Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iHI5IZ4UNkK0pKNNci8HjG1XQH0.roa
File: iHI5IZ4UNkK0pKNNci8HjG1XQH0.roa (raw, json)
Hash identifier: HYq6WgHaw5vXzfknSFhSQxFo+0yDesw5v/0+m92RxTk=
Subject key identifier: 88:72:39:21:9E:14:36:42:B4:A4:A3:4D:72:2F:07:8C:6D:57:40:7D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019121609A15876E23F45853ADE52FB6816C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iHI5IZ4UNkK0pKNNci8HjG1XQH0.roa
Signing time: Mon 05 Aug 2024 07:11:04 +0000
ROA not before: Mon 05 Aug 2024 07:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:60:9a:15:87:6e:23:f4:58:53:ad:e5:2f:b6:81:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 5 07:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=887239219e143642b4a4a34d722f078c6d57407d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:8b:64:25:f9:a5:57:fb:27:91:f9:9f:9c:
35:00:f5:ab:aa:bd:c8:e4:11:a4:04:58:c9:a9:bb:
99:49:3f:f7:4b:38:28:44:d4:3f:1f:04:2f:44:9e:
2d:dc:d2:1e:a0:48:3d:ad:ac:2e:d2:af:1a:c1:1b:
0a:4c:ab:8c:c2:0b:37:0b:0e:0c:60:00:63:7c:a4:
be:63:74:97:3f:9b:6e:82:38:62:51:c9:5d:89:1a:
b1:41:f2:f2:3f:76:79:68:0b:7a:0c:42:da:bf:4e:
b5:2b:22:f6:33:ad:fc:64:b7:77:a8:2e:2b:d2:c0:
1b:db:dd:13:ed:04:73:ad:b4:94:56:72:6b:87:da:
1b:d2:d1:42:eb:e5:14:8b:17:87:f5:1a:e7:20:02:
84:87:3a:28:cc:1f:f1:6a:16:92:b8:14:22:55:3f:
a1:ae:ff:6a:e7:55:f8:be:2f:fa:fd:86:7e:37:e4:
a6:e2:7c:da:1f:50:85:37:ae:46:82:c5:10:28:ce:
2c:05:1f:ed:1d:ab:54:42:2e:1a:d2:af:4e:cd:c8:
2d:90:e3:5d:53:22:1e:c4:71:45:2b:01:9f:53:40:
06:62:d9:0c:e3:0f:02:86:e6:06:00:c6:af:83:8c:
dd:35:07:d0:f5:6b:6e:2b:5e:99:fc:49:09:7b:88:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:39:21:9E:14:36:42:B4:A4:A3:4D:72:2F:07:8C:6D:57:40:7D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iHI5IZ4UNkK0pKNNci8HjG1XQH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
26:b6:cf:fd:6c:e5:db:45:55:e9:d4:c9:1a:27:1b:af:e1:f6:
af:5c:d8:5d:c5:a9:5c:90:1e:92:b2:3d:40:41:ba:87:81:c0:
a2:f7:f3:6a:38:b1:d0:5d:92:3a:79:bc:5d:a4:1d:34:b8:28:
aa:00:62:01:a6:31:7f:44:8a:e9:2f:11:29:6b:4d:ee:af:a5:
82:0e:bc:8d:44:b8:1a:82:5e:4a:0d:b9:1e:95:75:fa:f0:ee:
d2:0a:16:ca:f9:9a:15:bb:2a:2a:a5:94:51:fd:fe:1b:cf:4b:
c1:f7:ae:88:d0:9a:8e:63:65:d2:98:38:05:bc:28:c3:a5:6c:
49:28:a2:03:3e:74:2c:7d:71:b6:c4:79:3c:4a:f6:f7:5e:81:
50:8d:de:6f:73:cf:9a:d6:b5:24:d2:51:93:2c:6f:35:b4:2b:
0a:4b:21:63:85:6e:b0:9a:27:87:df:be:df:7e:94:3f:8b:5d:
09:39:2f:c3:65:16:c6:a3:f5:85:31:c8:83:88:8f:d8:f9:39:
e4:d0:e8:91:dc:8e:a6:ed:96:05:3a:ea:34:16:8d:e8:2a:32:
4d:54:87:25:69:a6:f0:00:b7:b4:fb:71:00:4a:55:6b:9e:f9:
de:11:32:8d:ea:6d:1f:c4:d3:c0:0b:e6:d6:0f:76:af:63:ed:
95:14:77:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:52:19 2025 by rpki-client