Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gAyfdZFvyIVor4rp1tbxV6c2WLI.roa
File: gAyfdZFvyIVor4rp1tbxV6c2WLI.roa (raw, json)
Hash identifier: XJ3f5zwr8Rbf4vAGVfpjNVt33yAqEpolJ/Tt/66/SP0=
Subject key identifier: 80:0C:9F:75:91:6F:C8:85:68:AF:8A:E9:D6:D6:F1:57:A7:36:58:B2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01911F6CB937D64EA1E3CAFE7FCFE8519776
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gAyfdZFvyIVor4rp1tbxV6c2WLI.roa
Signing time: Sun 04 Aug 2024 22:05:04 +0000
ROA not before: Sun 04 Aug 2024 22:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:1f6c:c7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1f:6c:b9:37:d6:4e:a1:e3:ca:fe:7f:cf:e8:51:97:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 4 22:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=800c9f75916fc88568af8ae9d6d6f157a73658b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:8d:f9:bd:00:4a:e5:b9:73:9a:b0:31:8f:
53:6b:83:e6:3f:a1:94:4a:50:08:f0:bd:c0:68:4e:
1f:26:a4:8c:de:e9:af:39:36:75:e1:32:eb:7f:75:
12:99:af:43:03:fc:98:d9:be:a9:75:bf:a9:74:a7:
f5:d9:36:b3:f9:57:ad:04:c5:9d:4e:86:9f:61:83:
f3:05:bb:56:a8:fc:d0:b1:82:c8:a1:0f:e1:1c:68:
b5:f5:17:2c:da:ca:26:a0:b2:5e:fb:84:16:c8:c7:
90:be:14:2b:43:02:bf:b8:65:47:f6:81:d6:fd:13:
6e:b5:e4:18:b1:71:64:4f:e5:76:ee:c4:7e:37:3c:
f6:a2:68:fd:26:9c:14:12:34:69:db:24:15:f1:d8:
9c:cd:57:d7:f2:c3:fc:f8:67:ab:31:71:e4:7e:00:
e1:3c:36:45:0b:8b:0f:b3:d2:55:4f:8f:17:10:c5:
fa:a8:67:aa:c6:62:77:14:bd:53:fd:22:0a:5c:c4:
c2:e8:60:77:f8:10:74:0b:26:08:f6:81:d1:28:af:
6e:ef:3e:90:b0:d2:6d:61:7f:f5:30:a1:b6:15:6d:
71:69:68:82:a0:5e:52:a0:e2:7f:17:5c:60:29:cd:
0a:45:b2:eb:48:03:16:58:d5:cc:4b:99:96:14:29:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:9F:75:91:6F:C8:85:68:AF:8A:E9:D6:D6:F1:57:A7:36:58:B2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/gAyfdZFvyIVor4rp1tbxV6c2WLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:1f6c:c7a/128
Signature Algorithm: sha256WithRSAEncryption
06:be:e3:24:b6:18:d0:86:48:83:20:ae:1d:14:e3:ab:58:d4:
6f:31:3d:93:84:e0:f4:a5:19:f5:c7:4d:dd:ad:3e:f4:0b:8b:
1a:d3:b7:88:79:bf:1c:f8:a8:0c:15:31:04:02:e7:14:20:f4:
77:2d:38:7a:5e:2b:4c:db:f8:94:f8:60:94:10:f0:cc:d4:54:
fe:30:fd:e7:dc:da:f0:c7:50:ef:f1:d9:b3:cb:c1:91:6c:73:
fc:12:ac:a7:c2:5d:1c:6c:18:56:62:f5:4f:93:3a:02:0b:65:
f6:d9:49:13:5d:a1:ce:b8:97:ad:2f:ce:bf:dc:f7:33:60:f6:
68:72:cd:c4:db:e1:66:29:80:a1:06:23:84:65:d8:38:5b:b1:
2d:e9:a4:a8:48:d8:9c:c8:c4:d3:35:d5:53:e1:cd:7c:ae:f4:
a1:72:45:5d:f4:43:c5:cd:2b:03:ac:be:4e:ec:da:29:45:c6:
98:1f:4e:7c:5b:89:a8:66:1f:bf:c5:0a:12:8b:2a:41:e0:e4:
d8:d9:07:52:b1:3c:97:86:eb:85:44:2f:aa:59:62:8b:54:7e:
d9:f6:65:b6:65:5d:7a:f9:2a:52:f0:8a:db:14:13:c9:2e:c1:
87:27:59:ad:53:c9:74:94:c3:60:41:08:d5:8a:bc:9b:7c:f5:
ca:09:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:50 2025 by rpki-client