Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB3jocTPIhxedSKkQz3VaVEPVwk.roa
File: TB3jocTPIhxedSKkQz3VaVEPVwk.roa (raw, json)
Hash identifier: HmonJ0nYg9oUnGK6ETbcFICnXvTqjgdQPzA9Pg52M30=
Subject key identifier: 4C:1D:E3:A1:C4:CF:22:1C:5E:75:22:A4:43:3D:D5:69:51:0F:57:09
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195734904E55652EE619BA1E36EF10C0218
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB3jocTPIhxedSKkQz3VaVEPVwk.roa
Signing time: Sat 08 Mar 2025 01:05:19 +0000
ROA not before: Sat 08 Mar 2025 01:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:7348:3d54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:73:49:04:e5:56:52:ee:61:9b:a1:e3:6e:f1:0c:02:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 8 01:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c1de3a1c4cf221c5e7522a4433dd569510f5709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f6:d4:d7:d1:23:83:06:61:9e:90:1d:a8:e5:
e8:2a:73:62:4a:94:b0:ab:14:db:10:fc:62:87:d0:
6c:8f:55:e3:d5:4d:ea:66:15:45:39:db:58:bf:e8:
de:26:70:87:eb:a4:d8:d1:c8:c3:dc:12:cf:43:9b:
3f:a9:d9:84:23:9c:be:de:3d:03:c3:5b:93:09:71:
d7:72:cb:55:2b:9a:d2:47:06:4f:dc:06:92:cf:42:
d8:f7:db:f2:08:03:d2:e7:40:22:fe:d8:89:0e:d1:
10:cd:ed:15:bb:0f:e7:e7:e1:62:e6:aa:64:e4:06:
bf:78:a2:ea:3a:bb:53:8c:fc:b1:72:63:43:ff:64:
70:70:57:e1:07:21:c4:18:1f:7c:a6:a4:8f:69:88:
da:f8:7c:22:92:48:32:4b:64:ec:ca:13:35:5f:eb:
69:8d:c6:7f:6f:c0:c5:a7:de:ad:70:94:4b:14:87:
49:72:9d:94:0d:1d:d2:ae:9f:7f:82:61:d5:03:2f:
71:01:cd:bf:e3:37:7e:10:e8:79:21:6c:a4:59:9a:
5e:bc:5c:a9:b1:22:b3:d8:c0:fe:ac:86:98:56:8f:
c5:d9:81:b0:b0:ce:a4:b2:96:0b:de:5b:31:4d:ba:
53:94:2e:b9:01:3b:f7:56:5b:dc:c4:39:de:63:8a:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:E3:A1:C4:CF:22:1C:5E:75:22:A4:43:3D:D5:69:51:0F:57:09
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/TB3jocTPIhxedSKkQz3VaVEPVwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:7348:3d54/128
Signature Algorithm: sha256WithRSAEncryption
07:10:4d:21:cb:b5:96:03:d2:78:7e:dc:1e:de:1d:a8:b8:54:
da:0c:38:ab:e3:d0:bd:11:ed:61:e3:11:fa:4a:92:ad:56:73:
02:a4:9f:71:1a:98:67:36:66:66:7b:a5:3f:1b:51:90:48:94:
16:65:6e:9f:32:01:e3:d6:6e:0c:28:74:1b:43:5c:ba:01:20:
1c:c1:8f:be:61:47:41:90:bf:d7:78:4c:bc:4b:17:2d:39:04:
7c:1c:1b:88:61:62:84:54:95:4a:3e:a8:ad:a6:3a:a4:e2:1b:
10:88:b3:cc:85:72:fd:de:a0:e4:ef:24:c0:d8:10:c1:56:e1:
c1:7e:52:1b:b3:a0:4d:fd:9f:f3:ae:71:d3:fa:b8:cb:ed:55:
bc:6b:51:75:59:ee:db:24:e7:72:9d:95:02:a6:92:34:db:90:
75:38:5d:99:ce:41:3f:df:2e:ab:8a:cd:1d:7c:db:4c:ff:1e:
56:2b:79:74:ae:66:eb:56:5d:3a:ba:35:73:0d:8e:59:c3:c9:
8e:5d:c6:08:8b:66:3c:52:cc:41:7b:64:f2:d8:d1:23:15:61:
b0:1c:80:8d:e7:2c:dd:9a:82:3e:0f:73:99:f0:1d:5d:fc:f4:
f2:b3:28:bb:ce:5b:2c:a5:fa:70:d9:06:04:81:c7:cc:a8:93:
6e:71:14:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:35 2025 by rpki-client