Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VbR9anfuA0wYIgq3gnAvqwE6uaU.roa
File: VbR9anfuA0wYIgq3gnAvqwE6uaU.roa (raw, json)
Hash identifier: j+g06KzJ5eal7/h+WFk4ycugLPYT3Z/plCg/qZ6An+Y=
Subject key identifier: 55:B4:7D:6A:77:EE:03:4C:18:22:0A:B7:82:70:2F:AB:01:3A:B9:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910018B4D4900EF4FA207340D8EF26BFCC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VbR9anfuA0wYIgq3gnAvqwE6uaU.roa
Signing time: Mon 29 Jul 2024 20:05:04 +0000
ROA not before: Mon 29 Jul 2024 20:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:18:efa/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:18:b4:d4:90:0e:f4:fa:20:73:40:d8:ef:26:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 29 20:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55b47d6a77ee034c18220ab782702fab013ab9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:63:c5:d8:ff:8d:82:05:af:17:3c:d0:ad:
7b:d9:3a:23:43:db:ec:c3:d7:89:5c:18:ef:9a:19:
ef:fa:85:2a:1c:d2:8a:39:a0:70:93:f2:3b:a9:84:
12:cc:47:ff:bb:6e:93:2e:f7:6e:fc:16:c2:75:f6:
f9:66:7f:2b:1c:a0:f3:08:55:27:e2:a9:40:2e:d8:
5e:16:73:34:82:3a:7c:2a:f4:78:d2:6e:56:36:2c:
fa:3e:99:40:c4:a0:ef:5d:a6:52:ad:fc:dd:06:e0:
ea:38:4a:29:6b:7f:d2:5b:57:e1:6c:46:d7:63:64:
b0:e1:3d:e6:52:aa:65:a8:4b:d0:0a:c8:5d:f6:9e:
31:31:ac:2a:d3:f8:77:95:3d:e0:8d:ee:06:73:7f:
bb:df:f0:be:ab:b1:7c:b7:4d:b7:d4:96:5c:ba:0c:
6e:25:c8:8e:7f:29:0f:a0:65:07:41:b3:06:31:ac:
03:f5:49:8f:59:25:19:ba:d6:89:3e:94:13:da:34:
4d:39:74:cf:74:8f:37:1c:d6:dc:99:4f:19:bd:7d:
74:15:88:e4:77:e1:78:68:24:b8:4c:be:fa:01:74:
f6:f3:97:4b:48:94:77:c5:e5:b9:20:80:60:47:e6:
74:f1:e1:85:0d:3b:4f:e8:6b:f4:bf:3d:77:f1:98:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:7D:6A:77:EE:03:4C:18:22:0A:B7:82:70:2F:AB:01:3A:B9:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VbR9anfuA0wYIgq3gnAvqwE6uaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:18:efa/128
Signature Algorithm: sha256WithRSAEncryption
11:a8:b3:67:e3:af:83:41:cc:e9:cc:b5:0c:be:31:f2:ba:85:
c0:83:28:5f:19:54:0b:82:ce:6f:1d:3e:5c:5b:f6:0e:be:45:
2d:82:56:ee:ae:e2:82:98:5a:d1:aa:57:32:73:ca:85:60:c3:
49:df:c4:b1:4f:ec:3f:d8:44:29:67:59:93:da:cc:8e:24:e1:
6a:6b:bd:cf:f7:e5:f2:3b:1c:9e:43:25:e5:a8:5b:1e:98:8c:
46:54:da:27:06:fd:19:81:81:1e:6c:f8:6b:98:fa:a1:c2:b2:
e0:a6:7c:82:b2:9e:3e:38:c5:3d:9f:9a:04:12:d0:9a:18:3b:
a0:fd:c9:b7:1d:ee:13:f1:18:bc:49:ac:56:41:f6:34:b9:6d:
73:7e:67:21:05:e5:b6:24:af:7f:1e:6a:34:38:40:66:f0:b1:
15:d0:ff:34:5b:1d:db:e1:ab:7c:38:75:83:e6:ef:b1:8f:10:
d2:2a:af:bd:da:4f:37:ea:8f:68:dc:27:ed:6e:ec:9f:ae:6b:
77:6a:15:6d:a9:ef:43:42:87:8d:b1:b5:b5:6d:22:70:68:ad:
cb:c4:c3:e1:af:7e:c1:5b:4d:46:fe:f2:fb:88:45:a9:66:54:
b1:3d:7f:bd:d6:20:a7:76:e5:6e:74:d3:65:c9:10:0b:63:47:
8e:93:38:78
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZEAGLTUkA70+iBzQNjvJr/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzI5MjAwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWI0N2Q2YTc3ZWUwMzRjMTgyMjBhYjc4MjcwMmZhYjAxM2FiOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Fjxdj/jYIFrxc80K172TojQ9vs
w9eJXBjvmhnv+oUqHNKKOaBwk/I7qYQSzEf/u26TLvdu/BbCdfb5Zn8rHKDzCFUn
4qlALtheFnM0gjp8KvR40m5WNiz6PplAxKDvXaZSrfzdBuDqOEopa3/SW1fhbEbX
Y2Sw4T3mUqplqEvQCshd9p4xMawq0/h3lT3gje4Gc3+73/C+q7F8t0231JZcugxu
JciOfykPoGUHQbMGMawD9UmPWSUZutaJPpQT2jRNOXTPdI83HNbcmU8ZvX10FYjk
d+F4aCS4TL76AXT285dLSJR3xeW5IIBgR+Z08eGFDTtP6Gv0vz138Zg6BwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFFW0fWp37gNMGCIKt4JwL6sBOrmlMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvVmJSOWFuZnVBMHdZSWdxM2duQXZxd0U2dWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkQAYDvowDQYJKoZIhvcNAQELBQADggEB
ABGos2fjr4NBzOnMtQy+MfK6hcCDKF8ZVAuCzm8dPlxb9g6+RS2CVu6u4oKYWtGq
VzJzyoVgw0nfxLFP7D/YRClnWZPazI4k4Wprvc/35fI7HJ5DJeWoWx6YjEZU2icG
/RmBgR5s+GuY+qHCsuCmfIKynj44xT2fmgQS0JoYO6D9ybcd7hPxGLxJrFZB9jS5
bXN+ZyEF5bYkr38eajQ4QGbwsRXQ/zRbHdvhq3w4dYPm77GPENIqr73aTzfqj2jc
J+1u7J+ua3dqFW2p70NCh42xtbVtInBorcvEw+GvfsFbTUb+8vuIRalmVLE9f73W
IKd25W5002XJEAtjR46TOHg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:20:32 2025 by rpki-client