Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e8ccVR_hxH4ytAk2dFEnIl_LiIE.roa
File: e8ccVR_hxH4ytAk2dFEnIl_LiIE.roa (raw, json)
Hash identifier: gvLCVrvvLFGoCG9jpiahMVOwcS/5HKhHpM17f9ZqkCQ=
Subject key identifier: 7B:C7:1C:55:1F:E1:C4:7E:32:B4:09:36:74:51:27:22:5F:CB:88:81
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959F85A175D0AC06DB81075B306FFE4109
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e8ccVR_hxH4ytAk2dFEnIl_LiIE.roa
Signing time: Sun 16 Mar 2025 15:14:49 +0000
ROA not before: Sun 16 Mar 2025 15:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9f:85:a1:75:d0:ac:06:db:81:07:5b:30:6f:fe:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 15:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc71c551fe1c47e32b40936745127225fcb8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:83:b9:6c:2b:22:d0:bc:a1:0f:45:8a:52:
d7:37:49:bb:88:49:8b:90:c6:ff:54:24:90:81:71:
e8:53:62:01:00:6c:d3:d5:59:39:42:2c:54:0b:34:
f6:c7:60:88:f5:46:11:cb:54:9b:ff:8d:e6:55:ad:
4e:7d:35:56:69:ac:8b:40:b9:45:09:22:c0:12:06:
8f:07:58:c5:50:57:02:68:c4:a4:d7:b5:df:d8:e9:
48:1b:ce:96:66:96:be:5a:6c:51:ee:ea:3d:51:5f:
62:59:be:0b:24:d6:98:cf:db:d5:c2:93:63:9c:a9:
50:6c:53:5f:ec:1b:53:15:d5:d2:89:9b:00:79:66:
9b:17:5e:d1:99:6a:08:f5:21:ed:8f:a4:55:f7:aa:
46:ae:7e:df:0c:64:47:2e:b1:f0:3d:91:34:c4:3e:
c1:f9:2f:08:f6:6a:02:cb:78:88:84:f0:03:22:23:
23:16:e5:d2:12:b9:e6:eb:2e:22:11:99:b8:14:d1:
23:09:8b:2a:4f:6d:89:18:e7:17:41:27:c6:ad:d7:
4f:22:90:c5:59:66:fb:3b:7e:75:5b:5f:ea:03:e8:
29:8a:c7:57:a2:14:92:53:69:2b:d6:a7:2b:c8:f9:
f0:69:26:da:fb:d9:e2:33:ec:84:ad:2f:8d:fd:e7:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:1C:55:1F:E1:C4:7E:32:B4:09:36:74:51:27:22:5F:CB:88:81
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/e8ccVR_hxH4ytAk2dFEnIl_LiIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
03:f5:5f:3a:c2:a7:6c:81:ec:e0:d4:5a:e0:7c:ff:78:6b:af:
3d:e2:fc:1c:d6:ad:c0:f4:ab:52:e0:d2:14:3c:fc:29:97:4e:
78:39:58:f9:71:4b:ab:2d:e6:a5:7c:29:f9:83:51:93:ee:2d:
2b:dd:4a:87:74:c8:2b:ea:eb:aa:70:a9:11:4a:75:bd:68:4f:
a4:7a:3b:01:0e:0c:a1:65:11:db:c0:7d:24:a4:a2:1a:23:9e:
b4:79:69:84:ee:c5:ea:09:5e:17:96:e8:b1:23:81:ae:6b:a0:
b1:ed:5c:09:44:9a:b3:19:a2:74:82:ef:40:20:26:6e:65:b8:
e5:03:17:6b:ea:04:05:98:ae:12:45:59:ab:f6:a6:93:4a:06:
82:e4:cb:74:62:05:57:f3:2c:26:af:50:7a:96:8d:11:1a:6e:
59:26:84:6a:22:97:1c:a8:fa:d3:3b:63:19:01:f3:53:e6:af:
8c:a1:d9:00:55:24:70:de:a8:33:1c:d7:d0:11:34:56:94:b7:
8c:a1:ef:35:b3:e9:f2:7a:3a:b8:39:68:a7:d7:e6:d4:63:f4:
1b:61:c7:20:fb:f7:05:7e:55:0b:73:18:79:1a:55:ab:83:b5:
a7:20:87:86:bf:3e:6c:ba:81:da:f5:aa:99:6b:24:42:72:d1:
70:e1:ab:a5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWfhaF10KwG24EHWzBv/kEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE2MTUxNDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmM3MWM1NTFmZTFjNDdlMzJiNDA5MzY3NDUxMjcyMjVmY2I4ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPWDuWwrItC8oQ9FilLXN0m7iEmL
kMb/VCSQgXHoU2IBAGzT1Vk5QixUCzT2x2CI9UYRy1Sb/43mVa1OfTVWaayLQLlF
CSLAEgaPB1jFUFcCaMSk17Xf2OlIG86WZpa+WmxR7uo9UV9iWb4LJNaYz9vVwpNj
nKlQbFNf7BtTFdXSiZsAeWabF17RmWoI9SHtj6RV96pGrn7fDGRHLrHwPZE0xD7B
+S8I9moCy3iIhPADIiMjFuXSErnm6y4iEZm4FNEjCYsqT22JGOcXQSfGrddPIpDF
WWb7O351W1/qA+gpisdXohSSU2kr1qcryPnwaSba+9niM+yErS+N/eeBaQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHvHHFUf4cR+MrQJNnRRJyJfy4iBMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZThjY1ZSX2h4SDR5dEFrMmRGRW5JbF9MaUlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAA/VfOsKnbIHs4NRa4Hz/eGuv
PeL8HNatwPSrUuDSFDz8KZdOeDlY+XFLqy3mpXwp+YNRk+4tK91Kh3TIK+rrqnCp
EUp1vWhPpHo7AQ4MoWUR28B9JKSiGiOetHlphO7F6gleF5bosSOBrmugse1cCUSa
sxmidILvQCAmbmW45QMXa+oEBZiuEkVZq/amk0oGguTLdGIFV/MsJq9QepaNERpu
WSaEaiKXHKj60ztjGQHzU+avjKHZAFUkcN6oMxzX0BE0VpS3jKHvNbPp8no6uDlo
p9fm1GP0G2HHIPv3BX5VC3MYeRpVq4O1pyCHhr8+bLqB2vWqmWskQnLRcOGrpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:32 2025 by rpki-client