Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MdU-u_d3z6ce5D3eu746YY9yv3A.roa
File: MdU-u_d3z6ce5D3eu746YY9yv3A.roa (raw, json)
Hash identifier: /By1V+9Vv3l3a5m66VLnilWSes6YWBAmnPBLQEGqii8=
Subject key identifier: 31:D5:3E:BB:F7:77:CF:A7:1E:E4:3D:DE:BB:BE:3A:61:8F:72:BF:70
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959DCD42CEBFFBEE636B3013E793B1C8E4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MdU-u_d3z6ce5D3eu746YY9yv3A.roa
Signing time: Sun 16 Mar 2025 07:13:49 +0000
ROA not before: Sun 16 Mar 2025 07:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:cd:42:ce:bf:fb:ee:63:6b:30:13:e7:93:b1:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 07:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d53ebbf777cfa71ee43ddebbbe3a618f72bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2d:69:33:b4:ae:f6:5b:68:a0:63:54:ed:46:
67:6c:1b:c6:ea:df:17:7a:45:b7:16:59:e4:99:29:
b4:eb:84:b4:48:b0:4a:35:d5:8f:60:e7:55:d2:26:
7e:34:d1:38:95:37:6f:7b:01:54:66:58:5b:cd:88:
78:0d:7a:84:3d:d5:c2:8f:93:c4:d2:af:43:ea:d3:
39:eb:23:df:72:38:6d:9e:17:93:4f:a9:e6:e5:38:
0f:4f:ac:49:f3:c3:c5:9f:08:cb:54:ca:85:8d:ab:
c2:30:8b:9b:7d:06:90:f2:71:c3:9a:ea:8e:50:fd:
37:40:75:0e:47:82:2b:fa:a7:03:a5:43:08:b8:3c:
46:67:e2:08:44:8e:52:21:6b:a2:4d:4b:c8:e6:d4:
5e:04:4d:7d:74:e9:94:13:af:e3:88:60:c8:d8:b5:
b3:3f:43:2c:09:50:57:a5:0c:35:ea:fb:81:5f:b1:
de:41:df:19:96:a4:dd:c5:db:f8:03:fd:34:a0:37:
ff:8f:e7:86:8d:91:a4:dc:b9:32:22:a2:44:bf:10:
8a:0c:3b:36:6a:93:f4:3e:e3:c2:be:25:f2:64:fd:
77:6c:52:c1:8f:2e:1f:11:99:b0:d1:ee:8c:f3:67:
4f:2f:f7:84:e9:5a:da:9e:69:1d:a0:1e:f2:b7:09:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D5:3E:BB:F7:77:CF:A7:1E:E4:3D:DE:BB:BE:3A:61:8F:72:BF:70
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MdU-u_d3z6ce5D3eu746YY9yv3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
65:21:18:f0:6a:d8:69:d6:8b:a8:df:f5:60:fc:eb:93:60:84:
21:a2:d0:23:f5:65:ee:b2:1e:24:3f:b9:ab:64:53:cc:4d:5b:
e2:16:cb:ae:16:46:09:d1:8f:c2:df:a7:3d:e0:55:4b:48:a3:
9c:c6:9d:45:01:e6:80:9c:b1:3b:c9:69:31:a3:e5:84:af:75:
a8:0c:19:7a:30:90:38:e8:ad:6e:2d:3e:f3:6b:50:e3:0c:57:
90:04:ca:93:30:8c:5d:bd:dd:2c:47:24:3e:b8:52:f5:0c:10:
e3:48:23:17:7b:c7:6b:b2:52:dc:af:a4:ce:32:f1:f3:1c:d9:
2c:7d:eb:cd:c6:69:d1:73:0f:d4:e7:91:b9:0d:38:9e:f6:87:
d5:6e:ed:a7:2f:3c:c7:54:14:ca:5f:31:9d:17:2a:02:b9:ff:
8a:05:31:21:88:f5:b0:de:25:35:f8:b3:a6:15:94:63:3f:cd:
98:a9:7f:5b:0f:11:1e:9c:aa:82:07:18:26:a6:cd:ce:21:43:
f1:33:7d:62:f4:bf:a7:ee:44:11:82:13:f5:0a:99:08:57:eb:
0c:04:9e:ba:0a:2b:82:0b:83:22:b4:60:07:f4:2c:60:2d:9e:
d1:8f:9f:81:16:5f:41:e3:89:44:c1:a7:15:5e:3b:49:09:55:
e7:d5:f3:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:18 2025 by rpki-client