Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P4ymtxvk57Q1FYH193Ss_COHt30.roa
File: P4ymtxvk57Q1FYH193Ss_COHt30.roa (raw, json)
Hash identifier: 59W26kA8ojH+8WMiss+kzIBBzoTZLB4nRjwl2/FVXnY=
Subject key identifier: 3F:8C:A6:B7:1B:E4:E7:B4:35:15:81:F5:F7:74:AC:FC:23:87:B7:7D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945CCA07F51CACD3FE3CC80BE5BFC12D86
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P4ymtxvk57Q1FYH193Ss_COHt30.roa
Signing time: Sun 12 Jan 2025 23:12:11 +0000
ROA not before: Sun 12 Jan 2025 23:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5c:ca:07:f5:1c:ac:d3:fe:3c:c8:0b:e5:bf:c1:2d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 23:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f8ca6b71be4e7b4351581f5f774acfc2387b77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:78:a9:33:7f:40:be:8d:53:85:6d:8a:f4:
a4:81:a4:34:3c:be:a7:e1:1c:1f:dc:e5:c0:01:b9:
68:47:94:53:3c:98:7f:e0:17:55:14:26:99:79:ab:
ea:54:95:22:1a:8c:3a:c4:02:4f:b3:95:20:9c:1c:
36:e6:bf:5d:cc:ee:64:1c:65:47:ca:4d:58:50:05:
da:e4:ab:17:29:a6:5d:c0:bc:b4:1f:d5:b1:ed:40:
3f:d0:e4:ee:b1:68:0a:c6:e2:60:1b:8f:c2:1f:30:
fe:bd:5c:7d:87:02:28:05:f6:97:02:12:53:5b:4e:
56:a3:23:44:90:fb:45:d8:5d:04:32:d6:6f:06:dd:
fd:91:43:93:b9:2c:e1:38:af:4d:db:98:cb:94:22:
1b:29:73:bd:dc:b2:7e:01:b9:52:f6:10:9c:eb:ab:
2e:c6:42:65:28:e0:d9:7c:c2:f5:c3:75:ab:c9:7a:
24:7c:09:7d:37:4d:18:77:65:c4:3d:cc:5b:03:6f:
f6:dd:45:c7:b1:bc:ac:fd:fe:05:08:a3:9d:c8:6b:
2b:45:d1:0b:e8:2a:62:36:a4:c7:64:c7:3e:b8:0f:
b1:4f:f8:40:40:5a:b4:dd:1c:94:e6:1e:af:b2:ed:
7c:c9:1c:6d:a7:32:12:b3:6f:64:d6:3f:e4:4c:03:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:A6:B7:1B:E4:E7:B4:35:15:81:F5:F7:74:AC:FC:23:87:B7:7D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P4ymtxvk57Q1FYH193Ss_COHt30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
90:84:d5:fa:f7:6e:6c:cf:6d:22:bc:ad:1d:ef:6e:02:9b:e3:
61:1d:f7:8b:99:53:86:48:ee:39:f3:91:db:e8:7f:4d:78:3d:
4d:6c:35:42:4b:60:15:21:64:80:f4:ff:6e:32:d3:ff:03:0a:
0f:ec:19:28:89:b5:5c:5d:4a:6e:58:b2:16:9c:d1:6e:62:fd:
1b:6c:58:79:79:78:62:23:03:5a:1b:2e:0c:6e:a2:c5:a9:a8:
45:50:bf:1b:e5:de:80:ad:bc:2b:4b:08:33:a2:42:43:5b:10:
8a:00:ac:c8:be:ca:b5:62:f9:33:8a:e8:82:d6:e2:e0:e5:dd:
fb:76:99:9e:75:6c:dd:24:74:1a:bf:e7:8d:a2:f2:17:09:6f:
5d:f5:d6:7a:d7:84:cb:30:06:f6:97:31:8f:34:b7:f2:b8:35:
0a:14:d1:02:d4:2a:c6:6b:70:fe:be:f5:2a:61:06:49:85:80:
f5:83:93:37:9b:f6:a8:18:ba:5e:26:4f:c5:62:34:cf:e2:b2:
58:d4:cc:5a:85:e0:83:fa:b9:17:d9:b3:83:b4:96:2c:84:bc:
58:b4:a0:8a:fc:44:5f:87:f1:f1:34:4e:1f:d7:ab:67:14:d9:
d1:95:5b:8b:28:8b:50:0e:3a:13:5e:30:cb:98:ee:bc:bc:5e:
86:c2:2a:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:56:13 2025 by rpki-client