Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tMcXpCwXJHkpTBOMJhWs94Yu59Y.roa
File: tMcXpCwXJHkpTBOMJhWs94Yu59Y.roa (raw, json)
Hash identifier: m5zejWBVH8uCW8dvsKDmLN4vXcdmdq3V98bob2zm7zg=
Subject key identifier: B4:C7:17:A4:2C:17:24:79:29:4C:13:8C:26:15:AC:F7:86:2E:E7:D6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019546700A994D84FB622C7953F1BC182571
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tMcXpCwXJHkpTBOMJhWs94Yu59Y.roa
Signing time: Thu 27 Feb 2025 08:05:02 +0000
ROA not before: Thu 27 Feb 2025 08:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:466f:504c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:70:0a:99:4d:84:fb:62:2c:79:53:f1:bc:18:25:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 27 08:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4c717a42c172479294c138c2615acf7862ee7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:44:c2:18:b4:4b:9c:13:0f:db:77:96:8c:
5a:6d:b5:82:44:37:95:ff:04:80:fc:b6:2e:2c:38:
82:a9:d1:ff:93:1e:70:90:1f:be:e8:90:18:22:ef:
f2:c0:20:87:ce:d9:f6:86:a4:4e:f4:0d:ac:a2:be:
bd:27:4d:7e:ee:9f:f3:71:10:f4:03:b5:e7:75:4e:
c2:09:b7:97:58:65:73:a8:c1:0f:0f:62:a9:04:51:
54:81:56:99:35:55:26:fa:8e:53:be:76:51:b4:b6:
59:ce:1f:27:05:da:34:02:07:46:91:4a:76:76:72:
f1:7c:fb:e1:11:1f:39:0a:d9:4a:f5:2b:eb:5c:5f:
15:a9:62:3b:37:c0:09:e0:a8:c6:c6:04:9d:c7:ff:
79:be:de:38:cb:4d:88:f9:97:20:0b:4e:8b:73:90:
17:2f:62:af:ed:9d:1d:c6:01:26:49:ca:a3:90:b9:
b7:ee:39:83:87:55:c2:1f:a6:24:da:c7:3f:a7:83:
a2:a7:fd:3e:17:35:db:b6:a6:87:02:60:47:16:48:
90:47:aa:99:3d:98:ef:59:42:76:22:dc:ba:0c:63:
16:5f:99:2b:4f:22:61:f5:f4:f5:64:26:9d:bf:f9:
33:ed:83:ac:1c:43:f2:b5:75:3e:de:06:19:15:9c:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:17:A4:2C:17:24:79:29:4C:13:8C:26:15:AC:F7:86:2E:E7:D6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/tMcXpCwXJHkpTBOMJhWs94Yu59Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:466f:504c/128
Signature Algorithm: sha256WithRSAEncryption
4a:cf:4b:5f:89:7a:20:5b:41:52:9e:e3:99:68:75:11:35:bb:
d4:16:e7:42:a6:6e:ad:1e:18:21:3e:db:9c:ca:55:7e:86:cf:
ad:2e:55:ca:8a:e1:a3:9d:e7:30:54:34:92:65:36:61:00:ac:
6d:50:d5:11:0a:2b:e2:c3:aa:87:67:04:6c:60:0f:0c:61:77:
eb:b0:f1:e7:bb:21:60:7d:28:56:a3:e6:c6:c3:46:f8:09:2f:
27:c5:ac:09:af:07:5e:2b:ac:79:aa:87:f4:60:02:35:ea:11:
c9:64:59:8e:d3:f0:89:28:b5:90:0f:b9:39:d0:db:21:13:4a:
cb:cc:4c:2e:0a:45:eb:32:74:17:f0:22:e6:6d:a3:12:d2:03:
7f:d3:42:2a:0d:9c:b9:8d:5b:3c:f6:e9:22:67:37:98:a0:9f:
f8:93:33:84:9c:2f:c1:06:b2:90:d2:ed:07:cd:2a:72:1c:83:
22:79:7f:7a:d5:cf:0a:df:12:d4:4b:91:d7:75:bf:cb:c4:b5:
70:c1:22:5e:d4:5f:4e:33:c1:99:57:3e:a6:0f:28:b1:86:66:
f1:0e:b7:12:e4:71:7c:10:6e:b5:07:cf:a1:f3:ab:96:00:b2:
33:07:43:e3:ef:5d:e9:2c:4e:17:24:9a:7c:81:b0:11:d3:de:
34:bb:65:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:32:36 2025 by rpki-client