Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f2kU74-dyiUxjEayTGofvHgTcVM.roa
File: f2kU74-dyiUxjEayTGofvHgTcVM.roa (raw, json)
Hash identifier: pGkY8Pnqj/RREm+53I6tD8WDOYTHGAWcG1n2Erxk64Y=
Subject key identifier: 7F:69:14:EF:8F:9D:CA:25:31:8C:46:B2:4C:6A:1F:BC:78:13:71:53
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944E358965564B6D461BD466ED13842B64
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f2kU74-dyiUxjEayTGofvHgTcVM.roa
Signing time: Fri 10 Jan 2025 03:15:18 +0000
ROA not before: Fri 10 Jan 2025 03:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4e:35:89:65:56:4b:6d:46:1b:d4:66:ed:13:84:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 10 03:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6914ef8f9dca25318c46b24c6a1fbc78137153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:91:6c:c2:0c:dc:64:0c:cf:24:98:ca:c5:
eb:c4:d4:bf:c6:f1:2a:ad:e4:5a:02:21:76:88:b6:
87:54:ec:ac:ac:c1:d6:c3:7d:23:c5:a7:25:7b:e7:
0f:f8:4f:37:1f:50:0b:f6:19:5f:68:a2:cd:ac:1a:
99:9a:35:83:ab:77:e9:96:d8:68:bb:8b:d3:03:02:
d4:0b:d3:e0:38:ca:4d:dd:18:62:fc:c3:91:43:6d:
2e:ca:c9:36:9d:18:e6:53:a9:74:e1:a1:c6:96:95:
2c:46:2a:ec:0c:fb:fc:35:ab:5a:2e:06:16:0f:f3:
9c:41:96:76:2a:cc:71:62:a2:6a:be:b7:ab:a4:7f:
53:2e:e1:27:cd:c8:7a:df:a8:d3:4a:14:e4:72:9f:
b8:93:0d:11:89:fb:32:92:b3:b2:f5:cf:89:3e:ae:
ac:f9:42:29:4a:0d:09:50:fa:db:cb:64:23:3d:9d:
7d:ff:fe:82:7c:8e:3e:72:07:bc:f7:c1:92:29:22:
3f:71:3e:1c:82:6d:53:c9:1c:cd:07:78:49:f6:dc:
48:93:f8:6a:e9:09:d3:f6:cb:d8:65:79:f2:af:cf:
0a:82:c0:6d:d6:9e:a5:04:f8:ef:01:1f:a3:2c:b2:
67:21:bc:4d:68:00:93:20:c6:72:a1:d0:84:4f:77:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:14:EF:8F:9D:CA:25:31:8C:46:B2:4C:6A:1F:BC:78:13:71:53
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f2kU74-dyiUxjEayTGofvHgTcVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
01:a5:fd:91:86:25:c5:0f:b3:83:a5:43:7e:c7:1b:8c:c7:ed:
b1:4c:10:b6:e5:db:80:e3:51:5a:c2:f2:96:1f:d2:68:1b:fc:
8e:fa:1b:58:11:7b:f8:15:d1:09:d0:dd:41:17:02:87:2c:f4:
0e:96:59:c2:a4:70:92:14:67:34:df:ed:61:32:9d:fa:13:19:
96:d7:8a:6e:27:7a:85:82:13:b8:15:6c:15:46:8f:22:e7:42:
ea:79:fb:e0:61:55:1b:a1:13:79:cb:a5:54:8d:d8:ad:fa:2c:
df:42:9e:5d:37:89:62:8c:6a:6e:43:ad:d6:dd:a5:30:54:db:
83:8c:81:5e:54:7d:18:b9:b3:ef:f4:e0:f2:f5:fa:22:2f:7b:
2f:9f:70:6c:5d:66:70:5a:26:33:c7:73:f4:b3:7b:a2:f0:f7:
b0:2b:ba:d6:03:46:c8:a0:4b:59:70:dd:47:ec:2d:74:97:5c:
73:8d:dc:0a:77:f9:ee:25:83:f8:2c:d5:ea:c5:d9:55:40:ed:
25:4f:48:72:f2:be:67:e5:8f:eb:0d:43:64:a2:a1:39:8d:96:
57:57:d4:8e:ff:9e:50:77:a8:00:07:90:28:17:74:5d:32:88:
65:71:d0:f2:74:ea:c4:a9:0e:37:95:72:b6:de:23:5a:8c:9b:
dd:9c:5e:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:01:01 2025 by rpki-client