Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ORlD6DIQBE5afAZj4PiPhy5RsRA.roa
File: ORlD6DIQBE5afAZj4PiPhy5RsRA.roa (raw, json)
Hash identifier: 1zYWgjveBE8QibdtX+vn5vBEX3bQdq41nuGkdhnihOs=
Subject key identifier: 39:19:43:E8:32:10:04:4E:5A:7C:06:63:E0:F8:8F:87:2E:51:B1:10
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019199C35BD8C70BF4CD2A0C083386684FAD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ORlD6DIQBE5afAZj4PiPhy5RsRA.roa
Signing time: Wed 28 Aug 2024 16:13:22 +0000
ROA not before: Wed 28 Aug 2024 16:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c3:5b:d8:c7:0b:f4:cd:2a:0c:08:33:86:68:4f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 28 16:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=391943e83210044e5a7c0663e0f88f872e51b110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:2f:cf:b9:2b:37:d7:70:aa:06:87:cf:6b:
11:c0:a9:b3:d5:7f:74:2c:37:5e:84:25:39:9d:f3:
9d:ee:e2:1f:23:18:96:f2:17:aa:b8:55:6d:13:dd:
35:22:2e:9f:5c:4e:3c:66:13:4b:7b:5d:86:ca:fd:
60:e4:65:04:82:84:2f:29:a9:91:78:39:60:b1:a1:
5b:6e:f3:f3:00:cd:d9:dc:f6:93:e1:4c:fd:79:f1:
0f:1c:ea:73:88:37:98:e9:8e:d9:9a:f3:f0:db:9b:
d3:82:fb:96:be:68:86:1d:f9:ff:91:a4:9b:0f:65:
b3:8b:35:8b:7c:03:3d:d0:07:d4:19:22:2b:85:ef:
47:e4:68:46:c6:c8:d2:09:0a:8d:30:36:10:55:bd:
9f:ec:02:ab:7b:a8:8f:c3:36:c4:9d:35:6f:20:72:
aa:47:cf:d7:d4:dd:3a:77:95:bd:65:0b:9c:54:2f:
0d:81:ae:50:20:7e:2e:55:6c:39:d9:26:03:72:07:
71:e2:40:35:43:59:50:a6:d1:47:82:54:b1:77:14:
61:dc:2e:93:b3:1f:09:49:b1:85:68:3d:7f:e9:91:
7c:a8:f6:0a:20:33:9e:f4:6e:c7:f0:26:55:ae:cb:
c6:c3:ab:b7:bd:a2:d2:36:7d:ef:58:9b:88:76:4f:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:19:43:E8:32:10:04:4E:5A:7C:06:63:E0:F8:8F:87:2E:51:B1:10
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ORlD6DIQBE5afAZj4PiPhy5RsRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
18:f9:ee:f6:7b:c2:cd:db:ec:a1:84:71:de:c3:dd:32:6a:c7:
38:29:e5:51:30:82:ec:81:32:db:78:3d:7a:00:a8:56:33:63:
da:ab:6d:01:28:fd:a1:80:5e:32:bb:bf:b2:ad:36:a8:18:4d:
ab:54:72:94:80:a1:8f:1d:d5:7b:91:fd:33:e9:cf:1c:71:ad:
13:b4:07:15:30:2c:05:fa:ff:ca:b3:23:1b:4b:0a:c3:e1:ec:
59:cd:61:46:4c:4e:10:87:03:51:b2:a1:a2:f7:d0:0a:ef:28:
a6:82:3e:16:00:86:59:4a:84:9b:15:fb:d7:cb:9b:38:6d:f0:
88:16:92:e6:bd:d8:fa:ca:64:04:92:79:33:f3:47:3f:06:46:
b5:50:80:d0:18:da:1e:46:e2:7b:20:3b:3f:30:8a:f4:60:21:
9d:49:8c:5e:ed:bd:a7:51:09:ba:39:f6:09:b5:5c:65:aa:81:
c7:71:76:91:a2:cf:d2:fa:d0:87:8d:53:8c:28:66:59:6d:c7:
49:b5:2b:53:d0:30:d6:ec:39:32:e6:3f:79:2d:0f:fd:74:1a:
e3:73:a4:17:74:07:fd:98:05:c9:42:e1:04:2e:9e:0e:61:c5:
40:e7:96:01:22:ca:5a:81:26:c9:11:f1:33:8e:2c:57:d0:d0:
dc:8e:7e:17
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGZw1vYxwv0zSoMCDOGaE+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI4MTYxMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE5NDNlODMyMTAwNDRlNWE3YzA2NjNlMGY4OGY4NzJlNTFiMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqscvz7krN9dwqgaHz2sRwKmz1X90
LDdehCU5nfOd7uIfIxiW8hequFVtE901Ii6fXE48ZhNLe12Gyv1g5GUEgoQvKamR
eDlgsaFbbvPzAM3Z3PaT4Uz9efEPHOpziDeY6Y7ZmvPw25vTgvuWvmiGHfn/kaSb
D2WzizWLfAM90AfUGSIrhe9H5GhGxsjSCQqNMDYQVb2f7AKre6iPwzbEnTVvIHKq
R8/X1N06d5W9ZQucVC8Nga5QIH4uVWw52SYDcgdx4kA1Q1lQptFHglSxdxRh3C6T
sx8JSbGFaD1/6ZF8qPYKIDOe9G7H8CZVrsvGw6u3vaLSNn3vWJuIdk/hXwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFDkZQ+gyEAROWnwGY+D4j4cuUbEQMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvT1JsRDZESVFCRTVhZkFaajRQaVBoeTVSc1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAGPnu9nvCzdvsoYRx3sPdMmrH
OCnlUTCC7IEy23g9egCoVjNj2qttASj9oYBeMru/sq02qBhNq1RylIChjx3Ve5H9
M+nPHHGtE7QHFTAsBfr/yrMjG0sKw+HsWc1hRkxOEIcDUbKhovfQCu8opoI+FgCG
WUqEmxX718ubOG3wiBaS5r3Y+spkBJJ5M/NHPwZGtVCA0BjaHkbieyA7PzCK9GAh
nUmMXu29p1EJujn2CbVcZaqBx3F2kaLP0vrQh41TjChmWW3HSbUrU9Aw1uw5MuY/
eS0P/XQa43OkF3QH/ZgFyULhBC6eDmHFQOeWASLKWoEmyRHxM44sV9DQ3I5+Fw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:43 2025 by rpki-client