Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/teQQTCczFGSwNY8mK1g5XphTpUI.roa
File: teQQTCczFGSwNY8mK1g5XphTpUI.roa (raw, json)
Hash identifier: SY86C7DupmkG89Y73ivfJ/t92aNRQqRv2S8wDVLtlN4=
Subject key identifier: B5:E4:10:4C:27:33:14:64:B0:35:8F:26:2B:58:39:5E:98:53:A5:42
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01953E11B62A5AB5A034A0E2C97AD6E4EA28
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/teQQTCczFGSwNY8mK1g5XphTpUI.roa
Signing time: Tue 25 Feb 2025 17:05:02 +0000
ROA not before: Tue 25 Feb 2025 17:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:3e11:b9f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:11:b6:2a:5a:b5:a0:34:a0:e2:c9:7a:d6:e4:ea:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 25 17:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e4104c27331464b0358f262b58395e9853a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:b9:e4:b9:73:6f:b7:04:f5:ad:45:e8:b0:
7d:d0:fd:a8:b8:30:b5:e3:cb:02:5e:c8:61:27:93:
f2:66:c2:94:c8:c0:e6:df:5d:f8:7f:3e:91:e3:1f:
bc:da:f9:fd:a2:3e:cc:9c:d5:65:f2:c3:9b:c9:8d:
4d:41:d4:38:b5:b9:cb:21:b6:a3:da:5c:b8:34:f6:
ad:36:88:52:eb:8d:24:e8:46:b7:b0:d6:e0:05:e6:
1b:e8:ea:ba:1f:2b:3e:c2:49:bb:b2:0f:6a:1e:cb:
28:7a:3f:d6:ec:41:87:e9:60:b5:78:d9:34:8d:12:
cd:31:93:c6:50:76:c2:39:b7:18:f1:fa:62:4a:26:
e9:35:77:e6:77:34:01:92:e9:10:b1:83:5a:d7:ae:
07:0e:29:86:e9:51:21:d8:71:e3:cc:6d:b7:8f:82:
56:0e:ad:50:9f:e7:dc:eb:39:93:2c:e8:a0:c2:d8:
eb:a4:5a:9b:8b:21:93:1c:71:9e:70:14:32:ba:89:
79:68:ad:2b:d0:c6:59:49:65:e9:91:db:7c:7b:31:
fd:98:30:e1:33:c2:17:65:c8:73:5b:5e:f3:f2:5e:
0c:aa:2b:56:81:e7:bd:90:f3:f3:70:51:9b:e2:bf:
a9:39:e5:43:f5:c1:4a:5f:23:13:c0:bb:0e:de:5f:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:10:4C:27:33:14:64:B0:35:8F:26:2B:58:39:5E:98:53:A5:42
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/teQQTCczFGSwNY8mK1g5XphTpUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:3e11:b9f/128
Signature Algorithm: sha256WithRSAEncryption
5b:ce:19:b8:50:c0:4a:e4:6a:2c:bc:47:3e:c0:a6:b3:9d:db:
06:da:67:55:c3:13:8e:d3:bf:36:b8:05:76:00:e7:c8:a0:93:
75:a5:9c:f8:fb:73:a6:5f:e0:e7:98:e8:1f:d8:6f:e2:ff:2e:
32:c1:b3:c4:0d:67:f1:b5:1f:a8:f4:3a:f2:0e:6d:9e:67:c9:
45:2c:4e:7a:6d:34:8d:20:e5:71:3e:8b:16:0f:7d:b9:e0:9f:
b6:0f:7d:36:90:d8:31:45:ec:de:10:14:de:13:42:f4:cf:77:
8e:2a:f6:05:98:aa:81:e6:cf:0b:83:f9:ec:8f:1b:3d:3e:66:
8e:32:82:6a:8a:d5:60:cd:2e:28:56:46:11:28:3b:18:c6:e0:
ed:5d:2b:58:e4:6f:e2:66:41:5d:e2:f1:0d:f1:0c:1f:db:e1:
b3:b6:d7:84:99:ce:63:fd:e5:0c:c3:90:ff:58:52:63:26:ec:
a1:b1:b8:93:68:fc:62:4f:8b:14:e3:3a:62:36:b5:b5:69:85:
77:9b:99:4c:47:00:29:65:88:5c:70:c5:56:78:34:3c:f8:5a:
0b:5d:10:1f:6f:cf:ea:d3:ee:fa:ca:26:18:ad:ab:09:0f:59:
2a:8b:33:29:e2:df:51:3d:15:58:ef:f9:37:87:ae:95:4e:63:
0a:34:41:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:25 2025 by rpki-client