Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PRSVzg5aSJP5WnQuRUs1T51sRUs.roa
File: PRSVzg5aSJP5WnQuRUs1T51sRUs.roa (raw, json)
Hash identifier: ihCqkXj4U1OZmp+oU2Fu9gk1Wk2K5EWFjjcepzimZiY=
Subject key identifier: 3D:14:95:CE:0E:5A:48:93:F9:5A:74:2E:45:4B:35:4F:9D:6C:45:4B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A5C07B0F1687A765DE2FBBAF8AB85BE1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PRSVzg5aSJP5WnQuRUs1T51sRUs.roa
Signing time: Mon 17 Mar 2025 20:16:49 +0000
ROA not before: Mon 17 Mar 2025 20:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:c0:7b:0f:16:87:a7:65:de:2f:bb:af:8a:b8:5b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 20:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d1495ce0e5a4893f95a742e454b354f9d6c454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:44:37:f1:36:55:ac:f0:9a:c3:5b:64:a4:
e0:eb:50:f8:57:c9:7d:ca:4a:5d:39:d9:31:6d:e0:
a3:0e:9f:ae:3e:0d:d9:d8:1c:3c:17:7e:a7:5e:6b:
cc:4a:17:e7:62:4d:b4:61:dc:99:6d:df:d1:51:45:
5f:31:3b:c0:b4:d5:7c:58:9d:09:eb:1e:e0:f1:63:
ac:fd:3b:88:33:09:b4:09:33:c5:48:d8:5a:d2:b2:
ce:98:c3:35:f9:61:52:8d:fa:65:e1:4a:d7:59:c3:
38:96:24:44:6f:75:69:0f:8c:82:50:85:94:e7:60:
3c:c8:7c:09:51:26:02:9e:0c:c5:08:d1:1e:67:8d:
7b:bb:43:26:cc:3e:78:7e:66:21:1f:67:e9:77:a7:
71:d8:4e:f6:e8:82:31:82:84:e5:58:34:2e:bb:31:
44:51:fe:00:05:d3:10:ed:40:45:0b:4b:c9:e2:db:
63:d9:e1:5c:95:62:75:6a:1a:fe:73:4a:73:3c:1f:
8f:51:40:41:29:8f:92:12:b6:91:ad:4d:be:81:a4:
28:f5:47:ab:07:4e:9b:1e:de:a8:7b:76:7c:ef:f9:
80:44:17:ef:39:b8:05:d5:38:27:22:37:5f:27:ab:
ad:16:47:ee:62:02:e7:10:08:e1:8d:a8:04:68:bc:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:95:CE:0E:5A:48:93:F9:5A:74:2E:45:4B:35:4F:9D:6C:45:4B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PRSVzg5aSJP5WnQuRUs1T51sRUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
74:95:cb:b8:77:49:77:c5:12:aa:12:76:be:b4:55:c6:75:fc:
f3:a4:34:a9:30:e9:35:3e:7c:dd:27:bc:59:08:a6:cf:af:9e:
58:b9:d1:a4:97:3b:fd:2b:42:c8:17:69:40:f8:87:78:4c:36:
8e:93:59:52:dc:ca:ae:33:66:4c:85:a8:42:17:98:37:68:0d:
67:51:82:38:66:11:de:18:20:ab:d2:a8:5f:bd:34:75:6e:e5:
5d:22:01:ac:42:04:77:fa:24:04:a6:4b:13:13:9c:c4:23:66:
c1:19:9f:5a:0e:5b:e2:1f:ca:40:15:a7:e7:29:f4:aa:29:b0:
e6:18:77:d3:b0:8d:08:e1:87:16:b5:d5:0c:33:27:c3:35:af:
b0:55:c5:cb:e9:c7:af:a7:51:56:59:be:eb:a2:06:be:d8:ac:
d9:54:a5:41:fb:b8:95:f9:39:b8:4f:ba:4c:42:84:01:12:c2:
9c:a2:df:07:94:43:86:12:77:83:bc:eb:7f:71:f4:91:e1:30:
67:dd:51:9f:ae:ca:6a:66:2b:a7:56:6c:85:f2:4b:59:8a:c9:
ee:71:28:ef:0a:da:8f:7c:02:55:9b:b5:6e:b0:95:13:17:e7:
e2:0f:da:88:8f:1f:c3:e9:99:fd:7b:67:0d:9e:74:7e:bb:46:
e3:85:58:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:31:30 2025 by rpki-client