Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f8ksO3z_f76BMyZ1s-ugAibdOLc.roa
File: f8ksO3z_f76BMyZ1s-ugAibdOLc.roa (raw, json)
Hash identifier: /COCak2oclPbYpLRXrx2zuOmHdyLMRyXYw+PYpka4Gc=
Subject key identifier: 7F:C9:2C:3B:7C:FF:7F:BE:81:33:26:75:B3:EB:A0:02:26:DD:38:B7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948257E7B1AD3CC9520677B7E2895802F8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f8ksO3z_f76BMyZ1s-ugAibdOLc.roa
Signing time: Mon 20 Jan 2025 06:13:06 +0000
ROA not before: Mon 20 Jan 2025 06:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:57:e7:b1:ad:3c:c9:52:06:77:b7:e2:89:58:02:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 06:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fc92c3b7cff7fbe81332675b3eba00226dd38b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:e9:41:de:f7:b1:1e:ad:1a:0d:7a:70:5d:
ae:f8:b7:30:be:02:47:91:d6:c2:ce:e3:f1:fa:ec:
b1:f2:63:e7:14:ef:b0:3b:94:74:81:af:cc:86:f6:
a1:f0:5b:dd:28:39:f6:e2:6f:e3:de:b9:79:f2:be:
23:a8:2f:50:66:e3:58:23:6e:9d:51:c3:ff:4a:36:
91:ed:ab:e8:57:2d:65:2a:1e:b5:c2:34:46:3f:57:
dd:58:a8:ff:35:83:4f:5e:72:3c:8a:6b:9e:c5:f4:
87:4d:da:44:71:41:fa:4d:b0:f6:37:06:55:14:a6:
2c:76:7f:db:70:ae:77:90:9b:de:a8:cb:31:27:50:
c3:37:06:07:21:04:0a:8c:b1:82:ab:01:7d:dc:e9:
05:b0:d6:c2:aa:45:5f:df:56:76:f3:34:45:bb:e0:
c9:1e:9a:9d:da:8e:2d:df:dd:5d:61:71:01:27:2c:
16:4e:89:33:fd:f8:d6:a1:7e:f0:55:35:fa:92:36:
b8:fc:6a:f4:1a:08:0f:92:1f:c8:bc:7d:81:35:27:
9a:02:41:22:2f:4a:71:e4:d6:e7:aa:60:c5:ae:10:
f1:6c:11:35:ee:1c:4c:e2:c0:87:52:a8:06:32:4c:
b6:33:49:98:69:56:32:fb:35:a3:d5:51:e9:e4:ac:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:2C:3B:7C:FF:7F:BE:81:33:26:75:B3:EB:A0:02:26:DD:38:B7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/f8ksO3z_f76BMyZ1s-ugAibdOLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
2f:a9:d2:08:72:82:3b:d4:9a:76:6c:31:f5:ea:4c:b3:b5:29:
82:f7:ca:67:5b:1e:89:3b:e5:fd:9a:e7:94:d0:80:64:dd:98:
9f:dc:7a:5c:36:3a:ad:47:1d:47:60:78:9d:72:d3:ae:ea:fb:
e4:91:d7:14:b4:b3:97:ee:bb:33:db:9f:b4:3f:b5:ad:01:58:
0b:c1:ab:83:ed:87:e3:20:47:99:83:60:bc:f7:0b:d0:fe:77:
bb:40:90:5c:5e:1b:c1:87:31:ac:e1:e5:f8:0c:25:d6:00:1e:
a0:ec:1c:f2:85:14:20:ec:10:62:38:f3:98:f1:8d:79:15:55:
f4:13:9b:d8:7e:6a:f9:17:9b:73:f0:d6:0b:3a:ca:bb:09:f8:
a3:91:8e:12:25:ca:14:98:cb:46:f9:a3:29:40:b0:66:15:4b:
62:9d:65:0a:09:a2:4b:e3:f0:67:dc:00:d2:82:84:a5:59:d8:
f2:04:ba:8f:58:64:85:9e:10:90:5a:68:75:24:34:fb:1f:d6:
8c:f8:f8:5a:43:e4:cf:ab:65:2f:11:2b:c7:c5:00:08:d1:da:
fd:47:29:a7:7f:64:a3:bf:5c:fc:32:57:c0:0b:d9:72:d4:b6:
01:31:1d:28:e4:b1:9b:c6:da:68:40:17:1c:62:f4:b0:d6:93:
19:29:c7:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:30 2025 by rpki-client