Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJCj6c3PLdn0n5qp--1Z_xd_yv0.roa
File: oJCj6c3PLdn0n5qp--1Z_xd_yv0.roa (raw, json)
Hash identifier: WsgX1YBDYyDl3xxSMUAECXXO4vz7uuMAxIX5s9jAlGs=
Subject key identifier: A0:90:A3:E9:CD:CF:2D:D9:F4:9F:9A:A9:FB:ED:59:FF:17:7F:CA:FD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958C9FFBB110DC878B2BA75B0B5FF9BE96
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJCj6c3PLdn0n5qp--1Z_xd_yv0.roa
Signing time: Wed 12 Mar 2025 23:10:49 +0000
ROA not before: Wed 12 Mar 2025 23:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:9f:fb:b1:10:dc:87:8b:2b:a7:5b:0b:5f:f9:be:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 23:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a090a3e9cdcf2dd9f49f9aa9fbed59ff177fcafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:bf:fc:11:80:62:c8:5e:4b:b5:1f:25:78:
da:dd:c0:80:b1:a4:80:82:13:5a:9e:15:c3:3d:6d:
eb:ca:a0:86:6f:a8:63:74:30:7f:2b:02:bf:89:19:
40:f4:97:0a:d7:bc:b1:b9:48:03:5c:85:37:78:34:
ad:86:cf:3a:6e:3f:67:8c:92:16:2d:3b:9e:97:11:
94:ce:e4:2f:4a:51:67:1c:9c:76:3d:d2:f2:d2:70:
f4:8a:f7:0b:8b:74:34:5e:ae:36:87:01:cc:32:d0:
57:bc:a4:6c:56:e2:5a:f7:11:a2:02:ee:69:97:82:
3a:52:51:97:d2:52:7a:af:b0:e4:57:7b:95:1f:62:
d1:0b:5c:ba:7d:40:3b:86:f3:6e:9d:46:f1:79:a2:
7d:43:7c:55:71:40:84:f8:d5:d7:96:46:77:93:9b:
f3:0e:b4:9d:d3:c1:12:00:84:af:e2:f4:93:55:d0:
2c:78:c0:bf:6e:c3:9a:f7:4e:17:00:66:7d:d2:e0:
fa:84:04:27:a5:15:95:88:34:50:f7:9b:4f:86:a8:
54:de:00:ab:89:87:f9:0e:1b:bb:d9:38:a6:3c:c3:
44:6a:92:5f:d2:1f:05:99:47:48:80:d8:9f:63:96:
4a:66:cb:e4:f6:89:70:63:17:e7:b5:12:67:f5:9d:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:A3:E9:CD:CF:2D:D9:F4:9F:9A:A9:FB:ED:59:FF:17:7F:CA:FD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/oJCj6c3PLdn0n5qp--1Z_xd_yv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
81:81:bd:27:90:4a:6f:34:36:3a:0e:e8:fd:f6:42:d4:ca:5b:
78:dc:90:c3:21:c5:fa:05:f0:41:15:c3:b0:08:f3:55:a1:99:
05:35:0f:dc:ae:c5:6f:1f:df:46:6a:b5:31:a6:fc:5d:05:71:
c0:24:ea:33:e1:9c:23:66:45:d2:c6:12:21:ab:41:7f:84:10:
9b:0c:31:23:99:3e:a9:d8:69:71:bd:4d:4a:d8:a8:16:07:e1:
bb:a2:d9:7f:79:bf:8e:92:b5:3a:b3:7e:fe:1e:b9:f8:96:26:
14:d0:97:eb:b3:9b:a5:b4:4b:4a:99:0e:c6:11:2f:45:75:15:
46:73:33:87:48:d9:8c:d8:42:22:44:a9:da:4c:49:66:14:7e:
5e:d6:ca:e6:5d:14:72:c6:84:2c:21:ba:18:3b:c4:82:0e:a9:
f8:8b:77:b0:48:da:f3:20:c4:d0:a4:13:91:c9:72:16:d3:d4:
96:e2:3c:5d:9b:55:ac:97:d2:2e:5d:b5:cd:66:45:87:02:32:
2c:96:7e:4e:60:af:57:de:d6:10:2b:f3:f9:f1:db:a5:e8:aa:
c7:34:b5:d7:82:b0:2c:fe:a9:25:3d:17:97:db:f4:1c:70:bb:
44:bd:49:d3:ec:f3:c1:c4:92:bb:8b:f1:17:00:3c:57:c5:99:
7c:08:15:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:12:07 2025 by rpki-client