Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pzqBiEtbmTs2epHj8dujh_7b93g.roa
File: pzqBiEtbmTs2epHj8dujh_7b93g.roa (raw, json)
Hash identifier: jfYbenYoo3TnuJq5cIIfE+qsjOM0u/nmEJkvmh/Br2I=
Subject key identifier: A7:3A:81:88:4B:5B:99:3B:36:7A:91:E3:F1:DB:A3:87:FE:DB:F7:78
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958B583AA2C94021130DB412995C62F0BD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pzqBiEtbmTs2epHj8dujh_7b93g.roa
Signing time: Wed 12 Mar 2025 17:12:49 +0000
ROA not before: Wed 12 Mar 2025 17:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:58:3a:a2:c9:40:21:13:0d:b4:12:99:5c:62:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 17:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73a81884b5b993b367a91e3f1dba387fedbf778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:fc:68:66:bc:a7:d5:d6:bb:18:f8:ba:a2:
bd:f3:3a:71:96:72:1c:ec:2d:1a:3a:ed:94:e2:d6:
25:9f:6a:ac:96:3d:cc:96:9e:04:3d:c6:57:95:e4:
90:21:db:75:74:c7:d8:89:47:82:cd:77:55:79:eb:
58:70:f7:ef:a3:c8:bb:20:1d:64:34:3b:b9:ea:03:
ba:ed:88:2d:83:11:6b:b5:f2:a0:e4:5c:b7:2b:92:
fe:6d:27:83:9b:46:39:4f:a9:59:69:1c:fa:37:de:
54:ed:d7:b1:dd:4f:e6:be:76:bf:d3:4c:51:56:29:
9f:56:82:b6:c0:4e:30:37:0d:73:a2:ef:08:81:90:
4c:11:8d:92:63:a9:62:87:c2:5b:d4:c1:91:9d:27:
06:c3:f1:7f:e0:60:22:14:6c:c8:3c:0e:73:a5:f5:
3f:8a:80:1a:a6:87:f1:b7:4b:54:48:02:c7:fc:1f:
72:18:49:7a:38:67:6d:34:5e:2d:c4:28:e5:87:93:
14:69:c3:f0:9a:6e:49:88:91:bb:8c:fc:69:50:60:
d5:01:7d:5f:56:0e:1a:50:31:35:41:0f:6d:c3:a4:
f6:39:f0:96:a0:89:ec:41:db:48:15:33:26:34:97:
6a:2a:e5:b6:d8:82:47:b1:24:1d:69:bf:d9:0c:7b:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:81:88:4B:5B:99:3B:36:7A:91:E3:F1:DB:A3:87:FE:DB:F7:78
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/pzqBiEtbmTs2epHj8dujh_7b93g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
4d:c1:be:11:56:f6:16:b8:39:f9:06:65:f7:41:42:29:41:2f:
b8:3b:82:28:5f:a7:9a:60:22:b3:35:77:b2:c0:ef:c8:77:51:
ae:80:db:84:1d:a1:4f:5c:43:9e:5f:e4:53:2d:46:f9:0d:ef:
28:a0:5f:4c:e9:e4:61:9d:99:59:45:00:d4:a8:66:83:ee:3d:
02:98:65:68:e2:6d:ee:8b:63:25:88:6a:6d:e3:62:86:15:53:
c8:c2:7f:90:86:01:12:2d:a6:59:b9:66:27:9f:3a:76:b0:8f:
02:15:d7:6a:6b:57:81:d0:65:ed:7f:ff:f8:c1:86:3f:90:09:
a9:e8:88:db:e8:82:86:fc:8f:59:69:12:0f:f7:ae:7c:fa:1c:
fe:5c:2a:6c:40:67:66:21:a0:36:b4:42:1c:fd:90:80:0e:92:
33:19:e0:6e:9e:15:c1:4b:a0:ee:ea:78:87:c1:0f:4f:c3:36:
c5:2c:82:dd:99:f7:df:48:fc:2d:07:4c:e9:94:1e:d4:38:30:
24:85:71:88:aa:3e:88:10:98:ec:54:13:b0:f4:e6:89:20:7f:
b3:09:23:61:33:a6:61:60:10:d8:d4:9f:a9:40:14:90:fb:90:
b0:31:b4:d4:aa:8f:a6:08:49:4b:4c:bc:96:4d:e6:a7:a0:9a:
5b:41:be:06
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWLWDqiyUAhEw20EplcYvC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzEyMTcxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzNhODE4ODRiNWI5OTNiMzY3YTkxZTNmMWRiYTM4N2ZlZGJmNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4P8aGa8p9XWuxj4uqK98zpxlnIc
7C0aOu2U4tYln2qslj3Mlp4EPcZXleSQIdt1dMfYiUeCzXdVeetYcPfvo8i7IB1k
NDu56gO67YgtgxFrtfKg5Fy3K5L+bSeDm0Y5T6lZaRz6N95U7dex3U/mvna/00xR
VimfVoK2wE4wNw1zou8IgZBMEY2SY6lih8Jb1MGRnScGw/F/4GAiFGzIPA5zpfU/
ioAapofxt0tUSALH/B9yGEl6OGdtNF4txCjlh5MUacPwmm5JiJG7jPxpUGDVAX1f
Vg4aUDE1QQ9tw6T2OfCWoInsQdtIFTMmNJdqKuW22IJHsSQdab/ZDHs37wIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKc6gYhLW5k7NnqR4/Hbo4f+2/d4MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvcHpxQmlFdGJtVHMyZXBIajhkdWpoXzdiOTNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEATcG+EVb2Frg5+QZl90FCKUEv
uDuCKF+nmmAiszV3ssDvyHdRroDbhB2hT1xDnl/kUy1G+Q3vKKBfTOnkYZ2ZWUUA
1Khmg+49AphlaOJt7otjJYhqbeNihhVTyMJ/kIYBEi2mWblmJ586drCPAhXXamtX
gdBl7X//+MGGP5AJqeiI2+iChvyPWWkSD/eufPoc/lwqbEBnZiGgNrRCHP2QgA6S
Mxngbp4VwUug7up4h8EPT8M2xSyC3Zn330j8LQdM6ZQe1DgwJIVxiKo+iBCY7FQT
sPTmiSB/swkjYTOmYWAQ2NSfqUAUkPuQsDG01KqPpghJS0y8lk3mp6CaW0G+Bg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:16:07 2025 by rpki-client