Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NDGzDspW8nNgOjzI6V7ji0FdnBw.roa
File: NDGzDspW8nNgOjzI6V7ji0FdnBw.roa (raw, json)
Hash identifier: HlZK8BtxQySWATdFqzGf5lKYQ3ZjqgxL93Csl94+JMg=
Subject key identifier: 34:31:B3:0E:CA:56:F2:73:60:3A:3C:C8:E9:5E:E3:8B:41:5D:9C:1C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01953EB680E9A6A4876A90F76BA0ABCFC338
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NDGzDspW8nNgOjzI6V7ji0FdnBw.roa
Signing time: Tue 25 Feb 2025 20:05:02 +0000
ROA not before: Tue 25 Feb 2025 20:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:3eb5:da7b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:b6:80:e9:a6:a4:87:6a:90:f7:6b:a0:ab:cf:c3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 25 20:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3431b30eca56f273603a3cc8e95ee38b415d9c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:db:51:a8:10:bb:7e:56:4c:16:21:07:36:
e6:e2:5b:04:05:d4:4d:03:9d:0c:1e:a3:0b:26:ff:
82:37:2e:54:fb:99:33:24:91:ee:33:2b:09:a3:de:
79:f8:07:e2:a0:58:55:e3:fd:2f:cb:26:45:3a:4d:
b1:50:c5:4f:e0:9e:68:73:95:de:44:7d:a6:21:0d:
1a:ef:32:ad:55:6d:60:b1:c4:67:a2:21:c7:d6:2b:
5a:06:1b:d1:48:c3:0b:36:b4:bc:96:99:a0:c1:3f:
62:ec:26:36:78:a6:c1:21:c0:94:04:e6:2d:4c:54:
c7:46:ec:ae:99:6c:9c:72:9f:34:df:05:e7:c1:4c:
b6:cc:0a:81:2b:b7:0e:06:32:0f:a7:71:dc:30:01:
a6:b7:1a:c0:cb:ef:c0:ae:2e:46:f6:c9:5e:8f:df:
cd:4e:a8:6f:a4:37:c6:7f:50:25:be:cf:d7:8d:33:
91:7d:de:4a:a0:90:a1:1e:47:88:19:b5:c0:69:44:
36:2f:bf:f7:ec:e5:62:87:85:06:7d:23:39:3c:f2:
ba:9d:8a:e9:ad:2d:bf:d0:2d:48:c9:cb:bd:04:4f:
a2:a7:6d:8c:0c:f3:e6:4f:9c:d9:56:20:bf:09:2a:
f7:41:4b:91:6e:98:a5:33:32:23:51:e6:9c:9b:0a:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:B3:0E:CA:56:F2:73:60:3A:3C:C8:E9:5E:E3:8B:41:5D:9C:1C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/NDGzDspW8nNgOjzI6V7ji0FdnBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:3eb5:da7b/128
Signature Algorithm: sha256WithRSAEncryption
53:9f:1f:a2:9a:12:df:fc:fe:6b:43:12:da:f2:a8:40:dc:a1:
66:4a:05:5a:f3:46:8d:fc:14:6d:02:2c:05:71:8a:f5:6f:4f:
29:ad:4e:21:39:09:33:83:53:2d:d1:88:22:46:bc:f2:70:56:
0a:60:a5:e0:12:c6:48:ea:a7:3a:9e:df:2d:49:e2:33:bd:c7:
1d:58:15:9d:66:ce:c0:25:a6:de:c7:72:42:a6:42:96:5a:d8:
ca:ee:11:1e:e5:74:6f:88:67:a6:24:62:3a:91:08:65:48:47:
2b:ce:00:47:56:dd:87:1b:e7:02:6e:12:a4:07:78:d6:b8:ce:
d9:67:f7:21:96:67:3b:13:a7:70:be:db:f5:14:42:1d:ef:e2:
36:8d:9b:96:71:a8:d4:53:04:93:5c:cc:24:d2:f3:2e:e6:ad:
8e:8e:1b:32:ed:90:03:e9:cb:cf:00:7e:5f:97:af:6c:09:7e:
f1:1e:de:d9:c4:f0:33:b1:e5:dc:f7:15:14:96:28:14:62:28:
5d:51:ac:5c:51:89:de:fd:90:e8:a2:b9:35:5f:a3:24:aa:29:
6e:da:c6:6c:49:bb:5e:c0:9b:ff:0b:a8:ee:81:4f:3c:74:df:
84:ff:34:23:96:58:33:e8:f6:46:4e:17:bf:be:56:a9:07:30:
bf:2c:f8:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:35 2025 by rpki-client