Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pJjNXUItSwwfz0AA1WF57JPYngY.roa
File: pJjNXUItSwwfz0AA1WF57JPYngY.roa (raw, json)
Hash identifier: NX76G/YrFbfpxehzudYWIJ+o3Z8HLVXclOA1R1ZBuXE=
Subject key identifier: A4:98:CD:5D:42:2D:4B:0C:1F:CF:40:00:D5:61:79:EC:93:D8:9E:06
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193FD7E169ED3497AA482F74E80B0738450
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pJjNXUItSwwfz0AA1WF57JPYngY.roa
Signing time: Wed 25 Dec 2024 11:05:19 +0000
ROA not before: Wed 25 Dec 2024 11:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:fd7d:2c9f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:7e:16:9e:d3:49:7a:a4:82:f7:4e:80:b0:73:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 25 11:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a498cd5d422d4b0c1fcf4000d56179ec93d89e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:05:02:a0:33:7b:d7:b7:06:46:ed:06:f7:
53:58:3b:35:b0:6a:a5:5f:4b:4f:77:44:18:ad:bf:
8a:52:85:a7:12:3b:69:26:00:6d:bc:53:d8:c1:ef:
50:ec:6b:e3:08:b9:0e:71:af:86:07:a3:5d:f2:22:
47:7c:ee:13:86:25:9f:9b:5d:55:41:f5:2d:f1:9d:
89:1a:a9:b3:43:43:af:76:4d:cf:ce:1e:9e:99:11:
0b:6b:86:d2:b9:e1:0b:90:0c:b9:8e:60:5a:9b:e6:
08:66:97:17:b1:e5:38:8e:61:10:82:3b:a5:ee:b2:
89:92:6c:70:f4:52:ae:50:cf:0c:69:2e:ac:10:f5:
81:50:e8:30:28:0d:e1:04:22:7d:59:fd:0e:b1:ed:
16:88:86:1a:c2:20:83:84:37:0c:64:4b:94:ce:0c:
90:76:5d:b4:5b:a4:0d:42:15:74:e6:5d:4d:1a:cd:
ca:97:90:54:2c:1b:29:54:b1:cb:b0:c0:ac:2f:fb:
cd:01:57:df:f0:06:5a:8a:8b:62:a9:21:da:77:5d:
38:26:29:50:29:85:38:32:18:7b:c8:30:8d:9e:95:
05:6b:ee:d4:1e:96:a4:b2:a8:82:d4:5a:a3:8c:11:
61:ad:b1:b8:d8:7c:4a:8b:84:7a:b0:0e:82:1e:c4:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:CD:5D:42:2D:4B:0C:1F:CF:40:00:D5:61:79:EC:93:D8:9E:06
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pJjNXUItSwwfz0AA1WF57JPYngY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:fd7d:2c9f/128
Signature Algorithm: sha256WithRSAEncryption
88:22:2d:45:08:c2:d6:b2:b5:b6:9e:75:c2:f8:07:2e:45:3d:
5d:0b:7d:4e:89:79:df:50:78:01:1e:a7:79:4e:70:6d:c5:41:
d2:3b:54:ff:69:b2:c8:0c:88:ed:07:f9:b1:18:3a:e0:d6:92:
b6:9f:29:10:0f:41:f1:d7:d6:16:a9:25:fc:66:a5:9c:7f:b7:
82:9c:c6:e2:b1:e3:5f:05:22:c6:34:e7:57:67:37:5b:60:bc:
90:a0:62:4c:e9:b0:f2:2f:83:a0:97:0e:3f:1c:1d:4e:9e:50:
ad:af:9d:67:65:d4:1f:e2:f8:c5:e3:d6:a9:50:35:ca:d7:0a:
c5:8f:27:b5:1b:af:93:9e:ec:8a:6a:5f:51:d1:84:e4:4c:00:
f6:f3:0e:0c:1d:25:1a:d7:36:2b:38:98:8e:60:d1:75:44:f4:
29:12:ce:28:e4:6c:70:12:b9:68:52:49:9b:cb:28:e9:93:18:
d0:5c:5c:ea:ef:73:e7:be:c5:b3:d5:13:7c:38:a2:b0:58:c8:
f9:58:5a:dc:c3:fb:29:b3:e2:46:ee:7c:df:15:45:1d:3d:37:
46:f1:ee:13:8e:70:07:a0:2a:48:c1:33:86:0b:68:71:67:5a:
44:04:1e:3e:93:bf:58:05:91:a3:0c:a8:0c:c9:fe:e7:a5:4d:
f2:fc:a2:11
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZP9fhae00l6pIL3ToCwc4RQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMjI1MTEwNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDk4Y2Q1ZDQyMmQ0YjBjMWZjZjQwMDBkNTYxNzllYzkzZDg5ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+0FAqAze9e3BkbtBvdTWDs1sGql
X0tPd0QYrb+KUoWnEjtpJgBtvFPYwe9Q7GvjCLkOca+GB6Nd8iJHfO4ThiWfm11V
QfUt8Z2JGqmzQ0Ovdk3Pzh6emRELa4bSueELkAy5jmBam+YIZpcXseU4jmEQgjul
7rKJkmxw9FKuUM8MaS6sEPWBUOgwKA3hBCJ9Wf0Ose0WiIYawiCDhDcMZEuUzgyQ
dl20W6QNQhV05l1NGs3Kl5BULBspVLHLsMCsL/vNAVff8AZaiotiqSHad104JilQ
KYU4Mhh7yDCNnpUFa+7UHpaksqiC1FqjjBFhrbG42HxKi4R6sA6CHsQ57wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKSYzV1CLUsMH89AANVheeyT2J4GMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvcEpqTlhVSXRTd3dmejBBQTFXRjU3SlBZbmdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGT/X0snzANBgkqhkiG9w0BAQsFAAOCAQEAiCItRQjC1rK1tp51wvgHLkU9
XQt9Tol531B4AR6neU5wbcVB0jtU/2myyAyI7Qf5sRg64NaStp8pEA9B8dfWFqkl
/GalnH+3gpzG4rHjXwUixjTnV2c3W2C8kKBiTOmw8i+DoJcOPxwdTp5Qra+dZ2XU
H+L4xePWqVA1ytcKxY8ntRuvk57simpfUdGE5EwA9vMODB0lGtc2KziYjmDRdUT0
KRLOKORscBK5aFJJm8so6ZMY0Fxc6u9z577Fs9UTfDiisFjI+Vha3MP7KbPiRu58
3xVFHT03RvHuE45wB6AqSMEzhgtocWdaRAQePpO/WAWRowyoDMn+56VN8vyiEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:58 2025 by rpki-client