Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pe31epRrFqGkgQdmiHVSjtxMkeY.roa
File: pe31epRrFqGkgQdmiHVSjtxMkeY.roa (raw, json)
Hash identifier: pdi51SunURuTGvkjMoeqpiovaZD5BodeAI+K+O0GtVQ=
Subject key identifier: A5:ED:F5:7A:94:6B:16:A1:A4:81:07:66:88:75:52:8E:DC:4C:91:E6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958A7C7F94AD5ADA8D2997DFB528A97AC6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pe31epRrFqGkgQdmiHVSjtxMkeY.roa
Signing time: Wed 12 Mar 2025 13:12:49 +0000
ROA not before: Wed 12 Mar 2025 13:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:7c:7f:94:ad:5a:da:8d:29:97:df:b5:28:a9:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 13:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5edf57a946b16a1a48107668875528edc4c91e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f6:19:fc:02:19:16:e4:b9:96:d4:98:b2:f0:
13:8e:87:ae:80:51:cf:60:5f:4a:b2:91:da:c1:eb:
8a:42:09:d9:29:1f:53:86:6e:2c:6b:14:c0:24:8b:
a9:db:6e:28:f1:3a:7a:33:fc:79:49:19:b6:12:de:
52:d3:98:46:6a:35:1c:40:9a:16:90:2e:b0:11:0b:
7c:b0:e2:1e:fb:df:b5:4a:2e:af:5c:d2:72:23:bb:
99:8a:71:b2:b8:76:1e:82:af:2e:fa:2c:85:91:d2:
17:d3:26:39:29:90:de:1f:dc:01:00:1f:e8:4e:ba:
4f:f2:c7:4f:36:77:5f:d2:3a:56:f2:c5:f1:b9:46:
ab:d7:5a:3c:14:6e:53:09:4c:1b:1f:e5:99:c5:7c:
30:dd:d2:27:e8:fa:b2:07:6e:c3:d4:cf:1f:06:d4:
34:46:bd:52:6e:89:75:43:1b:17:da:12:2c:d8:7c:
f0:6d:c0:2f:27:06:c0:82:3b:fb:ea:d1:51:db:ab:
ae:bf:cc:ff:95:8c:05:bb:4a:9b:b1:59:7d:73:6e:
14:a0:b3:00:17:a3:1b:d8:09:d7:dc:e7:7d:9c:df:
43:79:68:58:f1:d3:a0:f0:25:31:13:3e:b7:cc:9b:
62:d4:5f:41:f5:cd:78:4e:03:30:f1:a9:63:d4:61:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:ED:F5:7A:94:6B:16:A1:A4:81:07:66:88:75:52:8E:DC:4C:91:E6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pe31epRrFqGkgQdmiHVSjtxMkeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
27:f4:d7:0d:72:6b:10:01:d5:4b:5d:c6:41:3b:4c:c6:01:04:
1e:50:e5:d4:d6:f6:9b:40:fd:25:0e:28:bd:c0:a9:9f:7a:ba:
a8:41:0a:06:c4:f4:39:88:6c:82:75:6a:bc:ab:21:d8:11:6f:
fd:02:ae:97:7a:41:e8:87:aa:13:e1:e0:40:b6:f5:8d:50:d2:
98:16:3f:5b:95:6d:4f:25:e8:07:1f:3f:f8:c2:07:ab:1a:24:
fc:c8:db:59:9d:57:78:47:e2:db:05:04:7c:b8:26:5a:26:06:
73:c6:ff:07:e5:d2:6e:43:a4:95:3c:5e:55:61:15:ee:1c:06:
1f:78:58:d0:9a:5a:1c:09:80:c7:34:ce:c0:d9:d5:c3:da:d4:
41:79:3a:cb:a4:dd:c6:23:c6:56:cb:39:a2:4c:db:07:f5:ff:
dc:75:43:10:10:6d:97:d8:bb:2e:91:44:a6:94:a1:26:72:73:
54:e8:64:e1:c0:8c:31:bd:4c:4a:a1:fb:92:f9:bb:7c:53:b7:
98:0d:7d:7d:e6:88:f2:75:2e:43:e5:b0:08:a9:9b:f9:90:e5:
41:74:95:8f:12:fa:d7:2a:14:03:2d:b0:f2:aa:ee:ad:8f:86:
f0:67:a7:41:d5:e4:36:9c:f1:49:8a:14:8a:cd:2f:d8:e3:05:
1a:82:c9:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:17:37 2025 by rpki-client