Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6uxUC_hoKgMkhWPuOWe_tsU-GY.roa
File: _6uxUC_hoKgMkhWPuOWe_tsU-GY.roa (raw, json)
Hash identifier: o1HyCJcq6zhdweZDvDe5K5fgaOukUXRM0WYCrC0GLYg=
Subject key identifier: FF:AB:B1:50:2F:E1:A0:A8:0C:92:15:8F:B8:E5:9E:FE:DB:14:F8:66
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01921DB279E5D7AEC7DC09AB2A2ACD5F9909
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6uxUC_hoKgMkhWPuOWe_tsU-GY.roa
Signing time: Mon 23 Sep 2024 07:04:48 +0000
ROA not before: Mon 23 Sep 2024 07:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:1db1:eb57/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:b2:79:e5:d7:ae:c7:dc:09:ab:2a:2a:cd:5f:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 23 07:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffabb1502fe1a0a80c92158fb8e59efedb14f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:90:f3:04:54:f0:73:eb:1d:f2:2a:03:5c:
03:2c:05:74:b5:32:15:09:56:10:17:55:d9:8b:16:
13:63:05:d6:53:4f:3b:ad:04:15:8e:38:84:63:17:
b4:7e:76:3e:0b:60:6b:84:b6:cb:0d:5c:6d:dd:d1:
9b:df:1d:93:a7:0d:f4:57:8c:0a:73:85:16:a2:ee:
17:95:91:3f:75:fc:f7:ed:f5:14:d9:c2:89:4a:68:
78:9e:5e:b6:90:d9:14:77:34:eb:1f:64:5a:0b:44:
c1:ef:70:58:5e:ab:01:e6:63:d4:91:e1:b3:22:cc:
c1:df:cb:fb:41:d2:60:cd:55:e0:ae:e2:92:bc:b4:
69:1c:40:61:51:88:8a:0e:e2:e6:16:05:da:97:a0:
f5:44:34:61:de:84:9c:56:2e:4e:ec:4d:3f:21:f9:
15:a3:d4:1b:35:73:14:f9:24:39:7d:d8:da:89:e5:
58:93:08:d9:03:df:c6:78:fb:70:64:63:ac:79:14:
05:e5:13:2a:a5:52:70:6b:b6:2f:df:e5:39:45:10:
a1:c6:ba:e2:a8:01:89:fd:4d:4c:89:1e:98:80:f9:
f5:0c:aa:93:21:5b:52:8d:91:8e:3f:70:14:59:91:
08:6b:5f:a1:d9:f7:20:2e:d5:ce:f7:f2:60:b9:af:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:B1:50:2F:E1:A0:A8:0C:92:15:8F:B8:E5:9E:FE:DB:14:F8:66
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_6uxUC_hoKgMkhWPuOWe_tsU-GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:1db1:eb57/128
Signature Algorithm: sha256WithRSAEncryption
1a:16:9b:62:9e:22:21:3f:02:08:1a:c5:12:91:c8:4e:ea:d6:
8e:0a:89:1d:18:50:dc:9e:9c:c0:23:fc:ff:5d:e7:45:28:ef:
80:f2:9e:32:b0:27:14:ea:de:cc:f6:2e:65:6a:6d:54:4d:c9:
58:19:5e:85:54:23:3d:5d:f6:9f:e9:b0:5e:94:16:7e:1a:99:
17:bd:7e:d6:78:12:81:b3:42:88:10:2b:df:ca:13:ee:3c:ed:
1e:15:89:e3:d1:93:29:76:f1:33:22:ec:8e:1e:80:61:aa:32:
e2:48:21:38:1e:22:26:9e:76:ec:97:0d:f6:30:e1:4e:99:04:
e8:55:26:7d:f5:e7:36:3f:f3:ab:35:b3:bd:56:10:3a:eb:eb:
ef:27:a5:38:b1:e6:fc:72:e7:ca:b3:b2:9f:79:df:95:99:3a:
91:0e:0d:b8:a5:ff:a6:30:9f:51:b3:75:33:f3:50:60:8c:01:
f1:4f:55:32:aa:98:e7:c0:12:6c:98:9b:28:59:51:05:3a:fc:
98:1b:cb:49:82:70:ff:55:10:04:87:5f:bb:57:74:50:44:6e:
f6:d3:7a:4f:e3:c7:05:33:0f:f6:df:f9:84:3f:23:9f:18:98:
1c:0b:62:6d:0e:95:a1:db:4d:25:b1:71:05:4c:75:b9:7b:86:
46:39:fc:34
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZIdsnnl167H3AmrKirNX5kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTIzMDcwNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFiYjE1MDJmZTFhMGE4MGM5MjE1OGZiOGU1OWVmZWRiMTRmODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cCQ8wRU8HPrHfIqA1wDLAV0tTIV
CVYQF1XZixYTYwXWU087rQQVjjiEYxe0fnY+C2BrhLbLDVxt3dGb3x2Tpw30V4wK
c4UWou4XlZE/dfz37fUU2cKJSmh4nl62kNkUdzTrH2RaC0TB73BYXqsB5mPUkeGz
IszB38v7QdJgzVXgruKSvLRpHEBhUYiKDuLmFgXal6D1RDRh3oScVi5O7E0/IfkV
o9QbNXMU+SQ5fdjaieVYkwjZA9/GePtwZGOseRQF5RMqpVJwa7Yv3+U5RRChxrri
qAGJ/U1MiR6YgPn1DKqTIVtSjZGOP3AUWZEIa1+h2fcgLtXO9/Jgua/r5wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFP+rsVAv4aCoDJIVj7jlnv7bFPhmMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvXzZ1eFVDX2hvS2dNa2hXUHVPV2VfdHNVLUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGSHbHrVzANBgkqhkiG9w0BAQsFAAOCAQEAGhabYp4iIT8CCBrFEpHITurW
jgqJHRhQ3J6cwCP8/13nRSjvgPKeMrAnFOrezPYuZWptVE3JWBlehVQjPV32n+mw
XpQWfhqZF71+1ngSgbNCiBAr38oT7jztHhWJ49GTKXbxMyLsjh6AYaoy4kghOB4i
Jp527JcN9jDhTpkE6FUmffXnNj/zqzWzvVYQOuvr7yelOLHm/HLnyrOyn3nflZk6
kQ4NuKX/pjCfUbN1M/NQYIwB8U9VMqqY58ASbJibKFlRBTr8mBvLSYJw/1UQBIdf
u1d0UERu9tN6T+PHBTMP9t/5hD8jnxiYHAtibQ6VodtNJbFxBUx1uXuGRjn8NA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:23 2025 by rpki-client