Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oE2X4BMPmY3qQEWmNDXzE0ym0xo.roa
File: oE2X4BMPmY3qQEWmNDXzE0ym0xo.roa (raw, json)
Hash identifier: sJVRr7iyNZA7xGeWQ2T2RA8tLZjpdzF7j1iZXVGwdS8=
Subject key identifier: A0:4D:97:E0:13:0F:99:8D:EA:40:45:A6:34:35:F3:13:4C:A6:D3:1A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918E5CA8E7B2367AFDE74AEACAF841555A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oE2X4BMPmY3qQEWmNDXzE0ym0xo.roa
Signing time: Mon 26 Aug 2024 11:05:22 +0000
ROA not before: Mon 26 Aug 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:8e5b:cb95/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:5c:a8:e7:b2:36:7a:fd:e7:4a:ea:ca:f8:41:55:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04d97e0130f998dea4045a63435f3134ca6d31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:90:b3:23:3f:b3:cc:4f:af:75:51:04:39:
b0:a3:3f:94:32:21:71:90:db:f2:ef:a9:b0:f7:7b:
7a:d2:6b:a3:d7:55:f7:e7:e3:da:69:25:c2:9e:bf:
b3:73:cc:0f:8d:f7:ce:55:34:1e:e4:14:31:f9:ab:
e5:49:62:ec:cb:75:b4:f2:6d:20:13:57:aa:80:57:
ae:de:3c:ed:47:b1:7e:07:1e:92:ce:f8:6e:7f:01:
eb:ca:40:a4:95:fd:00:a5:42:bb:ed:4e:41:8d:03:
ac:75:40:b2:26:99:fb:84:99:8b:51:93:00:b7:f4:
b8:da:73:30:56:8c:7a:7c:9f:93:f2:92:be:24:e5:
98:2c:b3:51:9e:c3:e8:14:c7:a2:03:7e:3b:84:b2:
86:02:80:7c:75:f1:ec:13:14:bc:ed:5e:8c:9d:e9:
d3:b6:80:82:d0:21:d6:80:25:fd:af:71:44:ed:7c:
2f:6a:b8:82:36:63:78:04:12:05:ac:ca:3d:e5:1a:
3c:9c:7c:07:67:06:9e:55:31:a5:f0:6c:52:e9:aa:
97:a4:53:50:a7:e6:d3:9e:3a:2f:3a:65:7e:b3:c1:
52:e0:b7:aa:51:28:17:fd:a8:44:1e:75:22:09:ac:
8d:3d:98:79:c6:47:e5:36:21:01:d2:d7:59:da:8b:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:97:E0:13:0F:99:8D:EA:40:45:A6:34:35:F3:13:4C:A6:D3:1A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oE2X4BMPmY3qQEWmNDXzE0ym0xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:8e5b:cb95/128
Signature Algorithm: sha256WithRSAEncryption
6a:ad:3c:e3:a7:b2:51:86:c9:1e:19:8a:19:28:ac:b8:56:99:
0e:0d:93:dc:7a:3b:7c:b4:4b:2e:84:78:c7:7b:f5:e0:e9:76:
f3:2c:e2:89:72:08:44:35:06:82:1c:7e:49:1d:94:ba:c8:ab:
ca:cc:1a:ca:00:b1:82:9a:40:1e:89:eb:9c:86:1c:f2:cd:0e:
93:ea:d9:99:b1:f4:1e:89:32:3f:c1:85:a5:fa:bc:05:c1:be:
f8:a2:6c:1c:0f:66:ca:82:b9:66:db:b6:d4:fa:84:2a:78:1c:
36:7d:a9:25:a8:a3:7e:9f:96:cc:73:c3:86:f9:97:4b:44:1d:
49:1f:53:46:0a:1e:63:87:89:f5:e5:f4:79:dd:be:70:9a:68:
83:9e:a3:0e:45:b6:45:94:64:7a:b1:81:64:b7:30:94:6f:c0:
ce:55:71:c8:26:ca:28:0e:be:bf:7d:4f:90:40:0c:a0:90:e7:
6f:39:5d:21:70:22:1b:55:f9:54:e7:be:61:93:7b:84:26:82:
13:d7:91:1e:94:a9:1d:31:42:d7:fb:08:7d:b7:12:c5:89:73:
af:35:03:47:1d:cc:a9:8f:f5:25:b6:4b:e7:79:d8:af:44:97:
29:91:d1:09:8c:e1:5d:3e:ea:0d:53:b1:5c:33:7b:bb:f1:23:
ef:35:39:e5
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZGOXKjnsjZ6/edK6sr4QVVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI2MTEwNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDRkOTdlMDEzMGY5OThkZWE0MDQ1YTYzNDM1ZjMxMzRjYTZkMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RmQsyM/s8xPr3VRBDmwoz+UMiFx
kNvy76mw93t60muj11X35+PaaSXCnr+zc8wPjffOVTQe5BQx+avlSWLsy3W08m0g
E1eqgFeu3jztR7F+Bx6SzvhufwHrykCklf0ApUK77U5BjQOsdUCyJpn7hJmLUZMA
t/S42nMwVox6fJ+T8pK+JOWYLLNRnsPoFMeiA347hLKGAoB8dfHsExS87V6MnenT
toCC0CHWgCX9r3FE7XwvariCNmN4BBIFrMo95Ro8nHwHZwaeVTGl8GxS6aqXpFNQ
p+bTnjovOmV+s8FS4LeqUSgX/ahEHnUiCayNPZh5xkflNiEB0tdZ2ouUTwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKBNl+ATD5mN6kBFpjQ18xNMptMaMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvb0UyWDRCTVBtWTNxUUVXbU5EWHpFMHltMHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAxEAIAEGfABk
//8AAAGQ/fLzAgMRACABBnwAZP//AAABkY5by5UwDQYJKoZIhvcNAQELBQADggEB
AGqtPOOnslGGyR4ZihkorLhWmQ4Nk9x6O3y0Sy6EeMd79eDpdvMs4olyCEQ1BoIc
fkkdlLrIq8rMGsoAsYKaQB6J65yGHPLNDpPq2Zmx9B6JMj/BhaX6vAXBvviibBwP
ZsqCuWbbttT6hCp4HDZ9qSWoo36flsxzw4b5l0tEHUkfU0YKHmOHifXl9HndvnCa
aIOeow5FtkWUZHqxgWS3MJRvwM5VccgmyigOvr99T5BADKCQ5285XSFwIhtV+VTn
vmGTe4QmghPXkR6UqR0xQtf7CH23EsWJc681A0cdzKmP9SW2S+d52K9ElymR0QmM
4V0+6g1TsVwze7vxI+81OeU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:55 2025 by rpki-client