Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eGmxtP8dBzbzb21SwUOU7W-GFm4.roa
File: eGmxtP8dBzbzb21SwUOU7W-GFm4.roa (raw, json)
Hash identifier: NeSrSCUXiUySyZLwD61iObTaIY3VxRwHAFVcMqDJ6jw=
Subject key identifier: 78:69:B1:B4:FF:1D:07:36:F3:6F:6D:52:C1:43:94:ED:6F:86:16:6E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195196065A429DDB9FA41D89F91F8509718
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eGmxtP8dBzbzb21SwUOU7W-GFm4.roa
Signing time: Tue 18 Feb 2025 14:05:02 +0000
ROA not before: Tue 18 Feb 2025 14:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:195f:b764/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:60:65:a4:29:dd:b9:fa:41:d8:9f:91:f8:50:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 18 14:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7869b1b4ff1d0736f36f6d52c14394ed6f86166e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:dd:1b:06:c0:08:6f:cf:ce:5f:fd:14:96:
b9:4b:8b:4c:85:d1:6f:7f:c3:ca:c7:ea:e5:0e:7d:
00:55:43:32:3b:92:20:1d:ca:e8:e9:34:ed:66:9e:
6b:5b:71:ee:9d:0e:02:80:92:79:6b:6a:e2:6c:53:
16:fa:40:54:8b:15:56:9f:53:7e:0a:35:77:5c:11:
f3:0a:84:87:da:ed:af:75:6c:74:9d:e0:85:89:f7:
87:11:d4:5f:90:6b:a5:36:c5:30:8c:3f:b2:ed:cd:
ea:3c:e1:c3:f0:41:31:e6:6f:c0:4c:de:6f:c5:91:
d5:3c:98:fb:1f:95:3a:c3:a1:4a:1b:82:09:1e:1b:
13:b7:76:16:1e:66:53:ac:1a:b0:f3:a6:d7:5b:ed:
84:58:ea:09:b7:81:bd:5d:40:81:b2:50:1f:ed:cf:
d4:30:82:2f:cc:fe:f6:b5:a9:78:26:bb:08:26:90:
43:bc:1e:af:69:d7:00:bd:76:b3:4e:a9:5f:79:99:
06:a8:16:78:41:54:76:0b:1f:cd:22:4f:60:26:6e:
d7:38:0b:f5:41:70:52:09:a6:2e:d7:36:96:e5:e7:
f1:c1:17:20:df:74:5f:a4:31:fd:e9:38:1f:16:e1:
c8:cc:29:76:84:fd:b6:cf:21:5c:19:0d:97:33:ba:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:69:B1:B4:FF:1D:07:36:F3:6F:6D:52:C1:43:94:ED:6F:86:16:6E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eGmxtP8dBzbzb21SwUOU7W-GFm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:195f:b764/128
Signature Algorithm: sha256WithRSAEncryption
3e:cb:2d:b1:5b:9b:6e:1a:26:fb:50:f5:67:73:9d:a5:92:d4:
69:fa:01:99:39:e1:03:7d:42:95:d1:fd:9a:f8:0e:cc:ad:eb:
a5:de:df:0b:64:3e:55:7e:6d:f9:96:e5:f0:fb:e4:45:fb:68:
11:fc:57:a4:ae:4c:b9:ee:44:55:ae:71:ed:bd:3b:6b:f3:cd:
93:1e:4d:fc:75:fc:68:f1:e3:81:4c:ab:24:5c:f7:32:7b:32:
ac:bd:75:76:8e:f9:fa:d0:bc:9d:c5:cc:89:4f:35:66:66:6c:
b7:b4:87:91:5c:b8:54:1c:6b:f8:79:ef:69:6a:89:9d:5e:4b:
59:71:78:90:24:33:eb:d5:be:04:95:af:3a:6a:48:42:7e:e2:
57:c6:96:90:34:1c:44:89:1b:0d:e6:56:17:3f:80:3b:f9:f0:
31:2e:b0:3f:a9:66:48:a4:6b:a5:b0:69:1b:d9:55:db:a9:a2:
55:95:bc:56:9d:02:b5:21:4e:8f:28:cb:ce:ff:83:7d:b6:e6:
2d:fd:35:d0:ca:72:4e:24:04:fa:99:dc:b4:48:5e:c5:ea:2d:
ee:f1:8a:8a:a6:df:de:0c:76:b7:e8:84:26:ad:03:2d:7b:fb:
2f:b0:30:68:82:34:52:f1:28:65:48:d3:6f:26:a9:2b:40:e7:
84:d6:2a:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:59 2025 by rpki-client