Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rp5Y0Z2DUXoHOcNE1FJQd_L_-z8.roa
File: Rp5Y0Z2DUXoHOcNE1FJQd_L_-z8.roa (raw, json)
Hash identifier: WMpMvRnngBR1GTe2fcBkjQKchBoKmqjfhxk79BCXoLg=
Subject key identifier: 46:9E:58:D1:9D:83:51:7A:07:39:C3:44:D4:52:50:77:F2:FF:FB:3F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A283034D1FB6F31B5329F4CD60B34733
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rp5Y0Z2DUXoHOcNE1FJQd_L_-z8.roa
Signing time: Mon 17 Mar 2025 05:10:49 +0000
ROA not before: Mon 17 Mar 2025 05:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:83:03:4d:1f:b6:f3:1b:53:29:f4:cd:60:b3:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 05:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=469e58d19d83517a0739c344d4525077f2fffb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:cd:b2:5e:4d:86:22:13:b3:e7:60:73:02:
78:e2:a2:14:ec:42:02:9c:e5:c1:5a:f0:fb:cd:4a:
d4:f4:2a:51:9a:a8:62:1c:c0:69:68:c9:2d:a6:64:
f7:bc:d1:05:06:9c:59:70:d2:2c:01:b9:b5:11:e6:
36:fd:d6:f7:36:b5:9f:25:27:23:d8:cf:85:4e:3c:
0f:8d:8b:a4:26:c4:9c:07:e7:8c:d4:25:4f:de:ec:
c8:7d:e1:2f:af:1d:46:db:2c:52:bb:20:09:2c:e0:
0c:1e:fc:0b:16:a2:ce:db:1b:ed:84:74:72:2f:5e:
a0:2a:b4:09:e3:3b:9e:15:95:20:47:c4:65:e3:1c:
d7:4a:96:e7:e6:3a:9f:35:04:ee:60:fc:06:cf:28:
a7:62:85:99:e9:aa:19:22:1d:f8:78:55:41:df:53:
ba:29:f4:cb:c7:38:e0:d7:29:01:97:91:c5:27:c9:
51:6c:15:a0:cf:dc:e6:e7:82:a4:a9:8d:0b:9b:91:
05:c8:c9:bf:51:72:d1:5a:5f:2b:53:11:43:af:c5:
7d:6e:0f:f1:cc:27:a3:01:bc:b7:c9:d6:d6:08:d4:
b8:69:df:a8:69:62:32:69:9c:92:a7:98:15:5b:fa:
c0:69:7b:7b:7a:65:02:33:86:d6:3a:b3:fa:19:4b:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9E:58:D1:9D:83:51:7A:07:39:C3:44:D4:52:50:77:F2:FF:FB:3F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Rp5Y0Z2DUXoHOcNE1FJQd_L_-z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
22:4b:eb:0e:99:c6:41:80:e9:40:91:8a:84:dd:67:0e:34:8f:
16:c6:a2:3b:be:f4:03:4e:de:5c:e4:35:f7:fc:22:a3:59:8f:
4e:08:e9:c5:e4:b7:05:bc:59:fa:a0:e8:5d:3c:e1:57:80:82:
7a:84:e1:0d:b0:7c:7c:6a:f6:32:17:7d:eb:c8:ca:de:4c:5c:
c3:49:f0:e2:ec:21:32:62:c2:d4:da:29:13:ba:93:66:fa:0c:
81:10:40:d9:b2:86:5d:8b:8a:11:7f:25:76:a6:17:79:cf:27:
c0:0d:86:b2:6e:98:65:5a:d3:bf:1a:f6:fb:d0:09:47:f9:10:
15:f7:ce:43:82:7e:1c:d9:a5:08:20:66:3d:0e:c4:17:fe:14:
75:55:a7:6f:26:e8:9a:84:ce:2b:9d:b1:cf:ca:9e:30:8e:fe:
6c:5a:99:f9:71:30:96:d4:99:18:24:fd:ac:01:5d:24:9b:c3:
b6:5a:aa:f6:3d:af:3c:a2:ff:b3:50:9c:5a:08:38:b5:59:5a:
f4:4c:6d:ff:6f:c5:c8:ce:b1:a3:9e:c8:f1:94:91:75:86:d6:
d7:a2:a9:49:54:74:a0:89:da:27:c8:42:8e:3b:e1:e5:cf:fb:
6f:69:38:18:b9:70:9e:f4:b7:07:18:c1:da:a7:17:04:22:96:
c7:31:b1:27
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWigwNNH7bzG1Mp9M1gs0czMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE3MDUxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjllNThkMTlkODM1MTdhMDczOWMzNDRkNDUyNTA3N2YyZmZmYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx/Nsl5NhiITs+dgcwJ44qIU7EIC
nOXBWvD7zUrU9CpRmqhiHMBpaMktpmT3vNEFBpxZcNIsAbm1EeY2/db3NrWfJScj
2M+FTjwPjYukJsScB+eM1CVP3uzIfeEvrx1G2yxSuyAJLOAMHvwLFqLO2xvthHRy
L16gKrQJ4zueFZUgR8Rl4xzXSpbn5jqfNQTuYPwGzyinYoWZ6aoZIh34eFVB31O6
KfTLxzjg1ykBl5HFJ8lRbBWgz9zm54KkqY0Lm5EFyMm/UXLRWl8rUxFDr8V9bg/x
zCejAby3ydbWCNS4ad+oaWIyaZySp5gVW/rAaXt7emUCM4bWOrP6GUvFIwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFEaeWNGdg1F6BznDRNRSUHfy//s/MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvUnA1WTBaMkRVWG9IT2NORTFGSlFkX0xfLXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAIkvrDpnGQYDpQJGKhN1nDjSP
FsaiO770A07eXOQ19/wio1mPTgjpxeS3BbxZ+qDoXTzhV4CCeoThDbB8fGr2Mhd9
68jK3kxcw0nw4uwhMmLC1NopE7qTZvoMgRBA2bKGXYuKEX8ldqYXec8nwA2Gsm6Y
ZVrTvxr2+9AJR/kQFffOQ4J+HNmlCCBmPQ7EF/4UdVWnbybomoTOK52xz8qeMI7+
bFqZ+XEwltSZGCT9rAFdJJvDtlqq9j2vPKL/s1CcWgg4tVla9Ext/2/FyM6xo57I
8ZSRdYbW16KpSVR0oInaJ8hCjjvh5c/7b2k4GLlwnvS3BxjB2qcXBCKWxzGxJw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:25:35 2025 by rpki-client