Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OAAdZXInk5O7Y4AgR-dQgXHBbuA.roa
File: OAAdZXInk5O7Y4AgR-dQgXHBbuA.roa (raw, json)
Hash identifier: yqZrApe9IclWCIvNSa77lK4FMzQIJjO93XVWua1+LQA=
Subject key identifier: 38:00:1D:65:72:27:93:93:BB:63:80:20:47:E7:50:81:71:C1:6E:E0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959C16B9906C9FC37143AAF8E16FEDA9A3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OAAdZXInk5O7Y4AgR-dQgXHBbuA.roa
Signing time: Sat 15 Mar 2025 23:14:49 +0000
ROA not before: Sat 15 Mar 2025 23:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9c:16:b9:90:6c:9f:c3:71:43:aa:f8:e1:6f:ed:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 23:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38001d6572279393bb63802047e7508171c16ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:9c:bc:45:02:93:60:98:04:a3:4e:17:2a:
8c:f9:a6:37:1b:4b:eb:5d:1f:56:72:b6:a3:7e:0f:
43:0a:67:83:f6:9d:30:d1:a3:eb:46:24:e8:a3:a6:
1b:e7:95:bb:fd:01:f6:c0:44:67:31:55:92:27:ed:
dc:37:ae:24:4f:bb:a5:a8:3b:bd:7a:7b:3c:a2:4f:
6e:57:52:6e:e7:1a:e3:fe:03:05:6d:27:c6:6f:3c:
a4:c6:de:1b:8f:60:ef:04:bb:96:52:f7:31:f1:91:
1b:36:94:f3:07:3e:d8:23:c9:02:7b:f5:22:ca:05:
24:73:2c:e7:f3:5a:f3:27:46:dd:61:97:46:ed:32:
91:ca:e8:92:80:58:6e:27:e7:e0:80:03:b7:30:83:
0b:6b:9c:20:b9:3d:ba:8c:2f:14:76:72:60:5f:e0:
ce:47:5c:bf:31:31:bd:21:8d:e0:41:79:e1:7a:15:
bf:41:58:d6:5a:f5:d8:74:c5:d7:0e:a5:0e:de:77:
01:38:24:cb:87:56:f0:8d:16:11:cb:63:28:11:ae:
be:25:ee:39:0d:8b:41:86:60:c5:4a:9e:2b:64:b4:
42:71:6e:45:75:1d:64:cc:f8:e1:c7:a4:4c:b1:57:
1a:7a:30:ce:2a:2f:0c:f8:ce:55:ac:d4:73:e4:be:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:1D:65:72:27:93:93:BB:63:80:20:47:E7:50:81:71:C1:6E:E0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/OAAdZXInk5O7Y4AgR-dQgXHBbuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
67:63:9a:42:e2:61:c6:65:58:09:58:7c:1b:70:73:dd:34:a1:
50:08:d1:41:1e:d2:36:15:51:79:18:bd:56:ab:50:16:ab:c5:
8c:8f:89:46:53:14:c5:bc:b3:8c:e2:0b:55:95:82:fe:28:03:
9f:69:57:c3:0d:fe:0a:2b:9a:f7:3e:5b:33:3e:14:b8:04:c9:
2b:69:42:7b:16:3e:95:ac:e5:89:a4:e1:4e:9d:26:da:e3:71:
0b:30:21:14:f9:b8:3e:31:bc:f6:d5:e2:91:ce:c1:ab:6b:96:
00:46:b1:67:6a:13:72:62:bf:b5:93:b2:22:38:8b:9d:bb:16:
1d:b6:e1:a8:91:6c:1c:83:6d:2a:6e:58:54:e9:b6:34:47:36:
85:12:e1:01:87:06:3a:c6:d3:52:77:32:3a:91:eb:14:1f:3c:
7a:d1:9a:d8:17:b8:72:aa:21:c6:4e:30:35:61:34:4f:a1:3b:
bf:3d:26:a8:c0:6c:8e:2b:a3:7f:1f:70:b2:81:5f:63:eb:7c:
1b:cb:cf:58:f2:d7:18:8f:40:3c:6b:74:86:86:aa:66:06:fa:
44:21:5a:e0:f4:4c:66:45:b4:8e:fc:97:f4:d8:30:41:85:eb:
8a:bb:93:f3:c3:b1:e2:cd:53:cb:a0:7c:fd:4a:50:87:19:8b:
5f:14:9a:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWcFrmQbJ/DcUOq+OFv7amjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE1MjMxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODAwMWQ2NTcyMjc5MzkzYmI2MzgwMjA0N2U3NTA4MTcxYzE2ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXScvEUCk2CYBKNOFyqM+aY3G0vr
XR9Wcrajfg9DCmeD9p0w0aPrRiToo6Yb55W7/QH2wERnMVWSJ+3cN64kT7ulqDu9
ens8ok9uV1Ju5xrj/gMFbSfGbzykxt4bj2DvBLuWUvcx8ZEbNpTzBz7YI8kCe/Ui
ygUkcyzn81rzJ0bdYZdG7TKRyuiSgFhuJ+fggAO3MIMLa5wguT26jC8UdnJgX+DO
R1y/MTG9IY3gQXnhehW/QVjWWvXYdMXXDqUO3ncBOCTLh1bwjRYRy2MoEa6+Je45
DYtBhmDFSp4rZLRCcW5FdR1kzPjhx6RMsVcaejDOKi8M+M5VrNRz5L6dpwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDgAHWVyJ5OTu2OAIEfnUIFxwW7gMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvT0FBZFpYSW5rNU83WTRBZ1ItZFFnWEhCYnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAZ2OaQuJhxmVYCVh8G3Bz3TSh
UAjRQR7SNhVReRi9VqtQFqvFjI+JRlMUxbyzjOILVZWC/igDn2lXww3+Ciua9z5b
Mz4UuATJK2lCexY+lazliaThTp0m2uNxCzAhFPm4PjG89tXikc7Bq2uWAEaxZ2oT
cmK/tZOyIjiLnbsWHbbhqJFsHINtKm5YVOm2NEc2hRLhAYcGOsbTUncyOpHrFB88
etGa2Be4cqohxk4wNWE0T6E7vz0mqMBsjiujfx9wsoFfY+t8G8vPWPLXGI9APGt0
hoaqZgb6RCFa4PRMZkW0jvyX9NgwQYXriruT88Ox4s1Ty6B8/UpQhxmLXxSa3A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:09 2025 by rpki-client