Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-qDRwjyIVF5ZznuQC9V7Y91Kh4.roa
File: n-qDRwjyIVF5ZznuQC9V7Y91Kh4.roa (raw, json)
Hash identifier: j9OqGDoZDwviSBfxkknTeicFPsnd/hvVZLiy2g+nW4o=
Subject key identifier: 9F:EA:83:47:08:F2:21:51:79:67:39:EE:40:2F:55:ED:8F:75:2A:1E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945B7A0765E0CF7EDBBA3193CD0D6034B4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-qDRwjyIVF5ZznuQC9V7Y91Kh4.roa
Signing time: Sun 12 Jan 2025 17:05:11 +0000
ROA not before: Sun 12 Jan 2025 17:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:5b79:4b17/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5b:7a:07:65:e0:cf:7e:db:ba:31:93:cd:0d:60:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 17:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fea834708f22151796739ee402f55ed8f752a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:7a:32:52:74:e1:fb:49:cd:ae:6b:b9:2f:
17:b8:cc:80:43:bf:8c:00:1e:44:45:f2:f3:29:5d:
5e:9e:84:8b:28:9d:f7:d4:1a:bd:2b:26:7b:ea:36:
e3:53:fd:40:65:1c:ce:95:6e:2f:05:29:f4:70:00:
d9:aa:34:3f:f5:31:2f:50:1e:1e:f6:ef:b8:42:76:
fd:6b:66:2b:7c:d8:96:31:9f:f7:fa:0d:e4:60:b1:
37:b0:05:6d:8f:a8:b1:a8:48:23:d9:dd:50:b0:c2:
aa:df:09:9c:62:c6:d5:5c:63:0e:67:61:9d:76:39:
0b:ed:28:42:bc:e9:b8:00:cb:d8:8d:c6:4f:c4:e5:
b1:73:ba:12:b2:51:e5:f1:94:b5:0a:00:bc:60:4a:
57:06:a7:6f:47:24:bd:86:52:82:39:3e:81:46:06:
16:2e:96:25:ee:9c:f4:9f:4c:25:21:29:f8:3a:51:
15:33:4b:ee:a7:5d:71:fc:a7:75:59:22:44:ca:53:
b2:24:df:14:88:e8:bf:26:a0:92:3a:d5:b1:cb:74:
28:9f:61:ea:27:42:02:38:22:84:ed:ef:ce:c6:1b:
ca:37:d7:cd:3a:48:50:03:6e:fc:5d:9c:77:b7:ac:
55:17:9e:e8:a9:81:81:48:f8:77:2b:88:46:da:a0:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:83:47:08:F2:21:51:79:67:39:EE:40:2F:55:ED:8F:75:2A:1E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/n-qDRwjyIVF5ZznuQC9V7Y91Kh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:5b79:4b17/128
Signature Algorithm: sha256WithRSAEncryption
26:83:31:39:e9:5b:07:c4:d0:74:02:d6:4e:8f:77:65:00:2e:
32:6f:dc:fc:68:c8:12:47:35:46:06:10:40:da:01:d5:76:56:
6d:ec:95:cb:cc:ba:3b:95:8c:59:7c:e5:c2:04:2d:a2:9c:45:
04:f3:68:24:c6:af:1b:e9:c7:40:a3:87:ae:74:2e:71:01:fa:
83:e0:99:71:3c:d1:21:9a:d6:bc:8d:21:ec:aa:4a:e8:94:e5:
7c:4b:a3:04:d8:da:39:48:17:d2:39:00:45:d8:ef:79:09:cb:
9d:32:e6:92:49:c7:f0:3b:57:5d:31:51:ca:b8:e2:9d:70:89:
81:9a:75:e7:b2:e3:8c:94:af:a2:f5:5e:fb:08:7c:07:1f:92:
ae:16:43:99:e3:e9:73:58:b3:ae:0f:87:c1:18:91:27:d8:05:
10:96:a9:82:c7:9c:57:4a:de:a5:46:bd:8d:be:c4:d4:54:a4:
7e:99:ff:38:3c:91:81:2e:35:e5:92:1b:9c:96:58:fe:6d:b2:
d3:93:d6:f6:76:5d:2a:92:a0:28:84:4b:86:5c:d5:ee:b9:fc:
09:a7:6a:1d:2b:94:72:99:94:c2:0f:3e:6c:68:c6:96:a5:4c:
45:51:fe:ef:2d:14:a6:4b:9b:05:2d:ee:58:14:19:83:8f:88:
4d:f6:15:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:06:54 2025 by rpki-client