Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmOzC_F8d02jWnzHCdR4lYG9TUI.roa
File: mmOzC_F8d02jWnzHCdR4lYG9TUI.roa (raw, json)
Hash identifier: VLlUmqvxNXoKwDvXZoz5GqoMJG5nki/rDFYjLJdajr0=
Subject key identifier: 9A:63:B3:0B:F1:7C:77:4D:A3:5A:7C:C7:09:D4:78:95:81:BD:4D:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194813DECE22D074384DBE6525DE2E08629
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmOzC_F8d02jWnzHCdR4lYG9TUI.roa
Signing time: Mon 20 Jan 2025 01:05:06 +0000
ROA not before: Mon 20 Jan 2025 01:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:813d:5702/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:81:3d:ec:e2:2d:07:43:84:db:e6:52:5d:e2:e0:86:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 01:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a63b30bf17c774da35a7cc709d4789581bd4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:2d:d3:ea:52:4d:02:d7:7b:35:55:5c:4b:
18:5c:51:0c:9b:e3:77:79:97:51:ca:e1:c2:e4:10:
61:3c:17:a9:75:c3:ff:3e:dd:57:99:36:5e:f4:8c:
f6:41:cd:98:d1:20:fa:d9:44:a1:cc:a1:51:78:89:
24:8b:17:2c:c8:de:1f:d3:e6:4f:05:87:71:c9:3c:
45:4f:7b:76:ad:6b:64:75:bf:a8:03:ae:0e:23:39:
6d:d0:50:90:f7:8f:3c:53:db:11:ef:55:8d:e8:c2:
7a:9a:0b:bf:f4:dc:ab:b6:d1:e7:ab:30:91:49:38:
c2:b3:2e:73:5e:cb:26:e0:14:2e:3e:77:aa:e8:3c:
94:4f:ef:b4:5f:5c:0f:34:aa:83:1c:3b:fc:d5:97:
db:e8:b8:6d:52:08:04:b8:76:c2:aa:e4:43:4e:88:
9c:7a:18:63:93:b6:a1:10:8b:25:05:2c:2c:d0:47:
bb:c7:7e:ef:6c:93:6b:1a:42:54:68:8e:7d:0a:dd:
b9:eb:d4:00:64:59:ca:7a:dd:72:d1:92:83:da:a5:
c5:04:13:71:3a:dd:69:63:f1:9f:21:12:d9:a4:ad:
e4:97:dd:52:ab:30:c6:67:69:a4:79:24:54:2e:db:
1f:b7:26:b7:f6:db:2d:93:c8:4d:bb:da:ac:66:40:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:63:B3:0B:F1:7C:77:4D:A3:5A:7C:C7:09:D4:78:95:81:BD:4D:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mmOzC_F8d02jWnzHCdR4lYG9TUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:813d:5702/128
Signature Algorithm: sha256WithRSAEncryption
3c:50:8d:e2:d6:92:5f:b3:6a:80:c3:55:61:b1:4e:d6:1c:73:
c9:45:3e:13:f2:33:fd:19:52:49:e5:7c:26:40:8f:5c:00:d4:
e8:fa:07:ad:64:79:5a:01:34:b0:3c:46:59:47:02:df:17:44:
76:65:99:15:34:28:75:58:95:e7:eb:bb:01:61:c9:42:e3:1f:
94:a7:5d:84:f9:d1:8b:b8:5e:a9:5b:d2:be:34:42:6b:8c:01:
aa:c7:f0:ec:3f:01:73:03:3d:5e:04:0f:ac:36:86:d3:83:13:
49:8d:49:d7:8d:11:6f:1e:88:19:08:af:15:93:81:aa:a0:3a:
92:fb:c9:59:04:d5:ed:f0:21:90:6f:c6:b2:84:81:2d:93:60:
f3:0b:b2:40:66:dc:0a:3c:85:b7:79:74:90:3a:fc:cf:3e:52:
f5:93:59:18:13:d0:36:fc:b2:fb:50:03:63:3e:f5:65:b9:83:
80:85:50:3b:79:ab:a9:f3:91:6d:8a:79:d6:5b:ee:67:a0:67:
89:90:16:94:b7:82:cb:e5:20:af:25:cc:0e:dd:29:fc:0f:c4:
bd:d0:84:77:b4:f1:b3:5d:fe:b9:7d:9a:3c:63:40:ac:03:7c:
02:76:d8:2b:34:53:57:d9:cd:45:7d:a3:36:9e:41:f1:f6:12:
1b:94:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:56 2025 by rpki-client