Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7y_yjJDtJO8ndS7K5Mp1aulDHY.roa
File: T7y_yjJDtJO8ndS7K5Mp1aulDHY.roa (raw, json)
Hash identifier: VRbi274kfruV9EvbisyfZjioLDOqphovragCkzMz6qM=
Subject key identifier: 4F:BC:BF:CA:32:43:B4:93:BC:9D:D4:BB:2B:93:29:D5:AB:A5:0C:76
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019454D8A43CE462FF5C318AABE910699943
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7y_yjJDtJO8ndS7K5Mp1aulDHY.roa
Signing time: Sat 11 Jan 2025 10:11:11 +0000
ROA not before: Sat 11 Jan 2025 10:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:d8:a4:3c:e4:62:ff:5c:31:8a:ab:e9:10:69:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 10:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fbcbfca3243b493bc9dd4bb2b9329d5aba50c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:70:cb:5b:2c:26:fc:b1:3f:23:10:67:4e:
6f:66:6a:90:ca:1e:bd:3f:3d:64:8f:87:b3:52:f0:
fd:6d:b5:57:11:26:26:5b:98:56:d1:09:80:2c:ca:
75:be:2f:2a:12:cf:77:f4:97:03:47:d8:30:1b:db:
0d:b5:e1:7e:fc:ab:39:f8:3d:42:28:d4:25:ea:be:
0b:54:e7:db:98:24:29:3f:ff:45:95:70:54:72:7b:
b3:7b:98:0c:30:0b:2f:29:78:87:3c:8d:dc:8c:94:
f1:e3:51:e9:fa:27:a6:71:97:56:2e:05:45:70:54:
d6:c4:c6:bc:6b:e8:37:49:2c:6e:24:11:5e:48:bb:
df:5c:f8:93:b0:ba:1c:76:45:8b:cc:85:04:ec:5b:
bb:11:a9:11:15:0f:9e:f5:65:fc:60:ca:29:7e:77:
10:4d:ba:93:de:64:9b:cf:d5:91:e0:a4:a7:fd:d7:
01:b2:2d:3e:51:1d:18:1f:bf:df:20:99:5a:eb:ab:
65:e6:db:df:a9:67:33:b8:f5:06:90:5f:6a:17:d9:
96:83:f4:21:91:f9:a7:61:da:3c:11:c0:f8:23:03:
21:1f:7e:dc:6f:77:7a:8e:b6:3b:33:b8:35:a5:33:
c2:a7:b2:84:9c:62:02:c8:7b:d1:05:bf:7c:97:52:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:BF:CA:32:43:B4:93:BC:9D:D4:BB:2B:93:29:D5:AB:A5:0C:76
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/T7y_yjJDtJO8ndS7K5Mp1aulDHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
17:3d:47:f8:84:6b:fc:5a:d9:ff:67:ff:97:c9:25:5f:20:21:
47:30:fe:1d:6b:6a:68:76:22:aa:3a:5c:ed:f2:72:c7:6c:32:
2b:79:fd:12:e6:3a:76:fd:df:f8:7d:4f:3c:0f:1a:e2:85:5b:
c0:84:ce:e5:1f:c6:a3:42:6a:0c:dd:15:32:d7:df:02:0c:7d:
de:ad:52:c9:a5:99:20:3b:d3:94:57:fc:dc:11:5b:79:77:63:
18:6b:69:fa:d6:a5:0b:93:d4:98:15:05:39:a2:44:6d:88:4b:
f5:48:aa:32:64:44:4a:79:28:03:ad:47:fe:ed:66:2e:5b:a9:
2d:38:07:55:d9:7e:ba:d7:53:85:fb:41:c6:fb:89:70:41:1b:
bb:0d:1a:83:30:f1:2e:16:f8:32:bc:bb:c0:3f:82:9b:d3:d8:
ba:3e:6c:fc:3f:ca:fe:c3:1e:bf:75:50:27:b9:60:43:ca:51:
15:22:d0:17:31:2e:9f:95:6e:a6:b2:36:f2:24:b6:0b:51:c6:
da:c4:84:ac:cd:14:3f:cd:1e:9a:01:6f:8c:15:f3:55:df:18:
47:b0:da:e4:71:eb:5a:64:7a:de:7e:4e:5f:3f:c2:70:b5:34:
a5:42:a1:d5:04:b9:29:6c:a2:e9:3e:14:4a:21:d3:34:ee:33:
6a:05:29:44
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRU2KQ85GL/XDGKq+kQaZlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTExMTAxMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmJjYmZjYTMyNDNiNDkzYmM5ZGQ0YmIyYjkzMjlkNWFiYTUwYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rRwy1ssJvyxPyMQZ05vZmqQyh69
Pz1kj4ezUvD9bbVXESYmW5hW0QmALMp1vi8qEs939JcDR9gwG9sNteF+/Ks5+D1C
KNQl6r4LVOfbmCQpP/9FlXBUcnuze5gMMAsvKXiHPI3cjJTx41Hp+iemcZdWLgVF
cFTWxMa8a+g3SSxuJBFeSLvfXPiTsLocdkWLzIUE7Fu7EakRFQ+e9WX8YMopfncQ
TbqT3mSbz9WR4KSn/dcBsi0+UR0YH7/fIJla66tl5tvfqWczuPUGkF9qF9mWg/Qh
kfmnYdo8EcD4IwMhH37cb3d6jrY7M7g1pTPCp7KEnGICyHvRBb98l1KjpQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFE+8v8oyQ7STvJ3UuyuTKdWrpQx2MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVDd5X3lqSkR0Sk84bmRTN0s1TXAxYXVsREhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAFz1H+IRr/FrZ/2f/l8klXyAh
RzD+HWtqaHYiqjpc7fJyx2wyK3n9EuY6dv3f+H1PPA8a4oVbwITO5R/Go0JqDN0V
MtffAgx93q1SyaWZIDvTlFf83BFbeXdjGGtp+talC5PUmBUFOaJEbYhL9UiqMmRE
SnkoA61H/u1mLlupLTgHVdl+utdThftBxvuJcEEbuw0agzDxLhb4Mry7wD+Cm9PY
uj5s/D/K/sMev3VQJ7lgQ8pRFSLQFzEun5VuprI28iS2C1HG2sSErM0UP80emgFv
jBXzVd8YR7Da5HHrWmR63n5OXz/CcLU0pUKh1QS5KWyi6T4USiHTNO4zagUpRA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:21 2025 by rpki-client