Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tITOCFsbQfKV0EPY62V853y4-0g.roa
File: tITOCFsbQfKV0EPY62V853y4-0g.roa (raw, json)
Hash identifier: rSBBZ0T1T8jjZOLGpGKA1VBiOPMQ/WHKvHbtU/DAolU=
Subject key identifier: B4:84:CE:08:5B:1B:41:F2:95:D0:43:D8:EB:65:7C:E7:7C:B8:FB:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195899EF12D5DAA7E8D29D5F7D464F5ECB2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tITOCFsbQfKV0EPY62V853y4-0g.roa
Signing time: Wed 12 Mar 2025 09:10:49 +0000
ROA not before: Wed 12 Mar 2025 09:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:9e:f1:2d:5d:aa:7e:8d:29:d5:f7:d4:64:f5:ec:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 09:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b484ce085b1b41f295d043d8eb657ce77cb8fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:4f:eb:83:de:c8:17:f5:9f:9a:14:88:b6:
ab:7f:23:8e:93:da:3d:51:d0:2f:c4:bb:8e:b2:d9:
cd:d6:e1:22:24:cf:ad:48:fd:1d:5f:5c:0b:c4:c7:
47:aa:2f:ac:e7:74:eb:cd:0e:53:4b:96:8a:7b:9c:
7c:64:df:59:79:94:13:38:c4:f8:70:e6:d5:e1:62:
19:ea:f8:bc:a5:0e:a5:e0:04:9d:44:e7:6a:a1:18:
71:e1:a8:28:20:a2:9a:a9:bd:4d:10:d0:f1:26:bc:
5f:4c:b3:a5:05:c1:d5:41:35:dd:4a:26:b1:fe:2d:
74:a7:cc:87:a5:46:01:2a:63:53:8b:a5:6a:90:bc:
88:32:6c:20:8e:50:de:54:6c:f8:31:52:79:77:67:
27:a7:f2:78:1b:b3:7d:ab:b1:ba:ac:ef:d8:03:68:
0a:06:85:54:69:a6:57:fb:93:fd:47:75:37:f7:fa:
8c:12:bd:af:e7:a3:10:dc:59:f9:8f:fe:72:dd:e2:
98:b1:4a:dd:32:74:96:66:12:9a:d3:01:bd:05:d0:
97:e5:ce:0a:09:73:05:83:35:8d:b5:0a:b5:0f:9a:
ff:ec:37:e8:c2:b7:23:ca:3a:d6:1f:76:1d:f5:e2:
df:d1:6c:aa:d2:63:e2:87:a2:45:d3:7f:c1:27:ee:
5d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:CE:08:5B:1B:41:F2:95:D0:43:D8:EB:65:7C:E7:7C:B8:FB:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tITOCFsbQfKV0EPY62V853y4-0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
6f:7e:e3:f4:c7:1f:90:67:eb:2e:1d:70:2b:af:8a:f8:b3:44:
83:b1:61:c2:5c:17:76:7b:30:f5:4c:a9:72:74:7a:39:ff:75:
c3:4c:8a:ee:96:c3:2b:1e:75:07:6b:9a:91:c3:84:bf:c9:69:
25:7a:95:01:a9:7a:6b:8d:82:5c:44:2f:47:63:45:a1:89:0b:
42:b6:18:8b:b0:9b:7e:9a:fe:c5:15:6f:4d:f5:33:42:bf:af:
5a:11:25:a6:ab:dc:19:55:c1:82:ac:cc:ae:72:d0:31:93:4a:
a8:71:b5:74:06:3a:57:14:07:d5:f7:b7:9a:bd:af:da:a6:96:
0e:bd:87:0c:d9:8f:4c:e3:fa:c2:5f:8f:94:a2:60:85:5e:b2:
e5:53:a7:6d:ad:d6:ab:32:fc:ae:66:2e:d5:58:ce:cf:af:d5:
23:ff:62:f1:bd:8a:e9:f2:06:e9:b3:c0:e4:54:9e:a0:39:dd:
9c:f4:7d:cb:ae:c1:7c:d6:d7:27:c2:58:9f:04:51:5a:49:82:
66:7b:b1:c5:cd:e4:25:c3:f5:e5:a3:be:07:6c:d1:ab:61:8b:
49:ba:9a:e5:9c:40:94:6b:65:23:f5:ae:c4:85:72:2d:be:4f:
e7:eb:a3:e1:34:b5:7b:a0:92:2f:08:8a:8e:4f:19:4a:ed:69:
5f:e0:0c:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:43 2025 by rpki-client