Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PeenGPlLCw0ikqq0w2l-tRsLwjo.roa
File: PeenGPlLCw0ikqq0w2l-tRsLwjo.roa (raw, json)
Hash identifier: 99pfWMIifnxcCMXfgxymlKDGDxjMaANClKwvXe7lIfY=
Subject key identifier: 3D:E7:A7:18:F9:4B:0B:0D:22:92:AA:B4:C3:69:7E:B5:1B:0B:C2:3A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958EBFCF80BB7E726372D23952599DAC15
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PeenGPlLCw0ikqq0w2l-tRsLwjo.roa
Signing time: Thu 13 Mar 2025 09:04:49 +0000
ROA not before: Thu 13 Mar 2025 09:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:8ebf:83d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bf:cf:80:bb:7e:72:63:72:d2:39:52:59:9d:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 09:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de7a718f94b0b0d2292aab4c3697eb51b0bc23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e1:06:4d:3a:6e:00:cc:4e:10:64:7a:ae:9b:
7d:41:e9:2e:ec:57:f7:e2:3c:b9:6a:e0:3e:54:cb:
9f:e0:ca:4b:71:cb:52:b0:97:38:b2:0f:54:bb:29:
88:97:5f:94:0c:62:5e:63:01:f5:66:f3:db:89:2d:
b5:d8:a0:91:3f:37:86:5c:67:ba:4a:49:6b:29:4c:
6d:03:e4:e2:e4:e3:c2:72:b2:97:8e:4f:ea:ab:1a:
70:b5:35:8e:da:ea:7e:0e:03:17:c0:aa:a2:bc:57:
3b:2e:c7:dc:cc:02:3e:9d:6f:ad:e2:0b:16:30:20:
8e:44:e1:9d:e6:c8:bd:35:25:30:f6:84:d4:7d:63:
90:71:53:e3:db:b6:8d:59:9b:59:e3:b7:8e:f6:58:
a9:8c:cc:e0:ee:05:bc:93:8b:2f:a2:80:e9:cb:e5:
04:1e:23:31:bd:bb:ba:93:05:f5:09:1b:a0:18:b2:
28:41:ba:2a:cc:6a:54:79:6c:7b:b6:91:62:56:2c:
cd:2e:8b:73:fb:04:12:c8:51:c2:c6:20:91:b5:6c:
7d:af:19:3d:3c:bb:ed:df:1d:9f:95:70:9a:f9:f9:
33:19:59:2d:42:05:8a:d7:bc:bd:ae:46:11:29:13:
17:80:5a:7a:9f:a0:1d:cc:d3:e1:09:51:d9:da:e6:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:A7:18:F9:4B:0B:0D:22:92:AA:B4:C3:69:7E:B5:1B:0B:C2:3A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/PeenGPlLCw0ikqq0w2l-tRsLwjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:8ebf:83d8/128
Signature Algorithm: sha256WithRSAEncryption
7a:62:85:2f:97:d1:04:9b:21:fa:03:6f:55:68:71:ed:a8:bf:
c2:80:29:4d:23:90:d8:5f:4c:40:05:61:eb:ff:2c:49:78:50:
76:50:5e:ab:e4:82:66:0d:ab:61:6f:1a:44:7c:8c:20:87:db:
28:70:79:85:dd:49:5e:93:79:85:96:07:ef:be:1d:d6:2c:6a:
6f:73:59:ea:0c:fb:bb:f2:8f:0d:a1:48:e3:e4:6c:dc:4b:26:
91:d9:e8:0c:05:fe:ab:65:27:ed:60:2d:b6:78:0b:ff:4d:f2:
33:87:de:6a:53:7e:b2:58:a1:c9:8d:47:73:7a:e8:cc:47:3b:
bd:79:1c:13:08:18:f2:07:fd:53:76:e3:85:ed:90:ba:b4:a5:
19:5e:5d:8c:0f:02:57:f8:e6:0c:71:ec:4d:c5:cd:e8:6e:92:
b4:e5:b8:6e:54:83:20:95:07:b4:c0:10:82:a3:84:46:fc:77:
69:d1:60:6e:c3:fc:85:6c:fc:c4:ce:8b:fd:99:91:d9:59:58:
cd:bd:b1:15:12:04:e1:5f:51:09:c8:79:37:69:1c:f2:ed:fd:
f8:fc:e8:78:0d:85:74:8b:9f:1d:2f:74:74:9a:c6:68:d3:e0:
26:62:d7:23:36:25:17:b8:23:9f:d7:84:3c:f7:1d:20:c2:77:
0f:33:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:19:03 2025 by rpki-client