Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ndt6jVe1HNViq5gJY8L0Z58SPI4.roa
File: ndt6jVe1HNViq5gJY8L0Z58SPI4.roa (raw, json)
Hash identifier: PeJ3Mp9+URumWxGLPD7X9enQ8iDoB5YFapsLb7fVMsI=
Subject key identifier: 9D:DB:7A:8D:57:B5:1C:D5:62:AB:98:09:63:C2:F4:67:9F:12:3C:8E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019571C87E6DD0859B9C6E9539296CE2A291
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ndt6jVe1HNViq5gJY8L0Z58SPI4.roa
Signing time: Fri 07 Mar 2025 18:05:19 +0000
ROA not before: Fri 07 Mar 2025 18:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:71c7:a1bf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:c8:7e:6d:d0:85:9b:9c:6e:95:39:29:6c:e2:a2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 7 18:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ddb7a8d57b51cd562ab980963c2f4679f123c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:de:51:53:88:1f:5b:78:dd:67:d7:6f:1f:
14:9b:b9:4c:d2:ea:3e:3f:af:28:56:ea:a6:93:01:
29:66:64:02:72:94:d4:fb:12:de:c4:39:39:dc:8b:
33:17:59:ba:2d:4b:1e:67:a0:83:14:a9:62:3b:dc:
d1:28:af:c3:6b:de:58:fa:02:e0:5b:4d:a2:16:79:
59:c8:90:f2:e7:12:97:38:61:1f:28:f0:f9:56:48:
d8:7a:b2:cd:2f:fd:e7:32:b6:b8:54:a7:1b:9d:21:
27:5d:8e:5e:d2:a5:a9:19:4d:b5:99:70:36:4a:9d:
72:0d:da:b2:56:62:45:7f:8e:4d:47:d2:a6:df:09:
86:7c:2b:28:2e:0c:73:90:a9:6a:fb:0f:74:c3:69:
60:bf:69:e5:17:a4:f4:42:d8:f1:ad:6b:41:27:29:
3b:9f:70:5a:c1:d7:70:7b:93:b3:df:06:8d:cc:a5:
3d:4a:78:0d:66:5c:f1:2a:b4:58:d9:22:98:90:8b:
72:af:d4:87:92:53:c2:aa:c9:a9:73:8f:38:35:19:
f1:e0:17:32:25:36:41:ee:47:0a:3c:c2:70:f1:84:
61:18:b8:03:75:fc:e3:4a:96:27:74:5e:d4:f0:32:
9c:28:03:e1:86:a2:ca:08:95:35:5d:0c:c6:d5:52:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:7A:8D:57:B5:1C:D5:62:AB:98:09:63:C2:F4:67:9F:12:3C:8E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ndt6jVe1HNViq5gJY8L0Z58SPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:71c7:a1bf/128
Signature Algorithm: sha256WithRSAEncryption
3c:3d:9c:94:c8:f1:d2:63:51:da:e2:b9:8e:80:d7:eb:68:8d:
ce:f5:fa:d6:a6:33:e1:42:46:c5:70:4a:d9:3a:9e:0b:8b:3b:
5e:e4:37:41:7d:70:77:03:2c:5b:dd:99:f7:aa:af:59:fa:02:
c8:50:8f:36:d4:e5:fd:a6:84:30:e7:ae:a8:7b:22:89:58:57:
ae:af:16:4c:35:4f:c6:b8:fc:01:2a:83:d8:7b:a7:93:6f:51:
3f:13:e6:cd:24:5e:85:44:d2:19:c7:47:59:ac:90:e8:4d:e8:
b8:47:09:af:d5:87:1a:c2:ac:4e:12:7d:2a:85:b8:72:77:28:
c1:80:e6:2a:72:ab:26:ac:69:a2:b5:98:13:da:b5:28:d5:83:
e0:aa:87:d2:7d:cf:3f:bb:f8:b6:84:34:2f:40:ea:4c:1e:87:
d1:2e:ff:ee:0a:9b:b1:c4:58:7c:69:1f:6b:47:b4:ed:69:53:
69:fd:e5:5f:0d:aa:cb:f8:02:14:4c:df:f7:3b:c4:b3:05:17:
51:5e:68:1e:d3:95:67:00:25:71:ce:f1:ac:33:cc:8b:19:9d:
c4:1f:28:7c:69:22:73:8c:6c:1f:6b:7a:72:2d:56:03:c8:37:
04:45:5b:cd:b9:2c:9a:e1:9e:68:0c:50:98:6f:c3:0f:91:6a:
34:58:cd:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:08:46 2025 by rpki-client