Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rBjNizS9fjxyPC1orTJMspP-gIY.roa
File: rBjNizS9fjxyPC1orTJMspP-gIY.roa (raw, json)
Hash identifier: LEuRi6WPcbj/2jBWtR1qCJaHNeYd5Bu9E6i5pysBO0w=
Subject key identifier: AC:18:CD:8B:34:BD:7E:3C:72:3C:2D:68:AD:32:4C:B2:93:FE:80:86
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A43AB5F53BE4D94A7A448D13382747AE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rBjNizS9fjxyPC1orTJMspP-gIY.roa
Signing time: Mon 17 Mar 2025 13:11:05 +0000
ROA not before: Mon 17 Mar 2025 13:11:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:3a:b5:f5:3b:e4:d9:4a:7a:44:8d:13:38:27:47:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 13:11:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac18cd8b34bd7e3c723c2d68ad324cb293fe8086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:7b:6b:1b:61:c0:cd:f1:c6:40:30:80:2a:
b4:40:6d:60:40:89:da:9f:50:14:bb:cf:9e:53:18:
7c:a6:53:be:34:b8:75:4e:c4:36:c5:54:06:46:dd:
d5:7f:65:86:4b:a4:f3:18:dc:62:00:d6:be:94:4b:
53:aa:63:e5:dc:8e:11:99:f2:bb:72:fd:cd:34:ee:
96:92:41:60:c9:b5:2a:73:79:7a:aa:c4:73:0d:2a:
7d:c2:55:94:ef:ae:52:4a:70:dd:eb:04:a1:be:84:
3a:78:2c:16:47:b2:96:32:ae:0b:dd:88:71:d6:25:
27:8a:e4:6c:51:58:5b:b7:87:51:38:4c:81:69:6f:
b7:43:39:bb:de:46:91:5b:7b:8b:97:55:f9:31:b6:
ec:59:29:82:6d:f9:df:30:e9:2c:48:de:5e:7c:8e:
8c:f9:f1:0e:0c:d3:bf:41:8f:9a:24:2a:36:7d:7d:
ae:fa:71:dd:be:1b:49:30:c5:8a:33:44:76:2d:f4:
34:fc:ef:08:dc:c2:ae:3e:c7:44:52:0b:0a:6e:e5:
68:ea:49:39:87:b8:0f:f2:72:e3:08:28:cb:b1:83:
88:63:f7:43:7f:a2:9b:3a:ee:bb:eb:ef:ba:18:97:
cb:ac:f7:8c:7c:cc:ba:dc:c1:37:a8:16:63:95:45:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:CD:8B:34:BD:7E:3C:72:3C:2D:68:AD:32:4C:B2:93:FE:80:86
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/rBjNizS9fjxyPC1orTJMspP-gIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
23:b1:81:0a:d3:c3:7c:59:c6:1d:25:fe:99:88:fc:16:12:28:
43:44:81:30:d6:9f:65:2f:f4:7f:80:de:d9:0c:25:93:e3:ff:
1f:39:c9:e9:52:fc:d2:a1:2d:d2:7b:d6:fc:7d:ac:f4:5c:45:
6b:43:d8:4f:3c:f8:b7:9c:cf:05:f4:b1:a0:7d:1a:e8:60:15:
5c:26:b6:fe:9e:0b:01:2b:11:73:f9:32:33:f3:24:eb:43:03:
f9:da:3e:a3:a8:9e:eb:f9:68:b3:36:92:53:15:86:67:0a:e8:
b5:a9:51:11:93:44:0c:07:18:14:e0:18:10:75:9e:6e:37:6f:
ab:61:d5:6a:41:c8:4d:ab:9a:ef:5a:b7:cb:3d:90:be:8e:38:
96:55:10:9e:df:f1:eb:8c:25:fa:cc:83:63:55:2b:74:37:80:
f8:0d:02:50:8d:c0:57:c2:04:9a:fa:8a:a4:4e:0e:f4:6e:65:
25:be:14:8e:97:01:51:55:4c:29:6b:e9:b6:46:54:fd:34:3f:
67:9a:c7:ea:44:ce:89:83:7e:e9:fb:4d:52:ad:d6:ca:47:be:
c1:20:9f:2f:29:ba:db:d4:8c:27:a3:4d:37:04:88:a5:86:ea:
f6:99:43:b3:ec:a2:c1:53:ef:57:a6:da:b1:a4:a9:77:74:a2:
b6:8f:fe:ac
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWkOrX1O+TZSnpEjRM4J0euMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE3MTMxMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzE4Y2Q4YjM0YmQ3ZTNjNzIzYzJkNjhhZDMyNGNiMjkzZmU4MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKZ7axthwM3xxkAwgCq0QG1gQIna
n1AUu8+eUxh8plO+NLh1TsQ2xVQGRt3Vf2WGS6TzGNxiANa+lEtTqmPl3I4RmfK7
cv3NNO6WkkFgybUqc3l6qsRzDSp9wlWU765SSnDd6wShvoQ6eCwWR7KWMq4L3Yhx
1iUniuRsUVhbt4dROEyBaW+3Qzm73kaRW3uLl1X5MbbsWSmCbfnfMOksSN5efI6M
+fEODNO/QY+aJCo2fX2u+nHdvhtJMMWKM0R2LfQ0/O8I3MKuPsdEUgsKbuVo6kk5
h7gP8nLjCCjLsYOIY/dDf6KbOu676++6GJfLrPeMfMy63ME3qBZjlUVqcwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFKwYzYs0vX48cjwtaK0yTLKT/oCGMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvckJqTml6Uzlmanh5UEMxb3JUSk1zcFAtZ0lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAI7GBCtPDfFnGHSX+mYj8FhIo
Q0SBMNafZS/0f4De2Qwlk+P/HznJ6VL80qEt0nvW/H2s9FxFa0PYTzz4t5zPBfSx
oH0a6GAVXCa2/p4LASsRc/kyM/Mk60MD+do+o6ie6/loszaSUxWGZwrotalREZNE
DAcYFOAYEHWebjdvq2HVakHITaua71q3yz2Qvo44llUQnt/x64wl+syDY1UrdDeA
+A0CUI3AV8IEmvqKpE4O9G5lJb4UjpcBUVVMKWvptkZU/TQ/Z5rH6kTOiYN+6ftN
Uq3Wyke+wSCfLym629SMJ6NNNwSIpYbq9plDs+yiwVPvV6basaSpd3Sito/+rA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:47 2025 by rpki-client