Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZSk3KT0okb1j51K-PARvdVTOaVU.roa
File: ZSk3KT0okb1j51K-PARvdVTOaVU.roa (raw, json)
Hash identifier: 3g8Z9LT2pKYkoC/WuBsX/GzseiOGQXwkhr2Wog4+oLQ=
Subject key identifier: 65:29:37:29:3D:28:91:BD:63:E7:52:BE:3C:04:6F:75:54:CE:69:55
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C40821EFC50332BF1B3E54BF074A7DE7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZSk3KT0okb1j51K-PARvdVTOaVU.roa
Signing time: Thu 05 Sep 2024 21:12:32 +0000
ROA not before: Thu 05 Sep 2024 21:12:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c4:08:21:ef:c5:03:32:bf:1b:3e:54:bf:07:4a:7d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 21:12:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=652937293d2891bd63e752be3c046f7554ce6955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:d1:89:7b:59:c1:da:4f:4c:0d:fa:94:6a:
f3:07:38:f5:52:5c:ca:ea:dc:eb:1c:5c:8f:00:e4:
32:ed:08:ac:53:4b:c2:d6:10:6f:f3:bf:b8:e7:a2:
05:2e:5f:80:82:ea:ce:36:d2:94:e9:3d:ac:4d:93:
61:69:4b:d6:95:fd:ba:3a:b1:cd:d5:f3:0c:64:88:
1c:4c:fe:cb:68:1f:99:44:9c:25:4f:c7:24:3e:e5:
c9:4d:57:9a:7c:4a:73:a4:f3:f0:9b:ee:e1:03:44:
84:2f:f2:af:56:6b:80:c4:4a:0e:94:01:74:d1:d8:
38:ac:e6:b9:3c:46:37:81:55:9a:e5:e3:37:fa:15:
9a:0b:83:2e:a6:aa:35:6c:04:d2:01:34:e0:80:8e:
6a:7e:71:40:8c:e9:40:ff:f4:56:c1:67:a1:a6:0d:
d2:87:29:7d:ae:28:86:55:58:9c:3f:82:6e:48:e4:
4f:ca:15:10:68:61:28:bf:1a:83:9e:ca:fc:11:44:
3d:41:ee:7a:bb:06:4b:72:a7:05:32:42:fc:c9:ab:
86:8a:b6:cc:55:10:b0:48:f7:f2:d9:c4:5a:27:77:
af:42:98:2c:c4:c9:84:55:88:bf:c7:fe:90:9c:bf:
6e:51:53:12:dc:42:89:c1:c8:4d:64:73:34:08:6c:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:37:29:3D:28:91:BD:63:E7:52:BE:3C:04:6F:75:54:CE:69:55
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ZSk3KT0okb1j51K-PARvdVTOaVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
84:f9:62:2e:66:97:5c:c4:03:ce:84:5d:d6:86:ec:73:89:ee:
15:43:2f:b7:22:f7:c7:c3:06:3f:75:65:f2:7e:b9:a9:dd:6a:
7a:7d:24:54:fd:b3:2d:53:f0:ba:37:6f:ca:e6:40:c3:0e:3f:
66:6d:e0:42:30:8c:51:c1:76:59:d9:86:0d:a1:2d:e4:95:ce:
ad:3d:7f:36:f1:29:a5:dd:ad:22:e8:ba:60:53:a5:7d:9e:f9:
48:6f:d8:70:5a:00:20:d9:8c:65:9a:c7:0e:09:b8:47:a9:8c:
57:a2:0a:bf:27:7c:90:e2:ee:99:f2:f7:8d:64:45:a5:d3:f3:
c1:04:a7:8e:52:33:41:ad:ce:15:85:73:13:d4:67:25:ec:fe:
90:15:ea:01:ef:cf:a9:82:e3:8b:c0:18:9b:98:28:18:1f:1a:
9a:5f:25:7b:32:fa:33:e2:6e:6b:b0:35:ff:f4:a9:fe:1e:74:
bb:a8:80:8e:91:d4:11:68:17:bf:de:87:13:5f:5e:3d:87:27:
64:0e:19:42:5c:0f:28:d5:b8:e1:d1:d7:f4:df:c2:76:4b:8d:
64:d7:4b:52:41:63:81:94:f2:02:09:97:5b:25:05:d2:a9:9f:
70:82:74:69:02:41:24:2b:19:9f:b0:ee:70:3d:33:82:fc:b9:
6d:a9:41:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:24:31 2025 by rpki-client