Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/g3riJkoSW7-RmUv2vnlPrZnGt2E.roa
File: g3riJkoSW7-RmUv2vnlPrZnGt2E.roa (raw, json)
Hash identifier: Pn6/iOqxk4JrPwbFhtWZXEvCl0y4u26AeglHNw4Pmd0=
Subject key identifier: 83:7A:E2:26:4A:12:5B:BF:91:99:4B:F6:BE:79:4F:AD:99:C6:B7:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019169E8FBFF65C5F9C36B0768AFD8B5EF34
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/g3riJkoSW7-RmUv2vnlPrZnGt2E.roa
Signing time: Mon 19 Aug 2024 09:12:42 +0000
ROA not before: Mon 19 Aug 2024 09:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:e8:fb:ff:65:c5:f9:c3:6b:07:68:af:d8:b5:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 19 09:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837ae2264a125bbf91994bf6be794fad99c6b761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:18:a1:23:d2:9e:62:d1:8c:80:33:d5:df:
75:32:3a:ca:9a:42:50:65:c2:83:71:2b:92:c8:65:
16:b3:ac:f8:53:85:82:f2:09:f0:ae:6e:09:b2:3c:
3d:73:07:fe:f1:4c:0d:5a:f1:23:22:86:9f:41:03:
ce:6d:a0:c8:b9:f4:29:35:76:c6:e9:4d:ea:fe:94:
f2:b8:95:e3:55:5f:d1:d9:78:60:00:40:43:12:e9:
dc:2a:1f:6e:84:1b:c4:4a:cf:1e:54:9b:a1:8e:68:
ca:62:5e:2a:96:c6:70:4d:75:e0:e1:9e:37:0b:36:
27:5f:2a:b0:24:23:cd:b1:db:9a:7f:a4:f8:1e:a4:
1d:ec:7d:85:3f:9f:dc:31:12:c9:d0:ed:74:e6:19:
fe:c5:0a:f9:61:6e:5d:0d:b9:5a:21:f0:31:88:b5:
a3:4d:80:6f:6d:46:1f:a7:91:56:0a:b2:bb:d0:e3:
7b:81:c5:f2:25:8a:ec:a5:af:e8:72:2a:2c:4e:40:
cc:2b:ad:96:37:23:f0:97:cb:e5:aa:3f:13:e7:51:
e5:00:81:fa:d1:25:af:0c:72:38:8a:76:5d:1f:1f:
ef:c1:ba:ee:6c:40:e1:36:33:09:e2:8c:82:dc:64:
6f:7b:41:a3:49:3b:08:b3:bf:75:ff:98:98:47:3a:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:E2:26:4A:12:5B:BF:91:99:4B:F6:BE:79:4F:AD:99:C6:B7:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/g3riJkoSW7-RmUv2vnlPrZnGt2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4c:ba:e5:d1:11:65:2b:5c:4e:d3:19:02:4a:18:3c:f5:2a:74:
5c:31:41:c7:70:5a:58:20:48:09:46:0a:30:86:ed:f8:8f:76:
66:fc:f1:70:e8:cc:74:a7:8e:8d:bf:2c:ad:97:9f:e1:b8:ab:
c2:4f:2d:7d:aa:93:b9:d5:2a:ee:a6:09:1e:82:d5:9c:e2:23:
f5:b8:8d:38:57:b7:78:dd:ba:51:72:e0:fb:30:4d:9c:9a:b4:
ed:13:5f:41:a7:fa:1d:fe:4c:42:c7:d1:2e:c7:5f:ac:93:4d:
9b:43:65:10:84:6a:a3:22:5e:e4:e5:b0:6b:ce:81:9d:4c:a0:
35:43:82:85:9e:3d:a5:34:94:3c:14:b4:8a:dc:9a:98:49:d0:
1e:14:99:dc:55:bc:0a:d0:b8:b2:a4:f1:d4:6c:2a:5f:f5:19:
06:3a:35:c5:79:bb:01:7a:b1:96:d3:c5:1a:0a:99:05:01:f2:
85:f3:93:8f:35:ba:f0:30:2d:7f:78:d0:93:45:06:4a:a7:d6:
62:41:fe:07:7d:3b:1d:44:54:f6:34:a1:2e:bf:da:87:9c:ac:
59:96:57:63:3f:fe:c3:7c:3f:44:28:dd:6a:6f:f8:2b:56:c6:
44:e4:7e:18:9c:64:54:65:18:07:35:33:10:46:a8:2e:f5:2d:
c4:d6:c2:24
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFp6Pv/ZcX5w2sHaK/Yte80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODE5MDkxMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzdhZTIyNjRhMTI1YmJmOTE5OTRiZjZiZTc5NGZhZDk5YzZiNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9QYoSPSnmLRjIAz1d91MjrKmkJQ
ZcKDcSuSyGUWs6z4U4WC8gnwrm4Jsjw9cwf+8UwNWvEjIoafQQPObaDIufQpNXbG
6U3q/pTyuJXjVV/R2XhgAEBDEuncKh9uhBvESs8eVJuhjmjKYl4qlsZwTXXg4Z43
CzYnXyqwJCPNsduaf6T4HqQd7H2FP5/cMRLJ0O105hn+xQr5YW5dDblaIfAxiLWj
TYBvbUYfp5FWCrK70ON7gcXyJYrspa/ociosTkDMK62WNyPwl8vlqj8T51HlAIH6
0SWvDHI4inZdHx/vwbrubEDhNjMJ4oyC3GRve0GjSTsIs791/5iYRzoiBwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIN64iZKElu/kZlL9r55T62ZxrdhMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvZzNyaUprb1NXNy1SbVV2MnZubFByWm5HdDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEATLrl0RFlK1xO0xkCShg89Sp0
XDFBx3BaWCBICUYKMIbt+I92ZvzxcOjMdKeOjb8srZef4birwk8tfaqTudUq7qYJ
HoLVnOIj9biNOFe3eN26UXLg+zBNnJq07RNfQaf6Hf5MQsfRLsdfrJNNm0NlEIRq
oyJe5OWwa86BnUygNUOChZ49pTSUPBS0ityamEnQHhSZ3FW8CtC4sqTx1GwqX/UZ
Bjo1xXm7AXqxltPFGgqZBQHyhfOTjzW68DAtf3jQk0UGSqfWYkH+B307HURU9jSh
Lr/ah5ysWZZXYz/+w3w/RCjdam/4K1bGROR+GJxkVGUYBzUzEEaoLvUtxNbCJA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:52 2025 by rpki-client