae:b8:ee:
5e:7c:5b:f5:19:08:7b:94:40:35:e1:cc:0a:7c:ac:
41:0f:33:cd:68:90:8f:bf:db:93:ff:d7:e2:28:20:
f7:f8:38:bd:83:8a:ac:c8:c8:13:26:2f:e2:fe:c7:
a7:4f:a4:fe:b2:f5:0c:1a:6d:dc:13:bc:7c:45:3c:
c9:18:1d:a0:7f:60:07:5a:88:a0:a8:e8:00:31:fc:
3f:a3:eb:ca:93:99:f6:c1:fd:7b:b6:83:c2:ed:5b:
a6:42:0b:1d:ee:dc:c1:f5:b5:86:4c:4f:81:ed:ce:
56:35:c1:1d:46:28:ec:b5:9f:7a:af:f2:5c:c5:cd:
2f:5d:39:3f:15:52:24:29:ce:75:ac:63:b2:64:c1:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:8E:9F:B2:48:EF:88:B3:7D:94:3D:10:89:6B:25:D8:42:5A:AB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KGyOn7JI74izfZQ9EIlrJdhCWqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0d:85:a8:9d:7e:fe:a0:9c:78:43:00:7c:be:2f:d0:79:0d:14:
c5:ae:1d:5b:65:46:63:d3:56:1e:26:19:b2:d3:e4:89:34:a3:
2b:10:c3:03:3d:55:ae:24:f8:ad:2b:2b:31:53:e6:d5:d6:9d:
e5:f9:25:d1:03:0d:99:fd:aa:17:52:b4:bd:c2:d7:4e:b3:ac:
da:12:13:c9:81:ce:78:cb:87:f8:44:e4:db:66:6e:41:01:b3:
20:d3:14:25:a2:82:68:ad:16:08:48:20:07:8d:72:f7:45:17:
35:6a:75:b0:81:61:28:d9:d7:b0:d1:46:94:fe:84:05:eb:e7:
89:9c:d9:21:ca:a0:84:9c:ca:1f:23:38:9c:0e:af:ae:ae:6e:
fd:76:08:da:99:e0:21:c2:08:0b:c2:26:21:22:2a:a9:2f:c7:
31:0c:ff:97:85:3f:e7:b3:82:4b:c1:0d:2f:f3:7d:6f:63:be:
03:b9:69:e6:31:ff:5a:7b:2d:57:52:16:86:31:94:76:55:6f:
b2:82:f1:b6:ac:d9:e9:69:3b:5c:39:7d:90:54:e3:39:1a:e9:
00:52:4c:c6:b3:32:24:2c:75:70:f4:3f:1f:c6:40:bc:ae:01:
18:65:74:a7:c7:9b:1b:8f:b9:c0:cb:b6:f0:03:26:6d:31:7a:
89:af:d9:36
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZSEsz2VqQSCtndTnAQANFbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTIwMTcxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODZjOGU5ZmIyNDhlZjg4YjM3ZDk0M2QxMDg5NmIyNWQ4NDI1YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDfGtUbSuX54NEC9jdYuojBx9hX
POpvYGDZjFo2hNbVCXU7e3g+stJeFu6pv9th0T8XoUcFX2M5eLdiWFMXZFMoplIa
SeP3shZ9SP7COmv+nip0EQd4SFGtNTeBMcoh0Fegz4Bg0RHoLKKdTPKY5VJVMvCu
uO5efFv1GQh7lEA14cwKfKxBDzPNaJCPv9uT/9fiKCD3+Di9g4qsyMgTJi/i/sen
T6T+svUMGm3cE7x8RTzJGB2gf2AHWoigqOgAMfw/o+vKk5n2wf17toPC7VumQgsd
7tzB9bWGTE+B7c5WNcEdRijstZ96r/Jcxc0vXTk/FVIkKc51rGOyZMEUnwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFChsjp+ySO+Is32UPRCJayXYQlqrMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvS0d5T243Skk3NGl6ZlpROUVJbHJKZGhDV3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEADYWonX7+oJx4QwB8vi/QeQ0U
xa4dW2VGY9NWHiYZstPkiTSjKxDDAz1VriT4rSsrMVPm1dad5fkl0QMNmf2qF1K0
vcLXTrOs2hITyYHOeMuH+ETk22ZuQQGzINMUJaKCaK0WCEggB41y90UXNWp1sIFh
KNnXsNFGlP6EBevniZzZIcqghJzKHyM4nA6vrq5u/XYI2pngIcIIC8ImISIqqS/H
MQz/l4U/57OCS8ENL/N9b2O+A7lp5jH/WnstV1IWhjGUdlVvsoLxtqzZ6Wk7XDl9
kFTjORrpAFJMxrMyJCx1cPQ/H8ZAvK4BGGV0p8ebG4+5wMu28AMmbTF6ia/ZNg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:56:37 2025 by rpki-client