Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQC82O3f6wc2z2Oetp5pOMGDJvs.roa
File: RQC82O3f6wc2z2Oetp5pOMGDJvs.roa (raw, json)
Hash identifier: nPZeEoAfJLg5oufMrnDWyzcMZTk0kYONdJ7Qx2oS7u8=
Subject key identifier: 45:00:BC:D8:ED:DF:EB:07:36:CF:63:9E:B6:9E:69:38:C1:83:26:FB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195308D039FBF368CFA15897185B2309BF0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQC82O3f6wc2z2Oetp5pOMGDJvs.roa
Signing time: Sun 23 Feb 2025 02:05:02 +0000
ROA not before: Sun 23 Feb 2025 02:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:308c:761b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:30:8d:03:9f:bf:36:8c:fa:15:89:71:85:b2:30:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 23 02:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4500bcd8eddfeb0736cf639eb69e6938c18326fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:61:de:81:87:d4:47:08:76:09:33:1f:ba:
be:f6:03:a9:f9:fb:73:f8:9f:c1:68:99:14:d3:43:
5f:1f:da:1a:80:00:aa:13:22:a9:b2:e6:f4:8a:07:
1c:38:9d:2a:0d:96:1c:03:f7:c2:49:74:b0:2f:5e:
0c:90:ff:86:f7:ac:d6:4a:3f:23:ef:d9:8c:55:33:
12:f6:fe:3c:10:c8:e4:52:bc:61:a6:b6:fa:1e:24:
88:ec:5f:2b:d3:a9:80:de:97:3d:72:7d:c7:e8:ac:
31:98:6c:ed:9e:ab:47:9b:80:12:84:c2:15:f8:be:
8c:ef:45:aa:82:74:61:50:cb:92:4c:e6:0c:a9:77:
34:a9:18:c3:84:d3:41:c6:08:d1:40:e5:4e:86:e0:
d0:6a:f6:69:15:77:c1:01:c2:df:f0:29:82:aa:49:
00:8a:fd:64:7c:b3:07:dc:b9:c1:99:6a:e0:4e:16:
e9:90:c7:cd:d2:5d:c6:cd:a7:05:78:b7:f0:91:4d:
9f:6e:12:d4:7b:92:82:e4:c0:c3:56:9d:8e:bf:87:
ed:ef:cb:fd:d1:ff:59:e5:80:ee:4f:15:9c:40:c9:
26:98:8e:71:43:86:ae:f1:d1:ce:8d:08:65:d9:5f:
7a:a8:3d:c6:82:79:4e:94:c2:fb:c9:35:81:e2:be:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:BC:D8:ED:DF:EB:07:36:CF:63:9E:B6:9E:69:38:C1:83:26:FB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/RQC82O3f6wc2z2Oetp5pOMGDJvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:308c:761b/128
Signature Algorithm: sha256WithRSAEncryption
44:f0:fd:fd:67:39:20:43:12:ec:76:18:c6:e2:f6:f1:ce:77:
5e:2c:fc:cc:c8:12:eb:03:7c:b3:5c:c3:41:f8:4c:b2:52:03:
b3:ed:01:79:4c:5a:f5:14:15:c3:66:09:07:67:bf:00:13:7f:
0e:be:ce:95:e3:c7:d4:77:d5:81:72:93:6e:42:2d:c6:9f:be:
ce:c3:a5:cf:88:5b:77:de:78:07:96:50:08:cc:99:6a:8a:52:
dd:3e:31:81:3d:35:7e:7b:6b:a8:a9:78:c9:26:d9:c8:e8:0b:
c4:b0:cc:12:ad:9c:13:80:32:80:a4:50:14:95:40:99:01:48:
10:fe:5c:b6:c4:4a:c2:d2:af:0e:70:a8:b3:73:43:99:66:2a:
e2:93:ee:f5:bb:51:93:d2:12:68:8f:1c:d1:6d:22:7c:41:21:
c4:e0:5f:c9:fe:6e:b9:38:e2:c4:de:c6:5d:40:69:01:32:ac:
59:ad:90:87:13:72:91:13:52:2c:9d:7c:87:11:01:0a:5e:e4:
ab:15:0e:4f:91:cc:c0:61:87:0a:37:8a:4c:12:8c:5a:26:a8:
c4:6e:a7:7f:9a:48:3e:86:1a:88:ef:73:fa:43:94:a0:da:87:
15:cb:a5:f4:a0:21:a2:62:c2:d9:ce:f7:9b:66:0c:58:28:84:
52:ca:c6:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:09 2025 by rpki-client