Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jAHWi0hE2bKhanvoxshVH4-LaV0.roa
File: jAHWi0hE2bKhanvoxshVH4-LaV0.roa (raw, json)
Hash identifier: UxQRDJ8ZpGvqF7T5j0K8cWS1QkQoyKBqJA0pJWGLJ8k=
Subject key identifier: 8C:01:D6:8B:48:44:D9:B2:A1:6A:7B:E8:C6:C8:55:1F:8F:8B:69:5D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958BC701930AC7C5B78B9D44D1E4AAE32C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jAHWi0hE2bKhanvoxshVH4-LaV0.roa
Signing time: Wed 12 Mar 2025 19:13:49 +0000
ROA not before: Wed 12 Mar 2025 19:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:c7:01:93:0a:c7:c5:b7:8b:9d:44:d1:e4:aa:e3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 19:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c01d68b4844d9b2a16a7be8c6c8551f8f8b695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fc:09:b6:2f:dd:21:42:46:1d:bd:d8:5b:a5:
39:9a:ac:ef:3e:7e:37:e1:6b:9c:e1:53:2b:16:3e:
fa:52:5d:7e:93:46:b0:fb:1d:1e:e5:09:7a:2c:f5:
7b:6e:e4:86:fe:51:32:b5:96:7f:37:8e:bb:5f:1b:
a2:3f:d3:a0:52:7f:e2:31:0b:fd:e7:82:8f:f2:92:
ba:50:dd:e0:e5:2b:3d:3f:e7:e2:a4:45:86:6e:e1:
e9:65:2a:7d:d0:36:57:2d:b1:7a:9b:6f:1e:80:eb:
20:c6:48:ce:de:db:36:e5:f7:d8:48:b4:ca:47:e0:
a6:42:9a:b2:9a:b7:4e:15:21:5d:a4:a4:b3:a6:9c:
ed:9b:f6:1e:78:d4:e1:e8:84:7c:07:83:84:ce:02:
70:65:40:71:ac:94:33:f1:3d:90:61:76:5a:68:6c:
7a:d2:c6:09:18:25:38:e2:c0:3c:43:3e:da:29:17:
b0:8b:6c:4a:b4:d5:d7:3d:e5:b3:c8:14:00:eb:a9:
1e:30:8e:b4:c0:61:d6:28:09:2e:6e:4c:3d:0f:7e:
b7:3c:76:7e:c1:17:14:66:2e:b4:37:d8:90:55:a1:
c2:68:fc:ce:c5:3c:d4:d3:d7:78:c6:75:4b:d1:2f:
b5:92:22:12:3a:4f:81:64:1e:91:ea:f3:af:09:c9:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:D6:8B:48:44:D9:B2:A1:6A:7B:E8:C6:C8:55:1F:8F:8B:69:5D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/jAHWi0hE2bKhanvoxshVH4-LaV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
62:4c:61:07:2b:85:6a:a1:cb:41:38:fa:0b:c6:cf:6b:6f:2c:
c6:e4:91:24:5e:b7:c6:32:af:9a:20:8e:73:b3:b7:0e:9a:34:
d1:9f:8e:e4:98:66:02:27:77:b8:b1:c3:4a:41:1b:b0:ad:8c:
a0:ea:10:5f:9a:f7:8e:64:c9:b5:cc:c5:56:cd:a8:56:6c:c4:
18:3f:c4:98:9e:0a:d6:b2:13:23:ba:91:30:ac:08:0b:5f:9b:
85:2c:dd:c5:ec:a8:ba:6d:c8:35:89:44:20:35:3e:62:53:55:
2a:e2:84:d0:ed:39:7f:6e:74:28:42:8a:2e:db:1c:f8:ff:84:
d9:57:b3:ac:4c:60:14:92:fa:30:d4:60:07:d7:e9:86:73:cd:
75:bb:58:82:22:24:4c:bf:cd:a0:af:98:b4:9b:8a:e2:54:34:
f6:88:41:d7:2d:e4:a7:01:7c:dd:c8:f6:47:6a:44:36:9f:1f:
e8:d4:fd:ce:93:cd:36:78:10:28:0f:c1:33:8d:7a:1a:84:71:
63:84:7c:ec:7f:2e:e9:b0:13:07:ea:fa:d9:b1:19:03:71:27:
bc:0c:5a:7b:aa:9f:26:32:41:f1:93:ef:22:34:1c:25:af:40:
69:9c:a5:29:9d:dc:29:24:a8:36:e6:a5:d5:23:fd:86:e5:46:
98:03:ed:7b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWLxwGTCsfFt4udRNHkquMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzEyMTkxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzAxZDY4YjQ4NDRkOWIyYTE2YTdiZThjNmM4NTUxZjhmOGI2OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vwJti/dIUJGHb3YW6U5mqzvPn43
4Wuc4VMrFj76Ul1+k0aw+x0e5Ql6LPV7buSG/lEytZZ/N467XxuiP9OgUn/iMQv9
54KP8pK6UN3g5Ss9P+fipEWGbuHpZSp90DZXLbF6m28egOsgxkjO3ts25ffYSLTK
R+CmQpqymrdOFSFdpKSzppztm/YeeNTh6IR8B4OEzgJwZUBxrJQz8T2QYXZaaGx6
0sYJGCU44sA8Qz7aKRewi2xKtNXXPeWzyBQA66keMI60wGHWKAkubkw9D363PHZ+
wRcUZi60N9iQVaHCaPzOxTzU09d4xnVL0S+1kiISOk+BZB6R6vOvCcnDoQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFIwB1otIRNmyoWp76MbIVR+Pi2ldMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvakFIV2kwaEUyYktoYW52b3hzaFZINC1MYVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAYkxhByuFaqHLQTj6C8bPa28s
xuSRJF63xjKvmiCOc7O3Dpo00Z+O5JhmAid3uLHDSkEbsK2MoOoQX5r3jmTJtczF
Vs2oVmzEGD/EmJ4K1rITI7qRMKwIC1+bhSzdxeyoum3INYlEIDU+YlNVKuKE0O05
f250KEKKLtsc+P+E2VezrExgFJL6MNRgB9fphnPNdbtYgiIkTL/NoK+YtJuK4lQ0
9ohB1y3kpwF83cj2R2pENp8f6NT9zpPNNngQKA/BM416GoRxY4R87H8u6bATB+r6
2bEZA3EnvAxae6qfJjJB8ZPvIjQcJa9AaZylKZ3cKSSoNual1SP9huVGmAPtew==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:49:28 2025 by rpki-client