Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sm34Orw9tu8zBp5dHzLZf_jPCQg.roa
File: Sm34Orw9tu8zBp5dHzLZf_jPCQg.roa (raw, json)
Hash identifier: PUGXdldaJzAvkIMuWPr2pGX/zhDA91c85OsYEvUp3ls=
Subject key identifier: 4A:6D:F8:3A:BC:3D:B6:EF:33:06:9E:5D:1F:32:D9:7F:F8:CF:09:08
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01947B423F57327C5EE2EAA88684136C2E9B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sm34Orw9tu8zBp5dHzLZf_jPCQg.roa
Signing time: Sat 18 Jan 2025 21:12:06 +0000
ROA not before: Sat 18 Jan 2025 21:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:42:3f:57:32:7c:5e:e2:ea:a8:86:84:13:6c:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 18 21:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a6df83abc3db6ef33069e5d1f32d97ff8cf0908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:e1:7f:03:ce:91:dd:52:5a:b7:86:d0:18:
5b:1c:de:5b:1b:eb:99:f3:ac:44:3d:da:32:06:2c:
e6:89:04:ec:53:bc:c3:d4:6f:8e:3c:e0:61:c3:85:
20:75:65:a1:d9:df:41:19:dc:dd:3c:75:de:0d:ca:
08:8e:17:a2:61:a7:22:9c:96:4d:79:79:18:69:fc:
cf:41:cc:70:a1:e7:4d:ee:9e:c8:62:bf:e9:3e:79:
ab:15:77:95:08:f4:b2:cc:88:77:d3:d1:a3:5e:4c:
9b:33:3c:38:bf:b1:f4:5b:c9:d3:f6:ac:92:d0:cb:
73:fe:a1:d5:be:ef:df:33:97:e7:e7:c3:3e:a1:cc:
91:b8:9a:ee:40:8f:8f:8b:51:41:88:b4:e3:57:10:
ac:76:ad:2b:72:ac:00:b8:5d:fb:ba:c7:80:1e:83:
2a:7e:39:d7:b5:99:10:8b:7d:ef:76:41:2f:0d:3c:
23:bf:57:a3:d5:17:a7:b2:21:d3:0d:94:8c:4e:d3:
07:cd:a1:cb:89:a5:5e:a3:57:ce:0f:72:c6:e2:cd:
d6:0a:ae:f2:b0:b7:82:dc:01:09:e6:b6:d2:a2:f2:
c2:97:1c:80:1c:fb:72:de:01:6d:53:1e:9d:39:d4:
49:96:f6:d9:39:56:ad:f8:f7:f8:ba:30:e2:88:e5:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:F8:3A:BC:3D:B6:EF:33:06:9E:5D:1F:32:D9:7F:F8:CF:09:08
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Sm34Orw9tu8zBp5dHzLZf_jPCQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
6d:dc:d9:23:d8:8a:c4:37:fb:8b:3c:cd:cc:5a:96:ab:da:71:
77:bc:c1:6a:44:aa:8b:c8:14:c4:96:a7:9f:c3:a5:cc:f4:44:
25:52:de:66:be:55:4e:67:9f:f8:21:9c:fb:58:45:77:dd:46:
f4:21:45:18:70:c9:25:84:8c:63:28:10:7f:0d:10:4d:54:2f:
98:da:d9:ae:8f:12:5d:e9:d6:9c:84:b2:95:5d:83:d7:e3:7e:
60:c7:83:3e:ca:81:96:81:1e:eb:d8:08:97:2e:60:1d:70:7d:
47:8e:90:27:e8:ce:cd:16:c5:07:db:00:dd:dc:87:9d:72:c1:
f0:7b:3f:b5:db:9e:9b:aa:54:6c:9f:cd:86:53:57:64:b4:89:
f9:ad:e3:9e:1f:a9:48:9c:52:76:87:6f:bd:ee:ce:e2:1d:cd:
a6:c6:c1:f0:8d:ec:9f:60:5f:66:ac:67:22:ab:d4:26:ad:31:
9b:0f:97:14:01:79:d5:54:ee:e9:a0:88:a2:be:6a:0a:98:1f:
99:ac:d8:ff:2d:6b:d6:43:c0:1a:e4:ec:a2:1d:b3:f3:ab:46:
0c:ab:91:5b:82:1d:7e:57:0e:f0:b6:43:ac:ae:5e:f7:b4:c9:
ed:7f:47:05:4f:b7:03:c7:fc:8a:03:85:29:4d:e0:83:05:d4:
8f:a9:cb:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:07 2025 by rpki-client