Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r6HivDDhTQLXvvfUlt5E02rRAaU.roa
File: r6HivDDhTQLXvvfUlt5E02rRAaU.roa (raw, json)
Hash identifier: EWzCi+El0WIPv4SngZU9tH8V2b1Wj12BYEvZ7osavl0=
Subject key identifier: AF:A1:E2:BC:30:E1:4D:02:D7:BE:F7:D4:96:DE:44:D3:6A:D1:01:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A1A74A744E7CCBAFA3729127587B2832
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r6HivDDhTQLXvvfUlt5E02rRAaU.roa
Signing time: Mon 17 Mar 2025 01:10:49 +0000
ROA not before: Mon 17 Mar 2025 01:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:a7:4a:74:4e:7c:cb:af:a3:72:91:27:58:7b:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 01:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa1e2bc30e14d02d7bef7d496de44d36ad101a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:5a:97:c9:65:9e:a3:d7:bb:5a:4e:d5:f5:
c8:c3:ff:67:35:e2:08:90:12:66:2a:87:a0:27:a4:
49:62:f4:1c:c0:5d:86:50:9f:c3:cb:90:de:52:81:
62:99:94:52:41:45:a0:b8:7e:25:7a:5e:da:71:40:
f3:39:fe:62:6f:f8:47:a2:6c:b6:24:13:8f:2f:4f:
26:e1:5b:01:33:95:db:a3:39:f5:09:0a:51:ca:37:
05:88:29:84:d1:5d:7d:e4:2e:2c:2a:54:91:de:ae:
fe:b3:0d:b6:13:4e:3a:9e:fb:c3:df:63:12:fa:83:
ff:29:5f:f0:2d:aa:12:48:b2:be:06:80:24:62:7e:
09:59:fd:4d:a6:64:51:e3:56:08:fb:f9:c0:43:f6:
33:fa:e2:1b:f2:f4:d7:23:73:d8:04:41:ef:9c:b2:
3f:e7:f4:9a:28:47:92:e2:b3:4c:0d:a1:68:15:63:
dc:d7:af:c6:9c:d8:da:db:af:38:d4:12:15:85:e4:
0e:87:7d:7a:40:aa:81:42:66:0d:3f:8c:42:8c:6d:
e2:c3:d7:ba:68:39:72:32:85:a8:b6:ab:de:16:f4:
8f:a5:17:15:44:51:3f:93:d5:1a:58:76:2c:ab:4e:
fb:b9:5e:2f:d9:fb:5c:86:7d:bc:16:54:e5:5b:87:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:E2:BC:30:E1:4D:02:D7:BE:F7:D4:96:DE:44:D3:6A:D1:01:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r6HivDDhTQLXvvfUlt5E02rRAaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
00:44:2b:4c:7a:62:07:4b:84:05:c2:18:4a:c6:ab:41:6d:47:
fa:4f:90:e4:12:a6:99:86:22:e4:72:8c:e6:6b:ac:f9:c4:be:
31:9d:b3:f9:e0:73:2f:19:cf:72:68:f5:70:0a:71:9d:b4:c2:
95:cd:68:69:b6:3b:ed:b8:32:76:51:e3:c3:e1:e6:2e:11:94:
5c:67:da:df:f8:7b:74:e5:ab:bd:8f:83:0c:b1:9d:5b:2c:11:
f3:73:67:6f:61:d3:30:01:50:fe:28:c2:71:0c:77:b1:51:b9:
82:da:87:c7:5a:28:3d:5a:9a:67:0b:5c:9c:36:2f:86:14:7e:
0c:11:a6:c3:b4:ea:87:b5:2b:d9:6c:7d:95:01:1c:ff:24:97:
31:b6:e2:3b:6e:6b:94:a1:8f:77:05:ff:6a:07:0a:f5:b8:05:
9b:b0:47:e3:eb:bf:3b:b8:93:d9:8e:64:c9:98:1f:c3:2d:bd:
8a:88:d8:ca:0a:7d:af:73:f2:1f:62:cb:d4:c8:e8:ed:08:37:
34:d5:21:39:af:a2:c1:c0:89:b4:33:f5:06:29:8a:0d:e7:62:
b6:4d:b6:39:1d:7e:2c:b8:c2:cf:e0:53:f2:69:e2:ef:29:c5:
43:19:4e:db:0c:8b:53:4d:0e:00:54:8c:46:9a:54:e9:ed:66:
e6:af:bf:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:22 2025 by rpki-client