Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mueSIPcr-Cxzts3o-S7P5MnJsf0.roa
File: mueSIPcr-Cxzts3o-S7P5MnJsf0.roa (raw, json)
Hash identifier: hv20cZk8GAeBDm4w/ynAsZMdDVJAwZ7/TTFrAE7cJJc=
Subject key identifier: 9A:E7:92:20:F7:2B:F8:2C:73:B6:CD:E8:F9:2E:CF:E4:C9:C9:B1:FD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A77619D651C0F51C8DFF8437717AC6C2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mueSIPcr-Cxzts3o-S7P5MnJsf0.roa
Signing time: Tue 18 Mar 2025 04:14:49 +0000
ROA not before: Tue 18 Mar 2025 04:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:76:19:d6:51:c0:f5:1c:8d:ff:84:37:71:7a:c6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 18 04:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae79220f72bf82c73b6cde8f92ecfe4c9c9b1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:ca:1e:f2:4c:1c:d8:ba:90:68:e9:64:34:
d0:4d:b8:e7:52:69:ef:be:db:eb:e4:8e:23:69:e8:
bd:51:b4:36:c6:98:74:c8:db:bd:3c:f6:aa:68:4a:
92:7b:1a:cd:85:fa:e5:76:50:ee:c5:ae:8b:87:99:
d7:fd:68:31:37:65:b4:01:aa:82:18:d7:91:95:1c:
52:c9:11:eb:2b:0f:70:3a:f1:5b:37:9d:9e:11:59:
0e:fe:91:1a:64:06:04:d8:9a:43:80:e7:07:04:28:
e3:70:ab:3f:a7:10:1e:2a:68:e9:54:06:63:8f:f7:
23:d2:89:22:85:9f:d5:e2:ae:34:8d:49:04:79:d6:
be:5e:11:bd:96:48:e1:2e:6a:21:09:1e:d1:89:68:
fb:4b:6d:57:c1:9a:10:6d:46:f0:b4:88:61:eb:77:
55:8b:3f:f9:77:a3:86:fc:ac:28:01:82:69:28:a5:
d7:7d:16:80:97:74:cf:18:39:4b:56:2c:88:dd:ef:
aa:db:a8:7f:2a:d7:32:d6:d8:a1:9a:14:a5:57:74:
40:57:02:fa:18:14:95:53:42:f3:9b:fd:99:04:6b:
aa:a5:22:70:00:30:b8:d6:bb:84:02:f9:2a:25:56:
00:64:9f:f8:ab:b7:4e:db:30:2e:b0:2b:e1:22:7a:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:92:20:F7:2B:F8:2C:73:B6:CD:E8:F9:2E:CF:E4:C9:C9:B1:FD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/mueSIPcr-Cxzts3o-S7P5MnJsf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
3c:cd:2f:0f:c8:e8:23:1e:55:d4:87:26:57:18:a6:34:1a:14:
08:01:b5:19:73:90:48:9b:81:e3:3d:71:96:71:62:f2:43:19:
f3:db:b0:5d:3d:a7:15:43:eb:00:f5:06:34:94:7e:8f:14:46:
da:19:4e:c2:75:9b:07:f3:ba:1b:f9:f8:fd:a2:f3:58:ac:09:
da:5b:00:a0:19:64:0a:f8:b2:cd:5f:9f:96:9c:d4:25:de:96:
67:e4:78:bb:96:8a:43:a2:a9:9a:0d:48:f8:9b:d9:ca:c5:de:
a7:a1:2b:78:10:52:ba:5b:1d:77:e1:c9:45:99:59:89:2a:bf:
ae:24:a1:8c:b7:78:34:32:95:46:54:a4:1a:19:ab:0a:b3:15:
2f:3e:57:2c:ec:fd:bb:53:f0:aa:b9:77:24:4e:8c:88:ae:88:
b1:49:33:5a:13:a6:aa:20:e1:49:da:cb:7c:e9:54:4e:3f:f7:
57:20:45:38:41:46:8c:71:48:be:72:c9:af:6f:d7:7d:66:b7:
a7:3d:92:28:75:43:c3:df:1c:ac:a0:bf:4d:85:74:35:9b:69:
9d:a4:14:cb:bd:12:6a:0c:c8:a8:95:fa:80:54:e4:29:a5:51:
c3:bb:6c:11:31:cf:51:ed:88:fb:80:01:93:73:8f:0d:34:3a:
9e:37:c3:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:06:58 2025 by rpki-client