Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6xZ8p3YlX1kolVSmuwo7kvodZA.roa
File: R6xZ8p3YlX1kolVSmuwo7kvodZA.roa (raw, json)
Hash identifier: EgD7FGWiIHFQgT8zjk8IBdEONDU/9Z2Wh7gNZx1OYIw=
Subject key identifier: 47:AC:59:F2:9D:D8:95:7D:64:A2:55:52:9A:EC:28:EE:4B:E8:75:90
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190EB7F4470428BCDB2ECE45F1124B07C83
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6xZ8p3YlX1kolVSmuwo7kvodZA.roa
Signing time: Thu 25 Jul 2024 20:05:04 +0000
ROA not before: Thu 25 Jul 2024 20:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:eb7e:a730/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:eb:7f:44:70:42:8b:cd:b2:ec:e4:5f:11:24:b0:7c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 25 20:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ac59f29dd8957d64a255529aec28ee4be87590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:69:e7:15:81:17:bf:ea:21:cd:d3:6f:a9:
7a:de:2e:53:73:10:09:79:32:f5:c6:05:51:83:17:
0f:53:ae:d1:34:c8:25:0d:45:f8:3b:da:aa:73:6b:
bc:dc:95:65:36:7d:fe:aa:dd:54:f4:f4:48:d6:82:
44:36:17:c3:91:90:d5:cb:51:ad:98:d3:88:77:f6:
9d:f9:89:a4:03:f2:0a:ef:51:58:39:9d:fe:0e:6c:
6d:c7:ac:51:7e:77:b6:7a:eb:70:ce:de:7e:cd:ea:
e8:4d:e2:1f:a3:82:89:56:e5:8f:76:21:0b:8e:81:
32:ff:a7:f9:1c:c0:59:48:33:06:ac:72:bc:c2:5e:
5a:33:f8:7e:58:ac:bc:3c:d3:8c:ff:01:11:b3:9f:
cd:25:82:87:ca:9b:9d:5a:4c:c8:67:19:53:58:8f:
db:41:04:d0:75:63:78:d3:d0:e8:03:a1:7e:5a:c2:
c3:39:b9:fc:b2:45:db:9d:76:73:28:bc:7d:ec:a1:
10:85:84:e4:01:84:b2:48:ae:90:75:f1:c1:9e:9b:
fb:ef:4c:23:93:ed:b2:7b:fc:8a:de:c4:91:72:58:
f1:6e:50:ba:b9:34:bf:bf:8f:4d:56:49:84:ab:52:
c8:1f:9c:fe:e2:ba:d0:98:fe:eb:31:fe:2c:eb:7e:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:59:F2:9D:D8:95:7D:64:A2:55:52:9A:EC:28:EE:4B:E8:75:90
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/R6xZ8p3YlX1kolVSmuwo7kvodZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:eb7e:a730/128
Signature Algorithm: sha256WithRSAEncryption
40:9a:5f:07:77:f2:3b:b9:ad:40:62:89:87:cc:e6:8d:65:cd:
27:cc:e3:2c:b9:7f:8b:6a:35:cc:86:33:53:c7:fa:9f:f9:9b:
dc:a0:e9:14:7c:ce:b3:fe:43:8e:08:23:d3:2e:8e:db:30:db:
d0:e8:a8:b4:f7:6f:97:a7:9c:4c:9f:cf:34:17:4c:ba:b9:2d:
1c:37:8e:26:22:cc:b3:4c:45:3f:ee:ba:0f:10:f4:2a:a0:cc:
4f:e9:aa:60:1d:ed:b7:df:a2:04:fd:23:6d:30:ee:17:55:d8:
b1:4a:b3:33:aa:95:1a:c6:d5:b4:c8:c9:56:ba:96:9f:09:32:
85:41:5f:3d:40:bb:67:e5:7f:2d:b7:0e:6f:cc:11:b3:76:e6:
de:a2:52:6e:c9:db:30:d4:67:78:d5:95:4e:49:62:99:24:cb:
0c:6d:fd:2c:ba:1f:52:a5:d8:ad:16:6e:f4:0f:d0:8a:63:c9:
2e:33:90:f8:cd:53:c0:8c:85:d4:60:fb:cc:1b:3b:88:f1:77:
82:cd:c6:b1:7d:eb:85:12:da:f5:a7:19:2a:ec:85:08:72:e5:
0c:09:91:57:c3:d9:f6:ae:be:ed:63:76:cc:93:fb:96:00:18:
82:60:a8:da:de:80:9c:e4:cc:96:7d:6a:7e:34:a5:71:19:28:
3e:80:ff:52
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZDrf0RwQovNsuzkXxEksHyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzI1MjAwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2FjNTlmMjlkZDg5NTdkNjRhMjU1NTI5YWVjMjhlZTRiZTg3NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCBp5xWBF7/qIc3Tb6l63i5TcxAJ
eTL1xgVRgxcPU67RNMglDUX4O9qqc2u83JVlNn3+qt1U9PRI1oJENhfDkZDVy1Gt
mNOId/ad+YmkA/IK71FYOZ3+Dmxtx6xRfne2eutwzt5+zeroTeIfo4KJVuWPdiEL
joEy/6f5HMBZSDMGrHK8wl5aM/h+WKy8PNOM/wERs5/NJYKHypudWkzIZxlTWI/b
QQTQdWN409DoA6F+WsLDObn8skXbnXZzKLx97KEQhYTkAYSySK6QdfHBnpv770wj
k+2ye/yK3sSRcljxblC6uTS/v49NVkmEq1LIH5z+4rrQmP7rMf4s637b3wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEesWfKd2JV9ZKJVUprsKO5L6HWQMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvUjZ4WjhwM1lsWDFrb2xWU211d283a3ZvZFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ636nMDANBgkqhkiG9w0BAQsFAAOCAQEAQJpfB3fyO7mtQGKJh8zmjWXN
J8zjLLl/i2o1zIYzU8f6n/mb3KDpFHzOs/5Djggj0y6O2zDb0OiotPdvl6ecTJ/P
NBdMurktHDeOJiLMs0xFP+66DxD0KqDMT+mqYB3tt9+iBP0jbTDuF1XYsUqzM6qV
GsbVtMjJVrqWnwkyhUFfPUC7Z+V/LbcOb8wRs3bm3qJSbsnbMNRneNWVTklimSTL
DG39LLofUqXYrRZu9A/QimPJLjOQ+M1TwIyF1GD7zBs7iPF3gs3GsX3rhRLa9acZ
KuyFCHLlDAmRV8PZ9q6+7WN2zJP7lgAYgmCo2t6AnOTMln1qfjSlcRkoPoD/Ug==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:27 2025 by rpki-client