Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAnYUyg31dFj1aXgojsd4mDZzEI.roa
File: iAnYUyg31dFj1aXgojsd4mDZzEI.roa (raw, json)
Hash identifier: uED3HZgpsbIMPtqd+dv5Prbw2imx95rmd7KZf5dRYPU=
Subject key identifier: 88:09:D8:53:28:37:D5:D1:63:D5:A5:E0:A2:3B:1D:E2:60:D9:CC:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019597F9DE58C4FB6BF5FF9D913412AD4DC6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAnYUyg31dFj1aXgojsd4mDZzEI.roa
Signing time: Sat 15 Mar 2025 04:04:49 +0000
ROA not before: Sat 15 Mar 2025 04:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:97f9:8060/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:97:f9:de:58:c4:fb:6b:f5:ff:9d:91:34:12:ad:4d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 04:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8809d8532837d5d163d5a5e0a23b1de260d9cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:b1:34:90:71:cc:46:eb:bd:46:6d:ea:c2:
8d:c7:d3:4a:16:ab:03:7b:73:e0:35:a7:b3:3f:c1:
a0:b5:85:e1:68:ac:7b:e2:16:a3:bb:c7:70:4c:e4:
36:68:32:2b:fc:d4:28:14:30:70:91:d2:27:8b:b4:
8a:20:66:c2:2e:4b:30:7c:55:b0:6d:1a:11:d4:61:
7e:aa:ad:9f:1e:54:cd:ea:62:3b:92:d6:f2:a6:04:
0e:5c:4c:60:58:95:30:8d:60:4c:53:b8:43:8d:c8:
48:5f:1c:24:80:5c:1e:83:05:6d:7e:a5:ff:59:19:
0a:c2:a5:e3:2b:e5:84:23:28:12:67:9b:9c:33:a5:
0a:53:de:ae:9f:d7:c9:dc:f8:47:19:67:1e:e8:37:
f1:32:7a:36:40:4c:fd:66:d5:ec:05:85:d2:d6:8c:
64:a4:a0:f8:ec:b4:fe:de:24:47:19:f4:51:94:51:
3f:10:aa:f6:eb:24:42:74:fc:fa:c1:60:a0:38:b1:
24:e8:23:7b:d1:5f:64:0b:78:3f:31:22:d4:06:94:
24:62:0a:2a:f7:79:9b:4d:1a:62:e4:4a:31:e2:ba:
15:56:2b:79:44:aa:39:c9:ac:3d:0f:26:0f:ec:46:
24:a0:1e:9c:f8:5b:01:ab:c0:a7:ad:76:b1:e8:c3:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:D8:53:28:37:D5:D1:63:D5:A5:E0:A2:3B:1D:E2:60:D9:CC:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iAnYUyg31dFj1aXgojsd4mDZzEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:97f9:8060/128
Signature Algorithm: sha256WithRSAEncryption
2d:a0:ef:b0:50:d1:aa:5a:2d:ae:e9:54:e2:a3:a6:81:d5:03:
ce:e8:7a:bb:bc:97:01:75:7a:a8:a4:97:96:e8:32:94:c6:7f:
4a:81:75:08:de:11:5b:3b:02:4d:6d:99:89:b1:51:fa:08:c3:
42:d9:df:49:d8:79:38:b7:b6:9a:0d:94:18:c0:92:f1:8e:70:
7d:a7:da:6d:7c:96:3a:ee:a9:53:bf:02:f8:00:09:76:e1:35:
0c:a2:e2:53:46:9f:aa:2f:5b:0c:73:57:6f:f1:3e:ba:90:3f:
b4:1c:d2:34:dc:90:37:95:99:0d:aa:20:c5:02:88:b1:bb:4a:
e7:86:e9:8b:15:f8:70:0b:a4:6b:0e:0b:d9:92:ac:ae:19:8d:
09:6a:08:56:c8:4d:4c:c5:01:74:52:2a:29:95:92:3e:21:af:
c5:75:11:ff:c6:d0:2f:e2:31:13:a6:91:41:fa:a4:33:40:61:
b8:0f:40:73:28:c4:fb:2f:f2:02:e9:cb:6f:a0:62:d1:da:40:
0f:e2:fb:98:5f:80:70:ff:54:ff:d4:ca:c8:87:1a:3e:a2:d2:
f1:0f:a2:2e:0f:3a:28:ce:e7:27:4c:59:1f:24:23:85:5a:27:
54:5e:03:6a:24:d1:bd:e6:3d:93:8c:83:16:f3:4b:43:6d:01:
3b:63:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:25:55 2025 by rpki-client