Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mSlTX_hS_tJENCyIcb9S-EKj1pg.roa
File: mSlTX_hS_tJENCyIcb9S-EKj1pg.roa (raw, json)
Hash identifier: /npvMN1mgQ0MzqViNJvW8wXQiGl/KwWtOuU86Q8uHOk=
Subject key identifier: 99:29:53:5F:F8:52:FE:D2:44:34:2C:88:71:BF:52:F8:42:A3:D6:98
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A65A49AFF452581B2060183C50CFB5DA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mSlTX_hS_tJENCyIcb9S-EKj1pg.roa
Signing time: Mon 17 Mar 2025 23:04:49 +0000
ROA not before: Mon 17 Mar 2025 23:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
2001:67c:64:ffff:0:195:a65a:b8d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:5a:49:af:f4:52:58:1b:20:60:18:3c:50:cf:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 23:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9929535ff852fed244342c8871bf52f842a3d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:fd:0c:de:43:08:f8:50:14:67:1e:3a:19:
6e:2b:9c:e5:a8:fb:78:a0:95:2e:03:38:e3:e7:ab:
13:c3:ad:05:a5:e8:38:bb:8c:62:71:d4:79:20:8a:
29:86:b1:5f:a0:b8:81:32:8d:d0:b5:75:51:d5:10:
6c:3c:5b:92:3a:b5:b3:c8:4e:2a:f6:db:bd:ae:84:
e1:65:f3:7b:c3:0e:8d:c4:60:1b:47:a8:3f:4f:a0:
94:83:e4:72:88:a6:ea:2b:68:b6:d7:99:c2:11:f3:
8b:cb:9d:44:70:8d:19:ac:6b:ab:33:26:19:bf:d1:
1e:ba:bc:d1:67:c8:ee:f7:9f:e8:f8:af:9f:83:9e:
93:31:30:18:3f:ef:63:c4:9c:d7:8b:fd:3b:04:67:
4c:95:03:a3:41:79:a9:fc:2d:e3:a8:d9:f9:fc:21:
00:08:0c:7e:5c:e4:1f:bd:96:fe:1a:8b:77:69:80:
b3:e6:07:43:dd:af:cb:59:de:fb:52:43:02:4c:ed:
16:06:bb:e8:a1:70:12:39:f9:be:a9:a6:da:d2:bd:
ec:82:16:ac:07:5b:5e:f4:29:eb:87:67:be:e5:d4:
5d:f8:2b:1b:54:6c:b0:a6:bf:6b:a3:58:e1:52:fa:
32:92:12:40:a4:71:17:e9:4e:7e:3c:4c:ab:5b:ec:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:53:5F:F8:52:FE:D2:44:34:2C:88:71:BF:52:F8:42:A3:D6:98
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mSlTX_hS_tJENCyIcb9S-EKj1pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
2001:67c:64:ffff:0:195:a65a:b8d/128
Signature Algorithm: sha256WithRSAEncryption
4d:16:5b:14:a8:36:3e:07:9d:39:72:aa:b8:12:39:2a:1a:d4:
a0:7c:c1:aa:19:22:29:58:f1:7d:ba:06:7e:be:d9:24:c1:de:
08:1d:e7:3c:38:9e:fc:98:68:08:e8:23:42:73:e7:03:2b:0d:
d8:3b:ae:17:c9:19:73:32:b2:6f:83:ad:d9:1f:e2:ae:e5:63:
ab:3f:3d:61:6a:06:f6:b3:9b:b8:3e:33:57:37:06:30:b7:c7:
80:71:d4:d3:55:6f:4e:45:00:11:cd:6f:92:10:ae:d3:ef:a3:
ce:b0:ae:6f:45:7a:de:98:86:d6:ff:79:bd:55:9a:1a:85:a1:
c7:f6:d9:71:50:d2:04:56:9c:ee:eb:a3:48:81:7d:6e:54:33:
4c:5a:fd:fc:d2:a6:01:3f:13:4d:06:7d:22:90:6a:0b:f0:1f:
3a:92:19:70:00:63:36:76:91:d4:44:91:5d:0e:ce:25:cb:98:
29:5e:dd:83:1d:fe:80:2e:a9:aa:15:84:41:62:ce:ce:2e:51:
47:eb:14:69:24:3b:87:f7:70:02:4e:99:69:8e:fb:31:23:c5:
75:26:9a:e2:d5:92:11:6b:2a:fe:18:3a:62:98:9c:b5:6a:3e:
8a:84:14:a6:95:21:65:7d:34:69:50:53:ee:f7:a0:33:17:d3:
52:77:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:49 2025 by rpki-client