Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ScVGuXzypTe5Se8haoj6QONwKlQ.roa
File: ScVGuXzypTe5Se8haoj6QONwKlQ.roa (raw, json)
Hash identifier: pj0GCSDZzWDFPn6gqMLAGaLjVB0xG9CzpaJennZi8fA=
Subject key identifier: 49:C5:46:B9:7C:F2:A5:37:B9:49:EF:21:6A:88:FA:40:E3:70:2A:54
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195523D8BA39331EA75201266307915CD0D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ScVGuXzypTe5Se8haoj6QONwKlQ.roa
Signing time: Sat 01 Mar 2025 15:05:19 +0000
ROA not before: Sat 01 Mar 2025 15:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:523c:bb0a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:52:3d:8b:a3:93:31:ea:75:20:12:66:30:79:15:cd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 1 15:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c546b97cf2a537b949ef216a88fa40e3702a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:07:95:06:f2:ec:6d:62:13:3b:e5:4d:e2:
3b:bf:a3:b2:e2:22:f0:4d:cb:28:b8:e9:a8:a8:14:
3e:57:a8:32:dc:ae:c2:46:bc:e0:8e:5a:05:f0:77:
35:00:86:39:af:41:7c:5c:04:3d:36:71:17:4f:03:
64:62:c6:6e:42:68:57:ef:d6:ba:87:4d:95:e1:c4:
fd:d2:c9:41:39:0f:c3:c4:c6:de:77:84:18:a0:84:
fa:b7:e0:5e:dd:4e:50:36:97:1f:83:58:91:90:b6:
03:21:63:12:f5:d0:9d:69:8b:d8:b1:a6:ae:58:26:
54:9e:e7:f9:07:87:28:40:59:51:6f:63:7d:e6:1d:
d1:4d:23:63:04:42:cd:5e:77:a2:36:33:07:fe:46:
38:f4:87:ba:2b:a8:eb:ff:95:1f:0e:95:02:75:f1:
99:fa:7c:99:6f:f7:32:4a:45:a6:0d:2d:2c:37:bb:
1d:bd:d4:95:ec:f2:30:1c:f8:de:bb:b9:a6:e2:4a:
2d:5c:4d:d7:3c:a5:01:73:5b:64:f9:92:f9:e2:3e:
93:ec:a6:46:63:29:04:99:c0:f8:47:b2:fe:f6:91:
60:e2:37:a4:2f:c5:2c:21:eb:2a:ed:d7:c0:d7:7a:
0b:4f:c3:26:4e:18:09:e3:19:90:f6:e2:f4:9c:0a:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:46:B9:7C:F2:A5:37:B9:49:EF:21:6A:88:FA:40:E3:70:2A:54
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ScVGuXzypTe5Se8haoj6QONwKlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:523c:bb0a/128
Signature Algorithm: sha256WithRSAEncryption
91:54:8c:2b:56:7b:a9:35:d5:ec:18:8d:95:4b:eb:39:82:80:
e3:66:bb:eb:c9:4c:e5:31:d1:60:4c:82:ef:89:10:72:25:8d:
23:79:c2:e1:67:59:0c:6e:7c:42:33:24:50:36:96:6a:17:c7:
81:11:74:b6:52:95:42:20:9f:8a:0f:74:32:81:f4:3d:62:a0:
a5:5e:9e:5b:eb:a8:8a:a2:fc:54:17:5a:e9:6c:53:8e:2a:0c:
e6:79:1f:c5:98:6d:37:58:ad:d3:1f:17:0a:b7:8c:a6:54:b0:
d1:52:9e:ea:e9:ae:de:04:24:80:e0:7f:f4:b1:79:71:f4:72:
95:49:3e:cb:16:86:ad:de:c1:ab:c8:5b:b0:ec:ea:25:70:a8:
36:5f:f0:e4:a8:9f:c0:09:7c:8c:80:4f:35:cf:31:bf:ce:1b:
c0:b1:74:90:8a:6f:97:ae:ab:24:60:3d:db:3b:c3:01:11:13:
e6:e3:9b:91:07:76:9c:6a:92:ab:fd:53:44:64:89:58:a1:41:
9a:8f:7a:e5:bf:96:53:9d:d4:9a:eb:a5:e5:d4:1a:4b:22:55:
11:a7:dd:c7:f8:11:91:bb:f4:9a:5f:d8:f2:05:59:20:a3:28:
1d:e6:7a:6f:81:45:d1:06:4c:ea:bc:1a:57:fe:57:50:26:a8:
8c:e9:f6:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:49:28 2025 by rpki-client