Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P8Hb42xUS4hkme5nZ3njcyVbqjA.roa
File: P8Hb42xUS4hkme5nZ3njcyVbqjA.roa (raw, json)
Hash identifier: OnGtnVNzJ1uNd5+cVEskGyCxoRxrkXJTn0e8l6sc6Q4=
Subject key identifier: 3F:C1:DB:E3:6C:54:4B:88:64:99:EE:67:67:79:E3:73:25:5B:AA:30
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194779C68A321BDA3298005434EFFFFD37B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P8Hb42xUS4hkme5nZ3njcyVbqjA.roa
Signing time: Sat 18 Jan 2025 04:12:06 +0000
ROA not before: Sat 18 Jan 2025 04:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:77:9c:68:a3:21:bd:a3:29:80:05:43:4e:ff:ff:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 04:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fc1dbe36c544b886499ee676779e373255baa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:06:6d:0f:50:0c:eb:25:43:d4:00:3d:98:
f8:36:12:2a:b6:02:f1:26:07:cb:f5:7c:75:24:08:
83:e0:b4:36:87:f4:99:39:85:09:1b:34:55:c9:38:
ba:22:c4:f7:58:4e:7f:9f:87:38:de:36:63:64:26:
68:80:9a:ad:ea:0d:5a:1e:4c:a7:60:92:66:cd:6b:
e4:8c:5d:a7:78:52:74:b1:3a:a0:4c:e9:ba:08:72:
d6:e8:93:42:a9:aa:91:28:65:61:17:2b:d1:69:00:
9d:3d:17:65:b9:84:d5:fb:7e:3c:8a:72:53:f7:ec:
94:79:cb:79:80:db:27:36:2e:ed:70:e6:f1:e3:b8:
da:16:ce:94:6a:a7:46:4f:f0:70:24:92:77:5a:98:
c9:c4:ed:a3:e5:41:8f:56:a1:24:54:55:49:8d:07:
c5:2f:04:4a:31:86:fe:60:46:9d:ad:2f:77:be:83:
01:f3:a5:39:9f:d5:b9:2f:0f:69:f6:41:08:3d:98:
b4:6f:b0:15:a8:d7:4a:87:35:ff:04:a8:f7:94:4d:
51:ac:07:9e:f0:f6:37:ed:d3:0e:84:03:22:b6:06:
74:02:5b:3d:a3:fa:bb:7b:30:f8:7c:c7:91:44:0f:
29:49:bf:97:f9:27:c0:da:c2:c9:35:ca:67:22:7c:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:DB:E3:6C:54:4B:88:64:99:EE:67:67:79:E3:73:25:5B:AA:30
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/P8Hb42xUS4hkme5nZ3njcyVbqjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
61:2e:f0:6a:22:e8:82:f9:f9:19:bf:b2:db:36:73:b4:a0:98:
2e:a9:51:6f:52:d8:94:d9:9a:d7:8c:cb:ac:0f:d8:cc:53:a4:
0d:4a:7b:18:68:65:4e:01:eb:90:5a:08:54:f6:1c:e4:fa:e5:
f3:3d:b8:d5:5d:7f:7d:3d:20:d8:05:86:27:50:e3:ce:51:d4:
80:4f:4c:21:21:68:72:f7:e6:55:9b:93:e9:fa:39:99:ac:33:
7c:8d:ee:27:b2:1e:50:62:43:d1:04:97:7a:f0:77:48:48:8a:
21:d6:96:20:32:3d:27:19:74:a7:d4:ce:f4:10:51:a4:ab:18:
28:c2:7c:c1:c6:9d:7b:59:8f:db:7e:b2:31:9f:5a:03:47:7d:
dd:66:53:ec:f0:1a:fb:87:d5:59:70:ff:31:a9:eb:68:a7:a8:
5c:7c:5a:23:4f:f9:5d:ca:78:c5:d6:f4:fa:db:1a:7d:9c:62:
72:de:b3:5d:81:55:ed:ef:62:9c:fd:2f:db:c7:0e:2c:f0:43:
3c:8c:89:55:ae:5d:00:ea:87:1c:70:fe:a6:62:aa:32:d8:d2:
ee:31:3d:ce:c3:e9:e7:ec:dd:ef:69:ef:e8:39:3d:cc:fd:1b:
e7:1d:00:2c:a1:a0:66:0d:c6:b4:b3:42:61:a0:14:da:97:0b:
77:a2:06:72
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZR3nGijIb2jKYAFQ07//9N7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE4MDQxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmMxZGJlMzZjNTQ0Yjg4NjQ5OWVlNjc2Nzc5ZTM3MzI1NWJhYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11UGbQ9QDOslQ9QAPZj4NhIqtgLx
JgfL9Xx1JAiD4LQ2h/SZOYUJGzRVyTi6IsT3WE5/n4c43jZjZCZogJqt6g1aHkyn
YJJmzWvkjF2neFJ0sTqgTOm6CHLW6JNCqaqRKGVhFyvRaQCdPRdluYTV+348inJT
9+yUect5gNsnNi7tcObx47jaFs6UaqdGT/BwJJJ3WpjJxO2j5UGPVqEkVFVJjQfF
LwRKMYb+YEadrS93voMB86U5n9W5Lw9p9kEIPZi0b7AVqNdKhzX/BKj3lE1RrAee
8PY37dMOhAMitgZ0Als9o/q7ezD4fMeRRA8pSb+X+SfA2sLJNcpnInxFZQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFD/B2+NsVEuIZJnuZ2d543MlW6owMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvUDhIYjQyeFVTNGhrbWU1blozbmpjeVZicWpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAYS7waiLogvn5Gb+y2zZztKCY
LqlRb1LYlNma14zLrA/YzFOkDUp7GGhlTgHrkFoIVPYc5Prl8z241V1/fT0g2AWG
J1DjzlHUgE9MISFocvfmVZuT6fo5mawzfI3uJ7IeUGJD0QSXevB3SEiKIdaWIDI9
Jxl0p9TO9BBRpKsYKMJ8wcade1mP236yMZ9aA0d93WZT7PAa+4fVWXD/ManraKeo
XHxaI0/5Xcp4xdb0+tsafZxict6zXYFV7e9inP0v28cOLPBDPIyJVa5dAOqHHHD+
pmKqMtjS7jE9zsPp5+zd72nv6Dk9zP0b5x0ALKGgZg3GtLNCYaAU2pcLd6IGcg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:09:23 2025 by rpki-client