Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGIW1BFcRcqQ80yNgOhkz3S5IJ0.roa
File: pGIW1BFcRcqQ80yNgOhkz3S5IJ0.roa (raw, json)
Hash identifier: 9cr/y5N292jGa869ReWIwZD9bjfloeZFNbB3yBBDNa0=
Subject key identifier: A4:62:16:D4:11:5C:45:CA:90:F3:4C:8D:80:E8:64:CF:74:B9:20:9D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945B806FD78A6591B8CB9FA05A7B119060
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGIW1BFcRcqQ80yNgOhkz3S5IJ0.roa
Signing time: Sun 12 Jan 2025 17:12:11 +0000
ROA not before: Sun 12 Jan 2025 17:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5b:80:6f:d7:8a:65:91:b8:cb:9f:a0:5a:7b:11:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 17:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a46216d4115c45ca90f34c8d80e864cf74b9209d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:2d:2b:ca:03:c6:eb:09:78:5d:ca:63:2b:
3b:1d:ce:53:d1:c3:cc:4e:e6:98:ea:c1:0d:42:6a:
7c:bf:11:ab:8f:1b:6f:7e:e4:07:bd:bb:2f:91:34:
9d:ee:1c:c3:1f:4d:36:17:f8:fd:eb:62:3d:ac:cc:
5c:b0:5d:4e:b7:ca:43:be:74:4e:70:63:aa:bb:41:
b3:ba:f2:89:96:1c:88:8c:be:fc:1c:c6:c8:86:37:
cb:53:59:ab:fa:f1:50:d1:cd:5b:0d:25:88:05:98:
34:2b:5d:69:ee:26:21:39:cd:66:da:e0:24:2f:af:
3b:3b:46:49:29:f9:a5:26:1f:47:dd:c3:59:14:d5:
89:8b:b5:86:47:51:9c:92:85:23:6b:74:23:7c:f7:
99:79:56:48:e2:6f:2b:92:09:bd:c4:e2:b0:5a:c3:
ae:f0:f0:ad:ce:5f:17:06:c8:25:97:2a:f7:37:ef:
49:e6:2e:98:47:f7:0a:d5:de:5e:c2:09:46:b0:7b:
57:3e:99:4e:ad:d9:90:ad:7b:19:fc:4e:42:c0:61:
9b:af:94:e4:fd:61:36:c7:2c:a3:53:85:91:75:08:
d4:80:5f:9f:bd:ea:61:45:b2:19:89:7a:64:c3:db:
03:a8:9b:97:53:f3:9e:01:35:c8:f5:ff:38:c1:13:
c0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:16:D4:11:5C:45:CA:90:F3:4C:8D:80:E8:64:CF:74:B9:20:9D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pGIW1BFcRcqQ80yNgOhkz3S5IJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
68:a9:8a:b1:77:e3:ed:0d:ac:d9:6a:8f:b2:e4:a3:aa:91:ab:
1f:95:92:94:4f:c4:f4:e9:6c:d8:04:27:7d:02:7f:e5:4e:36:
c9:05:ac:62:9f:e0:8d:b3:8e:28:5b:91:35:ba:37:bd:90:f3:
02:1f:7b:26:d5:3e:93:4b:66:0d:e2:c8:f6:36:01:ba:b3:a5:
28:94:c1:a7:0d:2a:6d:94:ef:2a:9f:e0:e0:28:02:be:a2:db:
6b:89:42:98:8a:3a:59:de:ed:af:cd:12:81:ba:31:72:14:ab:
01:36:c0:38:e6:79:f6:5e:ea:d2:14:c4:5d:7b:a9:28:97:2f:
eb:ae:cc:24:f7:89:bc:ad:dd:ea:6a:38:7e:91:63:5c:0b:ad:
63:cd:4a:f5:3d:76:68:4d:e6:6a:d5:7b:b0:87:45:b9:ab:5a:
04:ab:a6:59:46:81:e6:d8:e9:98:20:aa:36:21:b6:f7:c8:e5:
6b:ed:71:2a:b5:bd:2d:49:a7:7e:4b:8c:ea:fc:c3:b0:40:17:
bd:fb:99:3c:6f:3a:88:f1:ca:98:c9:17:bd:23:76:c9:ee:d3:
40:ec:a5:26:59:5c:8c:c0:34:ef:4c:00:37:3b:5d:1d:69:c4:
13:c3:55:00:4e:94:d0:5c:f3:60:a0:71:b1:41:3e:ff:7f:4f:
ba:54:21:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:34 2025 by rpki-client