Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cQsTKAwSe11GG1ChjbF9mVw5oWE.roa
File: cQsTKAwSe11GG1ChjbF9mVw5oWE.roa (raw, json)
Hash identifier: GPcHD0o8Qlr9HVmWePuV4T6ZqRwKuliyFy31IcomTYU=
Subject key identifier: 71:0B:13:28:0C:12:7B:5D:46:1B:50:A1:8D:B1:7D:99:5C:39:A1:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019468CE3313F63350F3C4BC41DC4B3FF8E5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cQsTKAwSe11GG1ChjbF9mVw5oWE.roa
Signing time: Wed 15 Jan 2025 07:12:11 +0000
ROA not before: Wed 15 Jan 2025 07:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:ce:33:13:f6:33:50:f3:c4:bc:41:dc:4b:3f:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 15 07:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=710b13280c127b5d461b50a18db17d995c39a161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:b0:2c:72:7f:62:79:19:61:38:d2:8a:c2:
e1:bd:28:de:19:e5:f1:50:c5:ac:ac:e6:8b:18:ab:
a3:75:66:c5:62:64:cd:b9:e9:1f:63:00:f9:54:a8:
7c:a1:9a:a6:02:fc:df:17:f2:d5:cd:29:36:1c:71:
5e:93:de:e9:ed:a2:2f:28:fb:77:fd:0d:38:5a:26:
21:5f:32:c7:7d:88:88:ce:49:fd:6b:dc:0f:5a:eb:
94:17:f3:c7:c2:e7:f1:a3:13:bb:12:eb:bb:a8:96:
ce:7f:60:69:da:98:0b:bc:f0:5c:47:33:13:4e:49:
6a:f5:f9:e4:ca:e1:07:9c:a1:6c:78:2e:82:c8:2c:
e3:5b:35:16:7a:8d:42:8d:d7:a9:95:3e:54:2f:12:
8f:f8:cb:f7:83:f2:64:e1:75:2b:65:a6:bc:92:b9:
bc:22:26:b4:f9:38:cb:84:3c:7a:84:67:0e:39:6b:
74:d0:39:7c:f3:e0:d3:4e:2d:20:91:c1:b1:6a:3c:
a2:07:15:88:8d:5b:2b:c3:5e:3e:7c:21:77:e9:4a:
92:47:e9:d2:89:64:9b:d6:6d:27:4c:e7:2e:ab:72:
58:ea:e1:ff:78:1f:89:10:74:50:38:b5:2a:95:ad:
93:24:44:bd:47:3f:20:76:bb:07:64:4b:a8:d8:fb:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:13:28:0C:12:7B:5D:46:1B:50:A1:8D:B1:7D:99:5C:39:A1:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cQsTKAwSe11GG1ChjbF9mVw5oWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0f:e5:87:b0:05:02:fe:8c:0c:1b:13:d7:30:13:3d:b8:fc:ea:
73:9d:87:a4:aa:54:e8:e5:21:be:43:2f:d1:be:6e:ab:66:e0:
05:a7:5e:71:a9:85:78:e0:eb:23:05:ec:fb:b7:88:f2:24:0e:
fb:35:ea:2f:f2:20:e7:d4:fb:04:c1:6d:ff:a3:d2:1d:e6:c0:
46:37:fb:3f:97:4e:72:67:72:a6:61:c8:3f:6b:92:22:bc:52:
06:9c:de:7c:0f:d1:02:f5:d4:96:e8:92:fa:70:b3:26:f0:39:
45:64:7b:b1:d4:3a:a0:dd:dc:9a:a8:de:0d:35:89:67:41:e8:
db:05:f9:ee:34:04:40:11:35:57:b3:38:b6:80:bf:ed:83:f0:
09:a0:23:3d:b3:a8:9d:c1:14:b1:87:07:b8:10:8c:51:00:c2:
57:bc:da:9c:5b:1b:a9:78:bf:42:39:53:24:08:18:de:64:ea:
d2:df:49:38:f7:6d:50:b1:35:f5:e8:f9:95:42:b4:ad:91:f6:
a3:d2:1a:f6:d1:76:06:50:c3:60:1d:5e:f1:6c:3c:1d:3d:a0:
d4:7b:18:09:a6:fe:e4:43:5b:b0:03:74:d7:74:06:28:4a:83:
0a:f6:fc:78:05:43:ff:b4:95:c8:d4:fa:63:02:ac:75:f9:78:
98:bd:72:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:14 2025 by rpki-client