Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-VsvVPDe7PG9disNeXPftoYFaM.roa
File: n-VsvVPDe7PG9disNeXPftoYFaM.roa (raw, json)
Hash identifier: sYpHRv56F2/OoOhCr8lgNOR+keztHYOgfxrFE3O+sKw=
Subject key identifier: 9F:E5:6C:BD:53:C3:7B:B3:C6:F5:D8:AC:35:E5:CF:7E:DA:18:15:A3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958DE99351B325B331176C3EE5922C9FD4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-VsvVPDe7PG9disNeXPftoYFaM.roa
Signing time: Thu 13 Mar 2025 05:10:49 +0000
ROA not before: Thu 13 Mar 2025 05:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8d:e9:93:51:b3:25:b3:31:17:6c:3e:e5:92:2c:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 13 05:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe56cbd53c37bb3c6f5d8ac35e5cf7eda1815a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:b2:f7:b5:65:9f:ef:54:48:48:30:4c:a0:
95:87:73:21:78:af:33:fe:bb:40:bd:a7:fa:01:3a:
d2:62:50:98:97:db:d8:02:f2:c3:39:b5:1b:b1:6a:
88:48:e8:5a:d8:f5:22:3e:90:f2:92:0f:10:8f:a8:
f2:13:17:b0:bf:04:06:3c:a9:1c:77:16:39:59:31:
07:12:ff:31:3e:8a:85:ce:54:b1:f4:f6:be:39:9b:
12:ff:32:fd:36:79:da:fd:af:96:1f:3c:2f:84:e6:
47:0b:4b:c2:86:99:dc:40:ad:34:db:64:4a:84:0c:
3b:43:0f:a8:f2:72:20:16:36:63:38:fd:f9:14:90:
c2:f2:b5:23:7c:10:7a:ae:34:22:35:58:9a:a3:a1:
e7:f8:25:a9:1d:62:72:ef:49:c2:ee:cb:20:c0:a8:
f0:47:8a:c2:a5:ab:a7:d1:b7:61:61:67:c0:74:b7:
43:e2:0b:c2:c1:76:4d:06:5a:0e:58:0b:ca:cc:44:
34:3a:6c:c3:c0:df:f3:f7:aa:3e:c2:b5:ea:62:a5:
38:91:93:e9:b9:e9:b7:ac:48:81:49:c1:f5:c3:9e:
81:0e:f3:36:52:9d:8c:f6:5f:c7:81:58:fe:ed:f3:
e6:c7:0b:ee:79:4a:14:73:ce:55:27:f0:83:23:5f:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:6C:BD:53:C3:7B:B3:C6:F5:D8:AC:35:E5:CF:7E:DA:18:15:A3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-VsvVPDe7PG9disNeXPftoYFaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
53:01:d5:42:37:45:88:90:e2:fc:51:a7:a8:9b:7d:3c:48:e7:
23:8b:dc:00:f2:ce:b4:da:e1:10:ab:72:34:89:3a:af:d7:31:
7b:cf:ff:23:a3:ea:20:c9:11:47:eb:a6:d7:43:5a:ff:7f:f9:
9c:97:c0:32:89:d8:31:04:04:8f:80:b9:fc:d7:51:b6:29:53:
67:ca:8b:97:3c:59:a0:54:aa:d1:a3:c2:ae:9d:ad:ad:6d:3b:
d3:4c:73:ac:06:9b:d8:f3:dc:93:8a:f2:85:d9:bb:0c:31:5d:
ca:7d:d5:e0:13:b9:e9:d8:69:e8:54:6e:30:13:e3:77:47:43:
6e:cb:1c:e0:8c:18:55:a7:19:04:9c:b7:09:74:e5:1c:4e:90:
65:50:1b:3c:5f:b0:ce:e7:42:9f:0f:90:39:79:ad:72:88:1a:
ad:e6:95:5f:fb:d8:0f:59:5b:46:3a:cb:d5:6f:8c:f9:5a:f4:
ca:d8:32:ce:2a:67:44:72:70:dd:17:1a:9d:d3:f4:1e:f1:3b:
a2:2e:86:df:ff:a2:91:6f:82:c6:ad:27:c4:84:0b:81:a1:91:
8f:02:d5:e2:b1:a4:ab:13:ca:0a:f0:78:66:2f:36:12:3c:fc:
b1:74:a5:b1:f2:dd:5d:01:65:2c:d0:37:7a:24:cc:60:8d:e2:
01:05:dd:6d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWN6ZNRsyWzMRdsPuWSLJ/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzEzMDUxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmU1NmNiZDUzYzM3YmIzYzZmNWQ4YWMzNWU1Y2Y3ZWRhMTgxNWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MKy97Vln+9USEgwTKCVh3MheK8z
/rtAvaf6ATrSYlCYl9vYAvLDObUbsWqISOha2PUiPpDykg8Qj6jyExewvwQGPKkc
dxY5WTEHEv8xPoqFzlSx9Pa+OZsS/zL9Nnna/a+WHzwvhOZHC0vChpncQK0022RK
hAw7Qw+o8nIgFjZjOP35FJDC8rUjfBB6rjQiNViao6Hn+CWpHWJy70nC7ssgwKjw
R4rCpaun0bdhYWfAdLdD4gvCwXZNBloOWAvKzEQ0OmzDwN/z96o+wrXqYqU4kZPp
uem3rEiBScH1w56BDvM2Up2M9l/HgVj+7fPmxwvueUoUc85VJ/CDI1+gwwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFJ/lbL1Tw3uzxvXYrDXlz37aGBWjMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvbi1Wc3ZWUERlN1BHOWRpc05lWFBmdG9ZRmFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAUwHVQjdFiJDi/FGnqJt9PEjn
I4vcAPLOtNrhEKtyNIk6r9cxe8//I6PqIMkRR+um10Na/3/5nJfAMonYMQQEj4C5
/NdRtilTZ8qLlzxZoFSq0aPCrp2trW0700xzrAab2PPck4ryhdm7DDFdyn3V4BO5
6dhp6FRuMBPjd0dDbssc4IwYVacZBJy3CXTlHE6QZVAbPF+wzudCnw+QOXmtcoga
reaVX/vYD1lbRjrL1W+M+Vr0ytgyzipnRHJw3RcandP0HvE7oi6G3/+ikW+Cxq0n
xIQLgaGRjwLV4rGkqxPKCvB4Zi82Ejz8sXSlsfLdXQFlLNA3eiTMYI3iAQXdbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:45 2025 by rpki-client