Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6VYtfhC8w1OJteRJfnJAGW2Vac.roa
File: T6VYtfhC8w1OJteRJfnJAGW2Vac.roa (raw, json)
Hash identifier: BuzYCME1UMZvlful5HtdWa+Fv5NJgJJ7QBCUHRJ21Qk=
Subject key identifier: 4F:A5:58:B5:F8:42:F3:0D:4E:26:D7:91:25:F9:C9:00:65:B6:55:A7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01956AB3C101F7EF92FAD430D946B418E038
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6VYtfhC8w1OJteRJfnJAGW2Vac.roa
Signing time: Thu 06 Mar 2025 09:05:20 +0000
ROA not before: Thu 06 Mar 2025 09:05:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:6ab3:3e0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:b3:c1:01:f7:ef:92:fa:d4:30:d9:46:b4:18:e0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 6 09:05:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa558b5f842f30d4e26d79125f9c90065b655a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:f0:fe:8b:62:c4:5f:6b:b2:86:20:7b:d4:
9b:ba:33:74:7e:a3:01:8b:2f:d8:4b:86:3b:41:cb:
00:f2:11:56:4e:18:bc:3e:9f:c2:27:0b:8b:62:56:
4f:8a:04:e3:cf:55:70:19:52:81:c2:8f:b2:5b:a7:
a4:a9:1f:80:f9:58:a3:32:01:85:c5:13:17:28:c6:
a2:07:1e:68:8a:33:e4:6f:c0:84:9a:b9:df:06:43:
6c:8a:60:38:19:6f:4b:e9:3d:18:fa:0a:85:70:5a:
ae:16:d0:da:3a:84:dc:74:38:3d:c0:56:d0:bf:15:
97:94:de:a2:c2:a0:77:57:43:a2:4f:6b:a0:c7:69:
39:a9:a6:cb:05:08:b0:d7:0d:af:e1:0c:ac:47:a1:
70:2a:c3:03:7c:a3:1d:5c:9f:15:39:6f:d1:9c:5c:
99:d4:86:ca:e4:8a:98:ef:33:9e:be:f3:01:7c:ab:
fe:b8:44:cf:b3:0b:16:11:21:61:c6:54:5e:25:99:
22:01:dd:93:b9:60:03:35:d3:01:e8:68:86:b6:b7:
0f:37:dd:36:64:f6:0b:4b:32:0b:df:8c:1c:07:62:
60:a4:b8:94:72:9d:c2:ce:31:f9:25:e6:d4:16:8e:
f3:f2:37:5c:0d:6e:90:be:c7:eb:94:c0:80:df:3a:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:58:B5:F8:42:F3:0D:4E:26:D7:91:25:F9:C9:00:65:B6:55:A7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T6VYtfhC8w1OJteRJfnJAGW2Vac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:6ab3:3e0b/128
Signature Algorithm: sha256WithRSAEncryption
4f:56:42:60:7b:dd:63:36:fa:7a:60:78:b4:cd:ac:e3:ec:32:
41:44:e3:f8:4a:93:81:6d:3a:f9:1a:0b:73:76:a2:ee:eb:91:
ce:90:b8:84:7e:89:6b:b6:99:05:cb:0d:5d:cf:f1:9f:ab:28:
80:ee:c4:3e:37:ea:74:cf:46:75:0b:02:fc:c5:05:c4:24:76:
ca:5e:a0:d9:e5:54:0f:81:a4:ba:ed:1e:4f:2a:57:76:bc:e1:
12:1b:11:2c:8a:92:89:fa:5f:a5:6a:b0:8a:94:9b:7d:27:4a:
77:3c:f4:7c:23:6f:58:10:f7:2b:00:af:12:10:69:92:84:5d:
66:bb:97:98:6a:7d:08:2d:9b:82:06:1b:c6:99:3f:7c:b0:99:
f7:71:d6:2a:63:ac:5b:51:a3:23:b2:9a:97:5b:1d:e0:06:98:
3b:b4:8c:5f:eb:9c:70:55:59:ef:a7:b8:49:f7:0a:af:c2:a8:
7f:d4:08:83:c6:f5:38:53:cb:ae:28:5b:84:ee:c7:e3:3b:23:
80:05:35:a6:39:97:ec:42:19:d9:5b:60:13:98:a4:91:17:cc:
e9:cd:d6:22:61:f2:ff:aa:63:f5:83:e1:05:4a:7f:b5:b3:7b:
4b:d1:3a:7b:42:d8:b9:8a:a8:7b:80:08:bd:13:5c:cd:31:62:
1e:9f:01:3b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZVqs8EB9++S+tQw2Ua0GOA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzA2MDkwNTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmE1NThiNWY4NDJmMzBkNGUyNmQ3OTEyNWY5YzkwMDY1YjY1NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09rw/otixF9rsoYge9SbujN0fqMB
iy/YS4Y7QcsA8hFWThi8Pp/CJwuLYlZPigTjz1VwGVKBwo+yW6ekqR+A+VijMgGF
xRMXKMaiBx5oijPkb8CEmrnfBkNsimA4GW9L6T0Y+gqFcFquFtDaOoTcdDg9wFbQ
vxWXlN6iwqB3V0OiT2ugx2k5qabLBQiw1w2v4QysR6FwKsMDfKMdXJ8VOW/RnFyZ
1IbK5IqY7zOevvMBfKv+uETPswsWESFhxlReJZkiAd2TuWADNdMB6GiGtrcPN902
ZPYLSzIL34wcB2JgpLiUcp3CzjH5JebUFo7z8jdcDW6QvsfrlMCA3zobgwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFE+lWLX4QvMNTibXkSX5yQBltlWnMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVDZWWXRmaEM4dzFPSnRlUkpmbkpBR1cyVmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVarM+CzANBgkqhkiG9w0BAQsFAAOCAQEAT1ZCYHvdYzb6emB4tM2s4+wy
QUTj+EqTgW06+RoLc3ai7uuRzpC4hH6Ja7aZBcsNXc/xn6sogO7EPjfqdM9GdQsC
/MUFxCR2yl6g2eVUD4Gkuu0eTypXdrzhEhsRLIqSifpfpWqwipSbfSdKdzz0fCNv
WBD3KwCvEhBpkoRdZruXmGp9CC2bggYbxpk/fLCZ93HWKmOsW1GjI7Kal1sd4AaY
O7SMX+uccFVZ76e4SfcKr8Kof9QIg8b1OFPLrihbhO7H4zsjgAU1pjmX7EIZ2Vtg
E5ikkRfM6c3WImHy/6pj9YPhBUp/tbN7S9E6e0LYuYqoe4AIvRNczTFiHp8BOw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:35 2025 by rpki-client