Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/U5H0PMUdxm9yxS_-8rt8z_dDm6c.roa
File: U5H0PMUdxm9yxS_-8rt8z_dDm6c.roa (raw, json)
Hash identifier: hPdTLolCBpuRNMwdu9l1wou9MuObFzKj6nABIA7+/TA=
Subject key identifier: 53:91:F4:3C:C5:1D:C6:6F:72:C5:2F:FE:F2:BB:7C:CF:F7:43:9B:A7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193AE4F72EC6A40C076CF4540A25A4BF9C5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/U5H0PMUdxm9yxS_-8rt8z_dDm6c.roa
Signing time: Tue 10 Dec 2024 02:04:22 +0000
ROA not before: Tue 10 Dec 2024 02:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:ae4f:5d8e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:4f:72:ec:6a:40:c0:76:cf:45:40:a2:5a:4b:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 10 02:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5391f43cc51dc66f72c52ffef2bb7ccff7439ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:7a:a7:ce:f2:c0:15:45:3d:2a:3a:37:4d:
3c:9c:25:89:e3:3f:af:db:9a:f6:aa:fa:37:06:6a:
79:c5:28:79:1a:d6:61:36:36:dd:45:17:b9:e4:f7:
54:de:e5:b0:b4:2e:82:d7:5a:b6:e7:19:ec:db:ef:
ba:2b:9a:16:3f:a7:1f:5f:80:32:c7:a6:f3:00:90:
b9:79:c0:ef:54:96:08:fb:d2:31:62:b6:96:b9:64:
d5:a0:6a:6c:41:92:62:3b:fb:4e:fe:60:21:4c:60:
be:de:9c:f6:93:15:73:65:22:ff:a5:2b:0f:98:5c:
cb:22:07:8e:ce:6c:1e:1a:18:84:cc:ac:1e:2a:86:
86:9d:f9:6c:8f:4d:a4:db:dc:94:88:19:ed:94:68:
cb:9a:1b:c2:48:bf:42:ed:cd:3b:e4:23:d7:2c:29:
e8:1f:c6:53:77:d5:68:69:a2:63:9b:7e:96:fe:ea:
73:c4:5c:34:d7:62:04:3f:ec:0d:0d:3a:6a:ea:5d:
b5:91:04:23:1f:da:9d:1f:82:a9:70:b2:af:c3:6e:
6e:37:d6:2e:23:c8:75:6c:95:df:77:d2:36:50:3d:
d8:df:32:bb:d2:35:33:6b:ed:17:46:68:7f:ca:53:
67:69:3b:71:d1:38:0c:99:25:f3:6c:8b:e5:1e:9a:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:91:F4:3C:C5:1D:C6:6F:72:C5:2F:FE:F2:BB:7C:CF:F7:43:9B:A7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/U5H0PMUdxm9yxS_-8rt8z_dDm6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:ae4f:5d8e/128
Signature Algorithm: sha256WithRSAEncryption
1c:d7:b9:a9:5f:82:5e:d4:7f:52:91:62:ad:83:f2:f0:94:c4:
77:6a:ba:b7:89:bd:db:24:c8:86:32:e1:47:f0:da:6d:00:ae:
c2:47:5a:a9:ee:35:9c:c1:6f:b3:65:c4:77:93:6a:4b:a9:de:
76:c3:18:6a:bf:8d:d2:e6:ea:7c:02:d6:74:6b:eb:d1:9f:4a:
ef:3a:83:57:49:da:fb:35:1f:3b:62:9e:17:71:22:81:c9:c8:
7d:a8:8d:a0:1a:b4:df:ef:7f:79:f0:fe:1c:f3:04:cc:55:fc:
5e:ea:fd:c1:0e:d2:85:63:00:81:08:c6:bf:52:86:6d:bc:61:
95:19:82:39:5b:a6:5e:b9:04:ee:14:d0:95:bf:37:10:e5:1d:
95:20:64:e2:da:d4:69:09:9f:97:be:41:11:21:ed:ce:07:18:
f3:5a:22:e9:5d:4f:34:ec:ce:34:20:09:18:e8:d1:b4:15:ef:
7c:95:47:0a:7e:bc:f5:7f:92:90:ec:34:cd:2e:3e:e3:27:a2:
18:7d:11:10:2c:e4:a6:3a:50:b9:31:92:3a:ce:59:1b:ac:f3:
c5:c5:74:d4:e4:ea:89:05:3a:c1:75:ac:f3:78:ee:80:5c:a8:
cc:a7:c7:7e:99:d7:80:c2:4a:73:6d:0b:fc:66:d9:1d:b7:be:
85:cf:c6:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:51 2025 by rpki-client