Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sCwjACf88JrM7Hi3194qZVc3PMA.roa
File: sCwjACf88JrM7Hi3194qZVc3PMA.roa (raw, json)
Hash identifier: Z5aXYM1dOebH4BJ0dcmwSf/HtjE9WHDf5rkKUh8Gv9c=
Subject key identifier: B0:2C:23:00:27:FC:F0:9A:CC:EC:78:B7:D7:DE:2A:65:57:37:3C:C0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A39695CF162CF1BFA8639BA466D11C06
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sCwjACf88JrM7Hi3194qZVc3PMA.roa
Signing time: Mon 17 Mar 2025 10:11:49 +0000
ROA not before: Mon 17 Mar 2025 10:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:96:95:cf:16:2c:f1:bf:a8:63:9b:a4:66:d1:1c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 10:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b02c230027fcf09accec78b7d7de2a6557373cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:23:7f:bc:5d:a7:49:3e:d1:8b:49:87:c8:
da:3a:11:8a:74:0e:74:c6:ff:24:71:5b:88:ad:0f:
65:c6:5c:51:b6:99:0a:39:36:d5:d5:4f:e2:15:80:
fb:66:0b:fa:91:7c:ba:b5:c6:4c:ea:1f:9f:2c:45:
91:fd:b4:97:96:ad:47:11:3b:c7:79:93:70:fc:58:
90:f1:cb:56:4c:b1:cb:2a:80:d5:4f:7b:30:bc:e1:
1e:33:08:cc:0e:80:13:a3:76:a8:c5:52:cd:1a:b0:
3c:0e:9d:09:01:5e:9f:b4:02:f2:46:f5:57:ce:ef:
de:a3:20:15:7d:01:be:73:0b:17:5f:3f:45:32:35:
cd:16:39:ea:d4:dc:5c:e6:f6:a7:27:bc:75:7a:ef:
78:3f:c9:53:f1:fd:be:bf:fc:86:30:73:f5:78:1b:
4b:8e:43:6d:15:26:4a:eb:84:90:7a:5d:f8:bb:a4:
a4:4a:6c:16:12:36:8f:96:56:67:c4:c6:06:5e:14:
1a:57:12:1d:b4:bf:45:e9:a2:34:c5:a5:c3:5e:02:
ae:32:05:b5:d1:a0:56:5f:e4:8d:6c:de:bb:97:7c:
7c:95:42:8a:be:ee:0e:68:d2:2f:e9:2d:7c:9a:8c:
12:95:b6:96:63:a2:cc:2e:07:1b:a1:17:44:5b:78:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:23:00:27:FC:F0:9A:CC:EC:78:B7:D7:DE:2A:65:57:37:3C:C0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/sCwjACf88JrM7Hi3194qZVc3PMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
31:cf:33:01:ce:76:29:85:9f:81:70:af:b3:3c:1b:78:bc:3a:
99:0a:1e:92:ce:74:67:37:19:5e:9d:5d:6e:e9:43:04:50:2b:
5f:9c:d7:c7:61:20:7a:8c:b9:65:91:64:9c:74:89:25:8a:c7:
36:81:ba:c1:24:97:9a:a7:51:ad:4c:b8:1e:6d:4b:f4:52:e8:
bb:41:ea:59:a2:5e:75:b5:ed:5b:6b:2d:b1:13:1c:53:ed:c6:
e0:d2:4a:16:a3:7a:98:aa:4d:5a:22:81:c0:c2:0e:f0:00:db:
75:fb:0a:ec:dd:92:1c:e6:9d:41:6a:23:19:96:b2:49:f3:43:
94:e7:f1:a8:60:ba:40:29:6d:ec:4c:d3:7a:ea:c8:1c:db:66:
67:b7:01:be:79:e7:08:cf:77:f0:03:b9:c9:f1:f0:dd:a7:76:
34:78:b7:4d:34:5e:4a:4d:1e:8d:87:55:05:0f:01:97:b1:0e:
64:84:ab:82:88:69:80:5c:a5:74:22:cf:40:29:3d:78:62:9f:
87:d7:68:5c:d6:d7:25:16:e8:b4:3e:17:32:3c:c4:a9:f0:f2:
cd:74:2f:cd:36:7d:eb:67:4b:0a:d6:55:c4:a9:9d:29:6d:ab:
18:90:78:0c:d2:39:72:fb:37:a8:d0:ef:f6:58:73:54:11:06:
df:0c:9f:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:31 2025 by rpki-client