Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lDD8BoGcuaZ7ObKJrzUx-8Depp4.roa
File: lDD8BoGcuaZ7ObKJrzUx-8Depp4.roa (raw, json)
Hash identifier: 88fYpLXRcMDlA7c6PCVxMnOUtuTf0qY4Rj9z4CuGKMQ=
Subject key identifier: 94:30:FC:06:81:9C:B9:A6:7B:39:B2:89:AF:35:31:FB:C0:DE:A6:9E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A6CF799088874F28BE8C445CB1ADB486
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lDD8BoGcuaZ7ObKJrzUx-8Depp4.roa
Signing time: Tue 18 Mar 2025 01:12:49 +0000
ROA not before: Tue 18 Mar 2025 01:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:cf:79:90:88:87:4f:28:be:8c:44:5c:b1:ad:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 01:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9430fc06819cb9a67b39b289af3531fbc0dea69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:5d:cb:a8:64:ac:74:b0:5d:a5:ca:92:dc:
bd:ac:d3:c2:4a:85:6c:70:f6:ae:34:f5:28:2b:46:
a0:f8:7d:6e:d8:47:62:09:17:db:a4:f9:5b:d7:ce:
c5:26:b9:db:eb:a6:0c:b5:19:02:f5:61:3c:95:9c:
1d:02:d9:6e:0a:e3:34:a5:86:4b:e6:72:8c:a7:f6:
31:a7:2c:b9:f2:71:7f:a0:8c:95:7d:af:67:f6:f1:
e9:83:63:bd:ee:57:a0:5a:fc:48:00:74:dc:00:20:
7b:f2:a1:48:76:ca:54:96:cd:e9:8a:02:e6:35:a1:
27:58:c3:52:12:08:3a:dc:03:da:32:bb:4f:b7:4f:
d3:a8:7a:f8:12:85:91:8f:84:46:99:f4:25:17:a0:
3b:2a:0c:c7:62:67:10:dd:02:08:a0:6e:5e:da:0e:
80:2f:4b:4c:85:80:2f:72:dc:a8:d1:8e:15:49:f7:
cb:d8:f1:64:a6:d4:ee:a1:fb:0b:4d:2d:de:9c:be:
63:8f:e3:35:99:03:fc:6c:14:50:02:61:36:21:cf:
ca:12:10:42:93:68:7b:07:15:34:ec:a6:5c:3a:88:
ce:2c:c8:e5:61:52:8a:66:f9:98:04:58:47:ff:27:
f7:a2:8a:eb:d4:c7:ff:dc:d7:44:ee:d5:87:75:dc:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:FC:06:81:9C:B9:A6:7B:39:B2:89:AF:35:31:FB:C0:DE:A6:9E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lDD8BoGcuaZ7ObKJrzUx-8Depp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
10:1c:fa:f5:65:b8:f4:ad:c9:13:97:fc:35:cf:ca:72:91:a0:
e3:aa:e2:12:f4:5d:d9:03:a7:6a:3f:c8:fc:eb:72:7f:cf:e3:
de:32:bc:b2:da:54:53:e5:c8:b7:05:c4:4e:4e:f8:a7:c2:cc:
f1:5a:fd:24:68:cb:04:6f:92:ae:d0:74:4d:49:cd:f7:5e:c3:
d6:8e:05:c8:33:89:9e:51:d0:d9:5f:24:7e:89:1f:a0:08:25:
40:e0:a4:c4:4b:c0:21:47:1a:f9:58:bb:fb:0b:e1:d5:d2:d4:
f3:b9:b5:41:b8:c5:ec:b6:b5:6f:ee:88:38:ab:2a:49:8e:43:
24:47:a3:fa:da:9f:71:e9:9b:be:de:68:fb:81:3e:cf:a8:43:
9f:8b:de:e3:98:47:40:0c:69:2b:2e:8f:b5:8f:2a:79:76:dd:
13:f4:b1:7a:06:75:bb:2f:6c:3f:ff:32:e4:fc:3a:e2:d0:a9:
f8:12:26:5c:00:66:29:8a:13:9a:e5:a6:c9:26:9f:3a:16:9b:
f7:62:df:6d:78:ef:7f:87:2d:9f:aa:c9:52:2d:57:65:c2:b1:
0c:16:bb:c4:b2:31:38:c0:7a:1f:1f:92:62:2b:26:07:47:48:
5b:a7:25:ef:0e:f2:db:b9:c2:6c:95:f1:a6:71:6c:f4:8b:79:
99:6e:1e:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:52:57 2025 by rpki-client