Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l_cKCzLr9SP7VJz_HGaHrQ_zm84.roa
File: l_cKCzLr9SP7VJz_HGaHrQ_zm84.roa (raw, json)
Hash identifier: Qj72fVqn1CK/2W7ySz/93Z1qOC9oKN6V0puV6Kk9BZk=
Subject key identifier: 97:F7:0A:0B:32:EB:F5:23:FB:54:9C:FF:1C:66:87:AD:0F:F3:9B:CE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01954ECDB8E40C73226914F95322635F4FE0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l_cKCzLr9SP7VJz_HGaHrQ_zm84.roa
Signing time: Fri 28 Feb 2025 23:04:19 +0000
ROA not before: Fri 28 Feb 2025 23:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:4ecd:a1f6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:cd:b8:e4:0c:73:22:69:14:f9:53:22:63:5f:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 28 23:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97f70a0b32ebf523fb549cff1c6687ad0ff39bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:fd:d2:68:5d:18:76:37:f5:76:1f:71:d7:
87:c8:1b:e9:82:ca:11:27:3b:bb:70:13:93:fd:d7:
32:22:d6:ac:f5:75:d6:e9:95:c2:df:2f:0d:c5:c2:
c1:b9:ef:43:77:25:25:37:dc:15:d0:9d:c4:66:c8:
f6:0f:e8:fa:24:d8:9a:76:10:f5:8e:5f:71:3e:2e:
0a:68:11:4f:df:c3:2e:7c:70:89:a5:35:bb:88:96:
8a:b3:07:a8:cb:48:88:9c:7e:18:92:5d:27:ae:9f:
d0:d5:43:b8:c7:ec:a0:6d:e0:6c:c6:75:c4:5c:68:
87:f3:94:a2:65:2e:2c:9f:fd:e6:98:43:5b:ce:0b:
5e:a3:2b:08:64:33:45:da:5c:51:e0:d2:ad:cc:c7:
c7:1a:1d:f4:13:2b:31:f0:93:f0:41:b9:cf:dd:d7:
6a:b3:12:b2:9b:ed:b2:b7:47:80:03:53:38:d8:70:
a4:a2:42:5b:1d:3c:71:65:8c:9c:2d:75:ed:8d:37:
6e:ff:5f:51:81:ab:a7:ad:70:89:2b:d1:3b:8c:04:
df:61:20:98:51:aa:eb:89:48:22:b6:27:ba:57:00:
cb:30:76:41:81:51:f2:2e:ad:b3:b3:ea:37:10:2a:
cb:8b:12:8e:4a:aa:96:a7:62:c9:bc:02:f5:ad:2b:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:0A:0B:32:EB:F5:23:FB:54:9C:FF:1C:66:87:AD:0F:F3:9B:CE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/l_cKCzLr9SP7VJz_HGaHrQ_zm84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:4ecd:a1f6/128
Signature Algorithm: sha256WithRSAEncryption
32:1f:63:24:05:e8:c7:16:37:f3:0e:dd:00:c4:4a:ab:2a:ef:
f0:0c:33:7a:21:3e:ec:54:15:b4:4a:75:33:f0:fd:da:2d:04:
81:e3:9a:ce:63:17:63:00:0d:69:62:74:a4:85:90:49:af:6e:
db:bc:37:dc:eb:2e:da:ef:5c:dd:5d:a9:6d:6a:f9:b4:22:59:
31:36:49:80:62:50:fe:11:38:35:77:71:16:fe:2c:5a:52:d5:
84:00:0e:60:9f:cc:5c:55:c0:a9:06:e4:91:3d:4f:2e:9e:d1:
b6:13:28:aa:ed:72:7d:b8:d4:99:b6:c5:b1:25:3b:98:80:ce:
75:d3:67:3d:b3:cc:20:9f:6d:50:78:c2:29:a5:6c:6d:74:5e:
98:ab:60:21:c6:82:11:cb:f8:a0:4e:de:bc:cd:08:67:9a:9f:
04:cd:2f:34:13:75:7e:4f:71:2d:dc:48:72:bc:53:a1:ef:62:
b1:d6:ab:92:6e:22:e9:52:ed:db:da:c8:65:e7:dd:63:1f:3e:
88:6a:a7:7d:15:93:9f:ba:b9:dd:a0:38:9c:d1:a9:9d:d7:f0:
40:e7:87:e4:05:b7:0b:f3:e8:c2:fd:8e:8d:6b:ee:42:de:c9:
1b:7c:43:55:c8:91:27:a7:66:b3:7a:0a:35:96:5e:a8:45:33:
bd:77:97:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:18 2025 by rpki-client