Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RCsRVtGHQ3-NCuBPfISWpobDS4s.roa
File: RCsRVtGHQ3-NCuBPfISWpobDS4s.roa (raw, json)
Hash identifier: Cp58zzD1xDMGL11F07tmm65jDH8uYnOHUCVS5rCJ+sc=
Subject key identifier: 44:2B:11:56:D1:87:43:7F:8D:0A:E0:4F:7C:84:96:A6:86:C3:4B:8B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194A05B0264F6158665E60C860ADA0B0B9B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RCsRVtGHQ3-NCuBPfISWpobDS4s.roa
Signing time: Sun 26 Jan 2025 02:05:06 +0000
ROA not before: Sun 26 Jan 2025 02:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:a05a:3c6d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a0:5b:02:64:f6:15:86:65:e6:0c:86:0a:da:0b:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 26 02:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=442b1156d187437f8d0ae04f7c8496a686c34b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:12:8d:01:fb:10:db:27:8c:5d:fa:7e:b4:
07:00:94:83:d2:00:23:ee:55:fe:b5:45:03:0a:30:
81:99:38:a6:06:6d:44:bd:7b:8b:81:05:95:c6:30:
b4:b4:18:de:76:eb:76:75:2a:6c:c7:ac:79:f5:f8:
27:bf:84:d3:f9:23:85:1d:12:34:1a:44:4b:86:18:
d2:90:64:bd:a4:b2:87:c6:3f:11:d8:61:11:7e:e5:
4c:fa:a1:a9:6c:23:07:9e:bf:c6:88:c8:d5:0c:35:
fa:de:e1:ce:ac:5c:96:52:c3:d4:40:28:7b:1b:e1:
36:16:c3:88:3b:3d:89:6c:d9:5f:ac:3e:bd:e8:2b:
a3:f9:d7:dd:09:0d:17:83:79:d9:6e:fd:0c:ee:96:
42:b7:7b:f2:29:1d:dc:24:25:8f:8a:57:16:9f:d0:
ec:f2:c0:8a:7c:69:69:f4:d7:21:26:bc:d9:b8:b7:
c1:ef:33:6c:b9:41:ff:07:5d:bf:4c:a4:2a:7b:17:
db:e3:4e:31:b9:a0:22:1e:71:93:76:39:89:1b:07:
11:17:54:64:a6:27:dc:05:cc:50:c6:a8:97:ba:9b:
75:2a:51:04:77:8a:23:c2:b0:63:bb:87:d2:f8:f2:
6c:83:e0:42:4f:43:84:a9:5a:fd:a7:f4:af:ee:3d:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:11:56:D1:87:43:7F:8D:0A:E0:4F:7C:84:96:A6:86:C3:4B:8B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RCsRVtGHQ3-NCuBPfISWpobDS4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:a05a:3c6d/128
Signature Algorithm: sha256WithRSAEncryption
4e:84:74:ef:64:86:ab:ed:13:de:c6:a7:17:01:81:1b:2b:b6:
ee:98:9e:d9:c4:0e:4e:27:eb:b8:96:fe:09:01:13:57:d5:b7:
c5:84:e6:ab:ec:16:a2:45:2c:c0:52:d1:d0:0b:5c:8d:66:df:
87:d4:f9:ae:2c:16:e1:49:bc:30:78:56:f5:88:a8:a8:56:cc:
e0:a4:b0:ae:1a:b9:8a:81:34:40:85:23:28:da:12:1b:62:a1:
b7:15:57:84:6a:83:3e:9c:1b:49:69:58:02:6b:72:a0:65:b7:
d7:67:7e:cf:f9:56:61:02:71:f3:8f:d5:62:69:2e:d4:18:0c:
b3:85:5a:c6:e1:34:87:31:61:ff:b5:b0:04:6e:64:d6:8e:9a:
3c:9d:bd:8e:8a:d6:a4:0a:dd:82:92:8b:0a:f1:bf:2d:55:53:
2f:7e:25:be:93:01:25:a0:6b:a0:f4:b0:ba:d0:8d:7b:c1:82:
b8:d7:29:3e:61:e6:68:6a:06:9f:08:97:79:ed:2a:95:1f:bb:
e8:8d:51:50:08:bb:c1:e2:ce:7d:9b:57:2c:92:9b:32:31:44:
09:d3:b2:ce:9f:62:a4:33:6c:a8:21:a1:9d:0f:38:c8:e5:20:
6f:64:79:e0:66:14:1a:dc:51:41:45:a3:05:2b:3c:be:00:94:
40:69:13:47
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZSgWwJk9hWGZeYMhgraCwubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTI2MDIwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDJiMTE1NmQxODc0MzdmOGQwYWUwNGY3Yzg0OTZhNjg2YzM0YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou4SjQH7ENsnjF36frQHAJSD0gAj
7lX+tUUDCjCBmTimBm1EvXuLgQWVxjC0tBjedut2dSpsx6x59fgnv4TT+SOFHRI0
GkRLhhjSkGS9pLKHxj8R2GERfuVM+qGpbCMHnr/GiMjVDDX63uHOrFyWUsPUQCh7
G+E2FsOIOz2JbNlfrD696Cuj+dfdCQ0Xg3nZbv0M7pZCt3vyKR3cJCWPilcWn9Ds
8sCKfGlp9NchJrzZuLfB7zNsuUH/B12/TKQqexfb404xuaAiHnGTdjmJGwcRF1Rk
pifcBcxQxqiXupt1KlEEd4ojwrBju4fS+PJsg+BCT0OEqVr9p/Sv7j2znQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEQrEVbRh0N/jQrgT3yElqaGw0uLMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvUkNzUlZ0R0hRMy1OQ3VCUGZJU1dwb2JEUzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGUoFo8bTANBgkqhkiG9w0BAQsFAAOCAQEAToR072SGq+0T3sanFwGBGyu2
7pie2cQOTifruJb+CQETV9W3xYTmq+wWokUswFLR0AtcjWbfh9T5riwW4Um8MHhW
9YioqFbM4KSwrhq5ioE0QIUjKNoSG2KhtxVXhGqDPpwbSWlYAmtyoGW312d+z/lW
YQJx84/VYmku1BgMs4VaxuE0hzFh/7WwBG5k1o6aPJ29jorWpArdgpKLCvG/LVVT
L34lvpMBJaBroPSwutCNe8GCuNcpPmHmaGoGnwiXee0qlR+76I1RUAi7weLOfZtX
LJKbMjFECdOyzp9ipDNsqCGhnQ84yOUgb2R54GYUGtxRQUWjBSs8vgCUQGkTRw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:57:57 2025 by rpki-client