Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k9QjldZ5hZVb_DGebRZ9ipV6Wzk.roa
File: k9QjldZ5hZVb_DGebRZ9ipV6Wzk.roa (raw, json)
Hash identifier: /Uip9IWEIzZum1dnqLZ2bAImYw2Om+iz2yDFmb8EYWA=
Subject key identifier: 93:D4:23:95:D6:79:85:95:5B:FC:31:9E:6D:16:7D:8A:95:7A:5B:39
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948C6DB190F624D666ED385D984D47F9EA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k9QjldZ5hZVb_DGebRZ9ipV6Wzk.roa
Signing time: Wed 22 Jan 2025 05:13:06 +0000
ROA not before: Wed 22 Jan 2025 05:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:6d:b1:90:f6:24:d6:66:ed:38:5d:98:4d:47:f9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 22 05:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d42395d67985955bfc319e6d167d8a957a5b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9c:b9:ce:8e:1e:26:53:0d:ad:62:1b:db:27:
92:47:58:79:59:5d:e2:ad:4f:b9:85:d7:88:85:ab:
d6:d6:46:65:25:c8:9f:b0:49:f2:3d:54:d8:07:e5:
38:73:a6:43:6b:92:93:39:44:d7:aa:3f:d0:d1:56:
05:ff:a8:c5:5b:82:56:e5:17:49:b8:ac:7d:92:bb:
59:da:46:51:63:9c:9a:3f:44:e0:ea:2b:7b:7b:48:
ef:c4:98:c9:5e:1c:fb:7c:bb:01:35:fe:c2:ea:68:
83:1a:77:36:34:dd:34:1d:ec:9e:0b:8a:4c:ef:26:
bf:b8:43:26:ca:b0:e2:4b:c2:4b:b8:91:81:6a:be:
4c:cd:3d:1a:a0:5d:e2:54:ab:2b:16:22:b7:5d:51:
b3:70:4f:24:c0:ee:9b:6e:61:8a:a9:79:a8:12:f9:
98:38:52:70:c2:b3:1c:0e:8a:4a:b4:91:6c:a1:e8:
c8:59:94:cd:bc:54:91:99:60:5b:b3:92:fe:69:b6:
4c:f5:1e:06:85:ee:9f:09:a7:91:5a:ac:dc:1f:cc:
cb:13:a5:40:b7:53:36:12:5e:b9:83:e3:af:e1:f6:
a1:b7:62:a1:3a:b7:1a:c8:96:92:59:5a:c9:56:e5:
1b:b2:f9:97:fe:00:b8:90:e1:85:5a:57:88:e2:f5:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:23:95:D6:79:85:95:5B:FC:31:9E:6D:16:7D:8A:95:7A:5B:39
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/k9QjldZ5hZVb_DGebRZ9ipV6Wzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
11:11:cd:09:4f:28:4b:1a:98:43:02:90:43:9d:4b:fa:40:4b:
4f:f2:80:e0:d9:63:40:c6:d0:71:2f:35:fe:ad:f7:5f:2a:99:
a4:f9:8e:bc:0e:30:ab:b4:d0:a6:d1:41:47:51:a4:00:2e:c7:
cb:56:94:1b:05:6f:a4:bd:53:20:8b:76:95:99:a3:1d:10:c6:
b0:0e:77:13:e6:49:77:4c:91:d1:a6:3b:93:a9:14:d1:e3:9c:
9c:b0:e5:56:0b:52:2c:52:6b:49:e4:ac:38:f6:04:f4:19:27:
c2:57:b5:72:25:92:1b:f3:89:70:03:e0:5a:86:dd:66:73:ad:
d6:aa:86:79:db:b5:af:9a:9b:27:48:ea:43:07:e5:ae:94:84:
93:e6:9f:bf:1e:c6:0a:ac:a5:59:64:5c:f4:9c:92:b0:8d:ba:
03:66:19:e5:87:c1:40:8f:d2:85:96:bf:0c:8b:5b:61:56:90:
a6:14:83:e4:e4:4b:78:45:4b:f5:13:3a:5d:12:4a:53:07:f1:
f2:76:67:a3:a2:cf:10:b2:af:6e:24:ab:ed:3c:aa:f8:02:a6:
9d:73:34:b8:ce:3a:2f:4a:ff:c3:a5:4b:5b:25:26:18:47:8c:
aa:60:43:56:8e:f7:81:9f:01:5f:65:2d:86:8a:c2:9e:af:ad:
e0:2c:10:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:18:12 2025 by rpki-client