Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iG0r69qB454sDr5T5blQK762C8Y.roa
File: iG0r69qB454sDr5T5blQK762C8Y.roa (raw, json)
Hash identifier: HKJ7EUBVFKOotljFkhzAWMUGgdKLtnx3acodlQKj4ro=
Subject key identifier: 88:6D:2B:EB:DA:81:E3:9E:2C:0E:BE:53:E5:B9:50:2B:BE:B6:0B:C6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959912EF2678F8DB76EBD76524D9A8F753
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iG0r69qB454sDr5T5blQK762C8Y.roa
Signing time: Sat 15 Mar 2025 09:11:49 +0000
ROA not before: Sat 15 Mar 2025 09:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:99:12:ef:26:78:f8:db:76:eb:d7:65:24:d9:a8:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 09:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886d2bebda81e39e2c0ebe53e5b9502bbeb60bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:29:38:f6:e8:a4:80:4c:b3:82:4c:31:af:
91:16:11:ea:df:b1:cd:16:39:22:9b:b6:dd:f3:5a:
12:61:7e:6e:00:cd:f1:24:4c:df:18:a9:e6:29:25:
c5:2f:cc:ec:0b:8d:26:22:3c:d6:93:a1:bc:2b:88:
1c:aa:dc:43:1c:90:a5:b9:01:d4:9a:9b:52:10:1b:
c4:be:03:5b:40:dd:c0:10:4a:72:fd:51:cd:23:ea:
4d:06:aa:aa:71:f0:0b:9d:6c:87:65:fd:cd:a1:b0:
12:a4:b4:4f:0c:65:93:87:8a:89:42:e1:e0:d4:d7:
3c:9a:88:40:70:2b:f4:1c:f7:6d:31:bd:44:60:fa:
8f:0e:0b:a2:f7:47:55:74:eb:9f:30:65:90:23:1b:
73:f1:ca:60:79:47:c8:c7:13:fd:e0:c9:12:3a:de:
ab:8a:82:f1:dc:c8:65:eb:04:38:1a:06:15:d8:fb:
04:c7:c7:f7:db:bc:cc:12:ec:e3:7c:67:31:7d:f5:
03:61:ea:76:ad:90:bd:04:e6:ad:e4:42:44:92:33:
d5:a3:1f:f6:49:e2:f1:a9:8b:e2:b4:a9:22:fb:05:
24:c1:d2:a2:b8:64:02:b3:11:38:44:48:33:6c:e2:
8a:00:cc:05:32:82:13:9e:2b:bf:75:e1:07:c0:82:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:2B:EB:DA:81:E3:9E:2C:0E:BE:53:E5:B9:50:2B:BE:B6:0B:C6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iG0r69qB454sDr5T5blQK762C8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
0e:49:20:da:c4:2c:4e:3c:b8:b8:2b:64:09:6f:60:55:8d:b0:
fa:76:b0:4e:9f:0c:c0:58:d8:0c:e7:05:3c:da:c6:fc:f5:96:
a9:67:0a:1a:46:45:6c:cd:31:20:fe:7b:6f:12:9e:d6:0e:14:
67:d2:be:c2:99:50:19:12:36:53:8c:19:d4:97:4d:b0:a5:fa:
84:96:e1:ea:2e:ab:b3:4b:63:d8:0d:c3:11:94:36:6c:25:98:
f6:97:db:b0:9a:8f:71:db:bf:cb:8d:74:7b:74:e3:b1:4d:7d:
a9:89:ce:d1:70:b2:a2:0c:76:c4:1f:89:ae:bc:06:6c:0a:93:
df:33:8f:2a:5b:79:40:ca:ce:b4:86:7f:54:30:12:d3:18:9e:
49:18:61:73:1d:7d:f7:5d:50:48:73:2d:e9:ef:45:ab:a9:40:
c5:98:1e:cc:71:42:a0:25:8a:98:1e:cf:ba:e1:44:f4:73:ed:
f1:bd:16:b6:94:ac:6c:0e:a4:db:9c:65:9a:43:c0:56:d9:8b:
e2:5e:d0:75:8c:5a:ad:f6:98:7b:6d:36:4a:d1:fe:09:1b:78:
7f:7e:19:b7:a8:8c:32:b7:5c:56:0d:93:5f:31:d8:8f:ef:ad:
fd:2d:bf:36:3c:bf:8d:68:71:30:f1:eb:80:af:7b:59:27:95:
25:a8:3d:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:05 2025 by rpki-client