Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHjaPakrZu7qIxL0ECWyGAOZtmc.roa
File: WHjaPakrZu7qIxL0ECWyGAOZtmc.roa (raw, json)
Hash identifier: pqlNV2nCk+wOtiuPmaJTfalneomU9506Q9fQSkLITgw=
Subject key identifier: 58:78:DA:3D:A9:2B:66:EE:EA:23:12:F4:10:25:B2:18:03:99:B6:67
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019473C08D7CF34F92BF738CC64759DBA2F8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHjaPakrZu7qIxL0ECWyGAOZtmc.roa
Signing time: Fri 17 Jan 2025 10:13:06 +0000
ROA not before: Fri 17 Jan 2025 10:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:c0:8d:7c:f3:4f:92:bf:73:8c:c6:47:59:db:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 17 10:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5878da3da92b66eeea2312f41025b2180399b667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:e4:76:7a:50:96:d2:b0:56:82:fc:02:0c:
38:a1:ef:a4:94:4f:d1:3b:ba:b4:8a:b5:a4:23:3e:
18:c3:65:21:6f:49:ac:01:c7:2d:3c:96:0c:93:c8:
2f:c0:b8:fb:7c:dd:ea:4d:64:32:ab:eb:4d:c8:2e:
b3:4d:fe:d3:d9:88:18:03:bd:ca:ac:d7:f6:c3:38:
2c:ba:19:4c:6c:5b:fd:74:93:d5:47:a2:a0:b3:70:
88:78:05:aa:2a:bd:ae:d2:ca:16:ee:05:e1:b0:88:
39:51:1b:ef:c6:b1:78:11:20:3c:a4:f7:63:f9:85:
a2:da:e1:2c:b4:b2:77:02:5b:6a:02:c2:0a:ba:4d:
fb:69:f7:ba:58:2d:22:ce:c4:02:cb:03:77:92:e3:
12:1c:c1:0c:ee:4c:dd:02:de:f6:64:86:c6:cd:af:
63:25:b2:69:29:32:be:6d:b0:4b:fc:75:b8:0a:e9:
1e:41:7b:9e:2d:09:76:fd:20:55:14:3b:aa:c1:a9:
dc:6b:3c:51:bb:a5:1b:92:4d:47:86:0a:68:3e:97:
98:a0:a8:23:c7:c3:25:5c:5c:d5:db:fb:65:c7:84:
2b:75:9d:b1:8b:02:c4:eb:c6:3c:4f:2d:50:98:46:
96:aa:2c:fd:aa:9a:62:a4:77:89:c5:e6:7c:26:61:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:DA:3D:A9:2B:66:EE:EA:23:12:F4:10:25:B2:18:03:99:B6:67
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WHjaPakrZu7qIxL0ECWyGAOZtmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
84:e3:29:25:3f:80:13:14:fe:af:40:21:e8:b7:dd:3b:f7:ce:
31:cc:95:8c:b1:a3:57:f1:80:ee:8e:5b:42:a8:12:98:b5:a2:
3b:55:e9:94:9d:49:56:33:4c:17:1e:f1:0d:6f:13:55:5d:96:
44:ba:c5:54:53:12:ff:4a:7b:fe:fd:7a:e0:fc:72:9c:2e:98:
23:4e:28:e5:a9:17:73:70:d8:88:00:7c:5c:ec:97:0e:f9:20:
2d:6b:fc:7a:0b:c1:69:0f:38:cd:46:a9:bc:38:b4:06:e7:46:
6d:6e:e5:52:72:72:91:bc:eb:24:60:97:db:5b:3e:4f:d8:37:
9d:08:84:0c:51:cc:66:45:aa:eb:79:c7:c1:f0:2a:bb:1f:8f:
87:fe:fa:8d:f6:2e:e7:58:e1:64:8a:55:6d:62:c9:e4:e0:90:
6b:99:cd:28:06:cf:f9:6c:06:b4:eb:30:85:41:9b:af:d6:4e:
8b:96:98:87:d7:46:61:08:37:63:6d:e8:3b:04:3a:d5:e7:26:
0e:6e:22:a6:fb:42:fc:df:2b:2a:03:f2:77:bd:ac:dc:83:6b:
91:31:9c:13:18:51:9a:d1:84:11:50:34:80:b3:94:42:c7:7a:
4d:80:ae:9a:c8:5d:8e:c7:c6:ff:ce:1b:1f:33:6d:5f:07:40:
ef:6c:52:21
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRzwI1880+Sv3OMxkdZ26L4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE3MTAxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODc4ZGEzZGE5MmI2NmVlZWEyMzEyZjQxMDI1YjIxODAzOTliNjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25DkdnpQltKwVoL8Agw4oe+klE/R
O7q0irWkIz4Yw2Uhb0msAcctPJYMk8gvwLj7fN3qTWQyq+tNyC6zTf7T2YgYA73K
rNf2wzgsuhlMbFv9dJPVR6Kgs3CIeAWqKr2u0soW7gXhsIg5URvvxrF4ESA8pPdj
+YWi2uEstLJ3AltqAsIKuk37afe6WC0izsQCywN3kuMSHMEM7kzdAt72ZIbGza9j
JbJpKTK+bbBL/HW4CukeQXueLQl2/SBVFDuqwancazxRu6Ubkk1HhgpoPpeYoKgj
x8MlXFzV2/tlx4QrdZ2xiwLE68Y8Ty1QmEaWqiz9qppipHeJxeZ8JmG+fQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFFh42j2pK2bu6iMS9BAlshgDmbZnMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvV0hqYVBha3JadTdxSXhMMEVDV3lHQU9adG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAhOMpJT+AExT+r0Ah6LfdO/fO
McyVjLGjV/GA7o5bQqgSmLWiO1XplJ1JVjNMFx7xDW8TVV2WRLrFVFMS/0p7/v16
4PxynC6YI04o5akXc3DYiAB8XOyXDvkgLWv8egvBaQ84zUapvDi0BudGbW7lUnJy
kbzrJGCX21s+T9g3nQiEDFHMZkWq63nHwfAqux+Ph/76jfYu51jhZIpVbWLJ5OCQ
a5nNKAbP+WwGtOswhUGbr9ZOi5aYh9dGYQg3Y23oOwQ61ecmDm4ipvtC/N8rKgPy
d72s3INrkTGcExhRmtGEEVA0gLOUQsd6TYCumshdjsfG/84bHzNtXwdA72xSIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:30 2025 by rpki-client