Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fJgGLgd3-ywHuBKxEZhW0LMOOmI.roa
File: fJgGLgd3-ywHuBKxEZhW0LMOOmI.roa (raw, json)
Hash identifier: 9a1WX5IEmnloyrtbWxwcDRKCYk59iHYyUD0oLXn6Pvo=
Subject key identifier: 7C:98:06:2E:07:77:FB:2C:07:B8:12:B1:11:98:56:D0:B3:0E:3A:62
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958C2CA1B6B4ECDAD706DE21B03D5BD8BA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fJgGLgd3-ywHuBKxEZhW0LMOOmI.roa
Signing time: Wed 12 Mar 2025 21:04:49 +0000
ROA not before: Wed 12 Mar 2025 21:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:8c2c:2cc6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:2c:a1:b6:b4:ec:da:d7:06:de:21:b0:3d:5b:d8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 21:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c98062e0777fb2c07b812b1119856d0b30e3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:2c:d1:dd:f1:98:f0:50:1b:ca:3a:79:b0:
11:ba:2e:1b:c3:d7:fb:3d:94:d4:88:aa:f1:63:1c:
fc:21:fc:ef:4e:74:4f:0f:9a:4f:0d:fc:b9:9d:f7:
12:e3:d8:e8:78:89:aa:de:f4:6c:4d:24:ee:83:ad:
e8:cb:3b:4e:7c:79:86:60:39:1d:bd:73:88:c6:0d:
36:d8:ec:5a:4a:b7:17:f9:c1:b2:e4:3c:8c:50:90:
6d:09:40:4e:37:7e:1a:62:67:ad:a2:32:7a:5a:ed:
db:31:24:d1:fc:1d:0f:5b:6c:cc:91:94:a6:5c:f5:
7c:09:7d:e6:75:0e:de:b6:ed:f5:70:0f:4a:e6:98:
f0:7a:45:01:ea:67:3c:35:41:90:dc:ba:c5:6c:47:
c6:29:02:fa:4e:0e:e4:18:36:28:e8:b8:7c:58:69:
c4:ad:63:0a:42:07:0b:2d:46:a2:fb:81:ba:24:78:
9d:ba:6a:a6:5c:bf:c2:1b:d3:9f:33:dc:e5:2c:b9:
ec:8c:bc:c5:a3:bd:7f:91:78:f2:8c:47:bf:e4:73:
72:ef:88:7c:17:78:cd:7f:cd:55:db:21:52:41:3c:
ca:97:4d:27:f1:6d:dc:76:8a:a6:70:2c:0b:07:fe:
40:6c:66:ac:b7:78:99:5a:18:1a:c4:26:d4:48:60:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:98:06:2E:07:77:FB:2C:07:B8:12:B1:11:98:56:D0:B3:0E:3A:62
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/fJgGLgd3-ywHuBKxEZhW0LMOOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:8c2c:2cc6/128
Signature Algorithm: sha256WithRSAEncryption
40:9f:29:11:42:58:3f:ac:33:e5:2f:3f:58:44:95:0e:44:73:
b4:dc:1c:17:9d:51:d3:0a:94:f6:1d:a2:1a:9d:36:98:8f:e6:
b1:1d:4a:fc:41:9b:d4:49:56:6e:90:55:74:00:45:05:bd:41:
2e:f0:08:dc:8e:e9:21:12:f5:dc:24:e8:58:60:56:8b:bc:74:
81:9b:6a:4b:d4:32:b2:64:f7:f2:20:d8:bc:1d:8f:b0:65:fd:
ab:fb:5c:04:2a:e5:f9:bf:01:5b:d9:da:1e:4f:02:ee:8c:fd:
93:f9:c0:9b:ab:65:97:6a:82:84:5e:c0:d2:0a:99:68:04:99:
ec:54:fe:21:fd:00:f3:f4:ca:23:0d:76:8f:8c:4e:60:ad:34:
f2:c2:d2:6b:62:5b:9b:69:99:33:5f:6a:92:98:77:75:22:26:
95:31:77:75:6c:5a:eb:5a:46:e4:7b:9e:3b:a9:2f:a7:fc:04:
51:a7:3b:d7:b0:76:66:2a:11:b8:62:18:16:b1:df:a4:38:d2:
6a:7f:64:9e:d8:75:82:76:0e:7f:b7:18:96:f7:c4:78:4a:c6:
51:f8:f8:d8:13:82:2e:95:b6:e9:76:44:1f:9c:cb:5e:66:7a:
11:52:c5:2b:14:04:f4:56:38:aa:6d:1e:e8:c1:b2:30:d8:0c:
9e:3d:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:31 2025 by rpki-client