Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8iP3KhBJtogm2g-_nqWpBOVHIk.roa
File: r8iP3KhBJtogm2g-_nqWpBOVHIk.roa (raw, json)
Hash identifier: XyH0NEusgAVLNml/2TqFVXKP7IoMfcMpiSwvaRXd138=
Subject key identifier: AF:C8:8F:DC:A8:41:26:DA:20:9B:68:3E:FE:7A:96:A4:13:95:1C:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194DF030D5085BDBF433F4D406F1CCFB773
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8iP3KhBJtogm2g-_nqWpBOVHIk.roa
Signing time: Fri 07 Feb 2025 06:05:06 +0000
ROA not before: Fri 07 Feb 2025 06:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:df02:8709/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:03:0d:50:85:bd:bf:43:3f:4d:40:6f:1c:cf:b7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 7 06:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc88fdca84126da209b683efe7a96a413951c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:6b:96:42:7e:1e:d7:07:02:49:6a:51:3d:
b1:df:82:a9:b0:9e:a9:93:64:5e:5d:d1:b6:cf:8b:
9c:3d:34:90:20:22:3c:66:bf:54:26:67:21:21:88:
a4:26:b5:e2:1e:91:94:52:a0:c9:78:9e:c3:e1:e8:
28:26:06:b9:79:38:b3:db:6a:b4:87:be:9d:4c:d1:
b7:ab:5a:88:f1:55:68:bc:40:14:7a:99:ca:1d:42:
25:7b:56:fe:6f:6e:17:59:94:50:b3:bf:30:12:8e:
27:11:54:ee:15:ed:3f:61:ad:76:83:f3:16:2f:6d:
f8:55:48:2c:89:85:a1:ee:dd:f0:45:75:37:f8:f1:
72:71:e6:64:f8:7e:19:60:39:8b:31:23:61:11:ec:
e3:a7:c6:f4:ad:80:2e:b6:88:24:cc:c0:2c:d4:68:
e0:7e:ba:d0:ce:93:cd:47:94:3e:8b:ca:04:70:7b:
4c:c1:49:65:e3:db:7b:49:31:d7:72:da:6a:8b:25:
57:e2:34:f4:a5:f7:7e:80:34:33:ed:dd:6c:40:73:
c4:92:d2:e7:ce:24:89:66:03:a3:06:df:39:b9:5e:
de:7b:77:f2:7e:3c:cd:43:71:de:f3:8e:5e:bd:10:
39:f3:ee:02:86:20:3f:0f:ce:9e:52:50:bb:2a:9c:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:8F:DC:A8:41:26:DA:20:9B:68:3E:FE:7A:96:A4:13:95:1C:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/r8iP3KhBJtogm2g-_nqWpBOVHIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:df02:8709/128
Signature Algorithm: sha256WithRSAEncryption
59:ac:47:f3:1f:ab:2f:79:06:b6:ed:13:5f:3e:45:51:8f:ec:
ed:24:2b:8a:03:25:c1:68:95:28:a4:45:b5:bf:26:54:7c:f6:
1e:5d:e7:66:60:f4:2a:a4:a6:27:cc:d2:e2:9c:dd:98:2b:a1:
39:99:98:68:ea:b4:67:e7:68:0d:7c:34:4f:16:f0:bc:41:21:
79:3a:37:7b:5b:eb:d5:0d:3d:55:b8:d6:3a:98:28:7a:8f:45:
c7:7d:59:3a:ed:00:b5:6f:08:9d:bd:a2:66:8f:c5:a9:39:88:
a9:8b:87:d7:c0:03:dd:dd:b1:ff:5f:ae:a6:10:e8:85:6e:53:
5a:c5:0e:70:57:8c:21:6b:ac:a2:14:c5:24:c5:0f:3b:32:9e:
07:e8:18:fd:4d:0c:eb:81:0b:21:d7:c1:6b:a4:65:95:23:2e:
51:72:48:62:9e:0a:1d:ff:88:f3:7f:a1:3a:66:54:82:65:fb:
18:9d:25:3a:8e:16:5b:f2:cd:b6:29:68:f6:f5:3b:17:01:ac:
7c:7a:9f:25:8f:2f:61:2f:da:72:c9:bc:ed:13:bc:71:84:db:
50:11:dd:77:e3:ca:10:9c:c5:1d:8e:3d:45:91:dc:42:62:0e:
02:31:a5:8c:c0:02:bb:46:51:06:ad:f6:c7:27:b8:1a:f6:4c:
0f:d2:b9:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:32:18 2025 by rpki-client