Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ag-0XycfLOWtY0LjWvRsXksq3sI.roa
File: ag-0XycfLOWtY0LjWvRsXksq3sI.roa (raw, json)
Hash identifier: QY6f7HoQdnkU7orzSh2f2H5sf4JUjORoDGNPddURtq4=
Subject key identifier: 6A:0F:B4:5F:27:1F:2C:E5:AD:63:42:E3:5A:F4:6C:5E:4B:2A:DE:C2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959FBBA56CDCDF69D286F1DA68717590FD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ag-0XycfLOWtY0LjWvRsXksq3sI.roa
Signing time: Sun 16 Mar 2025 16:13:49 +0000
ROA not before: Sun 16 Mar 2025 16:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:bb:a5:6c:dc:df:69:d2:86:f1:da:68:71:75:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 16:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0fb45f271f2ce5ad6342e35af46c5e4b2adec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:7e:c4:41:fe:86:65:09:24:b7:67:10:58:
db:a6:f9:a4:35:3e:b7:8f:5e:76:70:44:b7:58:35:
ae:e0:0e:6d:ee:6d:5f:87:61:71:ae:b8:62:c4:10:
6f:60:e0:54:5f:34:3e:3c:11:fa:0b:b0:25:59:43:
53:f1:3f:f5:39:49:16:cf:9e:af:d9:2d:c9:f3:c0:
98:a2:f6:67:ef:93:a1:21:b8:ef:cd:36:a1:a3:17:
ae:81:73:9b:c8:d1:b3:10:8f:5c:bb:0e:73:49:74:
9e:ea:e2:77:b3:f1:98:2d:97:52:01:1f:ca:71:1f:
1a:15:54:a6:2e:00:f4:4d:c0:9e:19:9b:96:1d:10:
94:cb:12:6f:96:02:49:05:bc:bc:a6:fa:41:26:6e:
d0:0c:fc:f7:a5:f0:06:c9:1a:15:85:fb:53:47:07:
20:4c:cd:c5:26:f8:35:0a:6b:bd:73:8b:5f:13:65:
6d:fe:e8:86:df:bd:63:14:3f:5c:0e:9a:95:5e:e5:
6f:79:8d:c3:80:84:29:74:5f:80:64:84:00:fc:3a:
83:61:d3:62:8f:2c:2c:c2:65:02:6a:f6:97:a0:29:
b1:bd:47:da:08:36:53:3d:f6:46:9c:ff:40:b5:a7:
ba:d0:97:33:f1:3b:33:e6:df:60:e4:41:25:d7:bb:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:B4:5F:27:1F:2C:E5:AD:63:42:E3:5A:F4:6C:5E:4B:2A:DE:C2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ag-0XycfLOWtY0LjWvRsXksq3sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
96:7f:52:90:0f:3d:12:e2:a1:30:01:50:92:c1:b0:18:bd:c7:
22:81:50:d1:4d:f7:9b:7a:8b:c7:b9:db:83:2c:f3:12:ae:ca:
82:dd:1e:81:63:67:cb:66:12:f1:1f:6d:1b:43:6d:3e:19:94:
5e:f9:0a:41:45:71:d6:36:19:b7:bc:4d:de:77:0a:e5:bd:ae:
c7:00:15:d8:cc:18:16:ab:41:48:86:cc:1e:7d:ef:0f:ba:7c:
96:03:77:3d:42:3b:5e:23:b5:b6:65:a5:1d:5c:0c:75:3a:a6:
9c:30:24:c3:09:5c:5e:74:be:23:02:f4:1e:7e:e2:9b:b0:4d:
d1:99:7d:90:64:0c:75:fe:37:e6:18:ed:37:cd:48:86:8a:85:
aa:3c:f6:b4:26:ed:f1:03:48:07:ea:44:3c:a9:7e:7a:a0:bd:
8e:77:0f:cd:4c:74:77:61:88:2b:a7:ae:eb:4a:fc:65:8e:7c:
ef:44:81:6b:96:ab:1d:43:af:5c:0c:9c:96:54:c7:c3:91:95:
82:8f:3e:80:fb:47:37:6c:d5:76:09:79:e6:15:5c:54:e0:6d:
a7:6b:8c:13:cc:09:7f:9b:ef:c8:2e:ca:ce:de:b0:68:43:fa:
25:45:6e:80:7f:01:79:6e:91:78:f0:85:fa:58:f1:3b:b5:c7:
1c:74:da:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:19 2025 by rpki-client