Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vIL1BJmduVwal1lsHrIBb8B77GM.roa
File: vIL1BJmduVwal1lsHrIBb8B77GM.roa (raw, json)
Hash identifier: v4dXVuQTAknjY8oad1QTPTjWiywD13aKFcB34WtsIAM=
Subject key identifier: BC:82:F5:04:99:9D:B9:5C:1A:97:59:6C:1E:B2:01:6F:C0:7B:EC:63
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019438F48F96BFEBA40B69A5A9A3B6892F6F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vIL1BJmduVwal1lsHrIBb8B77GM.roa
Signing time: Mon 06 Jan 2025 00:12:19 +0000
ROA not before: Mon 06 Jan 2025 00:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:f4:8f:96:bf:eb:a4:0b:69:a5:a9:a3:b6:89:2f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 6 00:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc82f504999db95c1a97596c1eb2016fc07bec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:fb:36:30:8c:cc:3a:99:98:f9:28:73:33:
b0:55:d0:6c:a7:7b:5d:c0:8e:a7:e3:87:5d:80:fa:
5e:e9:70:09:1e:16:00:49:43:0a:6f:d4:e9:47:fa:
86:4f:0c:51:66:dc:02:11:8a:0e:c7:48:14:38:35:
a2:68:d4:48:74:e1:ce:cb:9b:a9:8c:b2:c7:2b:30:
8f:05:71:b4:59:8b:81:17:1c:24:38:6d:b9:c3:07:
e0:27:47:22:b0:b8:fd:0c:37:36:54:31:b9:8b:27:
9d:bb:6d:62:d9:9b:c3:8f:b3:2a:ac:35:58:e3:dc:
0b:d8:27:13:6f:82:d4:9e:3a:0b:0e:e5:2d:d3:4c:
88:34:79:20:1e:8f:bf:6c:3e:3b:03:47:28:c0:55:
98:48:a1:8a:9f:ba:47:72:2d:50:7d:19:bb:97:5e:
35:80:d4:4a:59:1b:4d:0e:df:bc:8b:45:9f:e6:79:
7a:e5:cc:16:cf:6b:58:b6:09:be:bb:5f:f6:a3:f1:
c9:5a:93:23:88:f8:d5:39:b2:9f:13:ac:c0:a6:71:
98:2f:f0:9b:8c:31:d3:b7:b0:72:d8:3a:48:af:94:
64:20:70:3a:a8:00:6f:40:72:bb:99:cb:63:9e:ba:
5f:53:46:0e:b9:dc:a6:5a:71:d7:ad:50:85:c1:70:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:82:F5:04:99:9D:B9:5C:1A:97:59:6C:1E:B2:01:6F:C0:7B:EC:63
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/vIL1BJmduVwal1lsHrIBb8B77GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
98:a1:a4:3d:49:a7:6e:a6:c7:82:51:5b:06:56:55:c6:cf:14:
fc:c2:cf:ec:7c:6b:6e:41:9b:fb:7c:0c:b2:f4:85:f5:7e:b4:
2c:8a:4c:ac:f2:77:48:e1:0e:82:d9:7a:c3:2e:18:cc:f2:0c:
26:50:ee:8d:ad:c9:0e:1f:a6:2c:af:89:8e:35:60:dd:e7:83:
f3:43:6d:ce:70:1a:ec:3e:6f:e4:87:84:68:7c:cf:4a:1f:a4:
c1:ad:eb:59:3f:e3:35:70:40:29:b6:47:92:09:77:77:09:7e:
33:ec:66:19:f2:01:11:28:f7:12:24:d9:8f:0a:f0:9f:11:81:
f8:c0:ce:18:fd:64:c8:1e:a5:57:5b:dc:65:71:f8:8f:79:a5:
b3:b8:f2:3f:49:0b:b9:60:a6:e0:a4:53:52:44:3e:d6:a4:42:
c7:ad:ba:f7:1e:4e:02:3e:84:b3:1d:3c:f7:0b:ab:e7:09:7e:
30:32:5c:50:71:4c:f2:fc:4b:a6:22:46:80:4f:23:48:76:8b:
ab:e1:3d:33:de:95:b0:83:ca:04:c6:1d:11:47:ff:8d:42:3f:
ff:9b:df:63:3a:a3:37:0d:d5:82:df:76:7e:4a:37:be:8d:4b:
75:2b:f4:b5:f9:dd:29:3f:95:28:20:e3:bf:72:03:d0:8c:22:
87:e4:f4:ba
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZQ49I+Wv+ukC2mlqaO2iS9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTA2MDAxMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzgyZjUwNDk5OWRiOTVjMWE5NzU5NmMxZWIyMDE2ZmMwN2JlYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lX7NjCMzDqZmPkoczOwVdBsp3td
wI6n44ddgPpe6XAJHhYASUMKb9TpR/qGTwxRZtwCEYoOx0gUODWiaNRIdOHOy5up
jLLHKzCPBXG0WYuBFxwkOG25wwfgJ0cisLj9DDc2VDG5iyedu21i2ZvDj7MqrDVY
49wL2CcTb4LUnjoLDuUt00yINHkgHo+/bD47A0cowFWYSKGKn7pHci1QfRm7l141
gNRKWRtNDt+8i0Wf5nl65cwWz2tYtgm+u1/2o/HJWpMjiPjVObKfE6zApnGYL/Cb
jDHTt7By2DpIr5RkIHA6qABvQHK7mctjnrpfU0YOudymWnHXrVCFwXCGTQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFLyC9QSZnblcGpdZbB6yAW/Ae+xjMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvdklMMUJKbWR1VndhbDFsc0hySUJiOEI3N0dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAmKGkPUmnbqbHglFbBlZVxs8U
/MLP7HxrbkGb+3wMsvSF9X60LIpMrPJ3SOEOgtl6wy4YzPIMJlDuja3JDh+mLK+J
jjVg3eeD80NtznAa7D5v5IeEaHzPSh+kwa3rWT/jNXBAKbZHkgl3dwl+M+xmGfIB
ESj3EiTZjwrwnxGB+MDOGP1kyB6lV1vcZXH4j3mls7jyP0kLuWCm4KRTUkQ+1qRC
x6269x5OAj6Esx089wur5wl+MDJcUHFM8vxLpiJGgE8jSHaLq+E9M96VsIPKBMYd
EUf/jUI//5vfYzqjNw3Vgt92fko3vo1LdSv0tfndKT+VKCDjv3ID0Iwih+T0ug==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:19:02 2025 by rpki-client