Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lPKZvBxF15JOOXzrkF2wF7md3ts.roa
File: lPKZvBxF15JOOXzrkF2wF7md3ts.roa (raw, json)
Hash identifier: l/UY56OWMrslOZOY3/St3CdCT1wLPUosM9ozAKSIsfk=
Subject key identifier: 94:F2:99:BC:1C:45:D7:92:4E:39:7C:EB:90:5D:B0:17:B9:9D:DE:DB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01915E8779D6895CFC2A5137417A1B55FA3D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lPKZvBxF15JOOXzrkF2wF7md3ts.roa
Signing time: Sat 17 Aug 2024 04:10:22 +0000
ROA not before: Sat 17 Aug 2024 04:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5e:87:79:d6:89:5c:fc:2a:51:37:41:7a:1b:55:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 17 04:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94f299bc1c45d7924e397ceb905db017b99ddedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:4b:fd:b8:46:db:b6:18:ae:48:1d:cb:d6:
62:9a:7d:78:4b:ef:7b:e3:2e:5b:3e:d9:0e:41:62:
cb:af:39:21:57:76:eb:f9:65:9b:e8:d3:19:cb:10:
9e:b3:43:6c:24:f7:54:de:7c:aa:12:bf:12:cd:ed:
f6:4e:64:2c:1e:5c:f7:b2:b6:c2:61:cf:7e:61:a6:
7f:0b:ad:70:01:d7:c7:83:cf:bc:2d:c2:40:19:98:
83:d3:21:1f:9b:82:65:83:0b:54:fd:df:bb:8f:1a:
59:d2:27:0f:3d:10:4b:c7:24:c4:bb:e6:25:55:3b:
ba:83:01:64:08:7d:db:aa:14:d9:10:9e:47:fd:69:
95:6e:97:53:bf:71:15:b9:65:d1:3b:74:64:7e:e1:
6c:5c:d8:64:36:5b:eb:8d:a5:f5:2d:72:bc:05:7b:
ef:f8:f8:32:45:f8:cd:c9:c1:08:98:ef:20:7f:01:
a2:3d:2d:e7:d6:2a:45:f7:a6:df:b9:7f:06:67:92:
68:52:1f:73:73:45:cf:30:93:f8:6c:2f:f3:52:95:
14:9d:0c:29:99:c3:65:e0:9c:90:39:d7:aa:c6:18:
50:19:64:be:a1:ee:e1:4d:d9:f2:45:1e:95:f2:93:
84:48:52:ad:78:56:50:38:52:fa:f2:9a:be:a5:ca:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F2:99:BC:1C:45:D7:92:4E:39:7C:EB:90:5D:B0:17:B9:9D:DE:DB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/lPKZvBxF15JOOXzrkF2wF7md3ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
86:d8:6a:62:3b:31:68:10:e3:51:d7:d1:cc:5b:32:4d:e2:55:
fe:02:e3:7b:da:b2:ee:da:99:a5:6c:d3:7b:52:28:c7:80:95:
67:92:ba:0c:8d:df:44:a0:24:6a:19:bb:ef:96:7a:53:9b:38:
35:70:d2:aa:80:bf:a5:e8:ae:fa:35:0d:42:85:72:dd:c0:10:
f6:84:fc:89:31:99:84:74:10:98:58:3b:03:6a:46:2b:81:54:
56:d5:80:9b:ed:ad:8f:35:f9:66:af:ed:e0:f3:21:fa:6a:5a:
64:ef:41:8d:61:fd:26:9e:77:ba:de:1f:88:46:2b:4f:5d:d8:
c7:6f:ab:3c:66:fa:31:3c:7c:cb:f2:fc:66:29:35:60:ee:65:
0a:e5:d9:8e:ee:8d:ab:6d:fe:5c:99:e5:29:65:e5:27:1a:fb:
58:6c:de:56:8f:44:c4:3a:35:40:9a:03:b3:95:16:38:0d:94:
b1:87:fb:1f:22:72:e6:05:a0:87:97:8d:43:8d:87:eb:44:1e:
78:6a:a1:68:47:c9:b3:ad:7f:1d:69:45:cf:86:2b:c6:c3:9e:
7d:c2:43:cb:93:b8:fa:2b:81:8f:cd:85:dc:e4:e3:e1:c0:16:
43:4f:d7:48:41:54:6e:0d:65:06:ed:37:3e:d8:0e:80:41:59:
8d:80:25:2d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFeh3nWiVz8KlE3QXobVfo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODE3MDQxMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGYyOTliYzFjNDVkNzkyNGUzOTdjZWI5MDVkYjAxN2I5OWRkZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZL/bhG27YYrkgdy9Zimn14S+97
4y5bPtkOQWLLrzkhV3br+WWb6NMZyxCes0NsJPdU3nyqEr8Sze32TmQsHlz3srbC
Yc9+YaZ/C61wAdfHg8+8LcJAGZiD0yEfm4JlgwtU/d+7jxpZ0icPPRBLxyTEu+Yl
VTu6gwFkCH3bqhTZEJ5H/WmVbpdTv3EVuWXRO3RkfuFsXNhkNlvrjaX1LXK8BXvv
+PgyRfjNycEImO8gfwGiPS3n1ipF96bfuX8GZ5JoUh9zc0XPMJP4bC/zUpUUnQwp
mcNl4JyQOdeqxhhQGWS+oe7hTdnyRR6V8pOESFKteFZQOFL68pq+pcp59wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJTymbwcRdeSTjl865BdsBe5nd7bMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbFBLWnZCeEYxNUpPT1h6cmtGMndGN21kM3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAhthqYjsxaBDjUdfRzFsyTeJV
/gLje9qy7tqZpWzTe1Iox4CVZ5K6DI3fRKAkahm775Z6U5s4NXDSqoC/peiu+jUN
QoVy3cAQ9oT8iTGZhHQQmFg7A2pGK4FUVtWAm+2tjzX5Zq/t4PMh+mpaZO9BjWH9
Jp53ut4fiEYrT13Yx2+rPGb6MTx8y/L8Zik1YO5lCuXZju6Nq23+XJnlKWXlJxr7
WGzeVo9ExDo1QJoDs5UWOA2UsYf7HyJy5gWgh5eNQ42H60QeeGqhaEfJs61/HWlF
z4YrxsOefcJDy5O4+iuBj82F3OTj4cAWQ0/XSEFUbg1lBu03PtgOgEFZjYAlLQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:23 2025 by rpki-client