Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Z6byrPBu27IckpzoYE0KpACmH9g.roa
File: Z6byrPBu27IckpzoYE0KpACmH9g.roa (raw, json)
Hash identifier: zeKVv74l8tH5CFxVOXQuW9iCWFPKQluHsUxA9SZe40k=
Subject key identifier: 67:A6:F2:AC:F0:6E:DB:B2:1C:92:9C:E8:60:4D:0A:A4:00:A6:1F:D8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019567E9A3E533C5B933DFFECA06F5C5A96B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Z6byrPBu27IckpzoYE0KpACmH9g.roa
Signing time: Wed 05 Mar 2025 20:05:19 +0000
ROA not before: Wed 05 Mar 2025 20:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:67e8:f677/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:e9:a3:e5:33:c5:b9:33:df:fe:ca:06:f5:c5:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 5 20:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a6f2acf06edbb21c929ce8604d0aa400a61fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:3d:6f:0e:43:4f:fa:3a:fc:41:94:11:6d:
c9:98:5f:ac:99:6d:ec:e1:b9:6a:a0:1a:79:99:fb:
a3:36:0f:52:b1:e4:c1:2f:84:70:14:5f:a1:bb:c3:
2b:db:56:d9:f1:97:cc:50:1c:24:e2:b1:ed:80:3e:
d2:8a:33:e1:7f:70:7d:17:8c:f0:3e:f5:97:78:27:
c2:06:72:12:a0:5b:c5:d8:9a:59:2f:1d:ef:d3:f3:
30:03:e2:62:23:a0:af:f4:02:67:8b:ff:9f:96:4c:
6a:14:bc:3b:20:cd:5b:a7:76:18:db:b2:8b:78:8f:
59:46:cb:63:f7:77:00:b5:81:24:cf:ab:6e:08:9c:
fc:74:e1:03:03:bf:88:cd:17:d3:49:5d:a8:1b:b6:
41:53:c0:7c:27:2f:c4:80:a5:21:83:ec:b3:32:14:
db:1b:a1:c3:c5:e2:36:9a:71:35:a8:3f:43:40:c7:
b2:c3:d6:7e:49:3f:52:19:5a:f1:47:4f:45:95:38:
0b:58:1a:48:f4:90:51:4b:25:8d:df:7c:a2:f9:87:
c7:97:0b:e6:9d:66:35:19:10:12:44:05:0b:1b:8c:
97:76:2f:22:ce:26:d6:58:64:d1:3c:c7:b2:4c:a7:
64:ef:22:40:f5:37:f4:26:79:70:f5:eb:ce:3e:a5:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A6:F2:AC:F0:6E:DB:B2:1C:92:9C:E8:60:4D:0A:A4:00:A6:1F:D8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Z6byrPBu27IckpzoYE0KpACmH9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:67e8:f677/128
Signature Algorithm: sha256WithRSAEncryption
5e:c7:f2:df:63:28:f9:55:2a:04:3f:b0:7e:e1:88:7d:ef:7a:
1d:04:3a:77:16:aa:10:56:d4:de:43:90:8f:1c:c2:37:cb:0c:
e9:e5:a9:b5:67:14:49:4e:f3:00:87:6a:33:71:c9:bf:ba:cd:
3d:e1:cd:49:d0:05:e1:cc:94:b0:ec:fd:3b:5d:30:bc:33:c3:
10:91:a7:2d:b4:0e:68:c1:0a:e2:02:7e:f6:15:fe:8e:87:41:
0c:a4:f6:7f:fc:db:7b:ed:1f:e3:05:2e:12:89:72:8a:a6:af:
06:ac:c1:ca:97:0e:1e:d9:05:be:b5:8b:ca:83:36:b6:48:99:
a0:83:39:a6:54:73:7f:49:8e:33:97:7e:e3:2b:fd:b9:2a:dc:
e9:9b:23:6f:38:6e:7c:8b:c9:a8:2d:f5:ce:c2:33:f1:f1:a8:
ca:b6:07:bb:14:37:c7:3b:91:42:af:82:74:84:77:c0:d6:51:
b7:ab:75:49:5c:13:fb:7e:80:db:7e:4c:21:9d:f2:22:30:62:
45:89:64:d9:2b:43:08:f3:a5:f0:21:2d:4f:c5:ae:58:cd:5d:
98:1f:50:13:96:be:60:c4:03:37:22:07:0b:bb:e8:76:14:a5:
a5:a7:e7:3c:77:b8:82:a4:0e:f7:cf:2c:c7:88:06:45:bd:f3:
8a:48:db:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:30 2025 by rpki-client