Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/voO6Fi0pCQrr143-0M_5KMMQBmc.roa
File: voO6Fi0pCQrr143-0M_5KMMQBmc.roa (raw, json)
Hash identifier: oyrKomkgvl2A5tV7aAhBkPNCnul3oIz3OQ5VZdL/tvQ=
Subject key identifier: BE:83:BA:16:2D:29:09:0A:EB:D7:8D:FE:D0:CF:F9:28:C3:10:06:67
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959613B8C20BDE595CCF167CB607C85E71
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/voO6Fi0pCQrr143-0M_5KMMQBmc.roa
Signing time: Fri 14 Mar 2025 19:13:49 +0000
ROA not before: Fri 14 Mar 2025 19:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:96:13:b8:c2:0b:de:59:5c:cf:16:7c:b6:07:c8:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 14 19:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be83ba162d29090aebd78dfed0cff928c3100667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:e3:51:de:00:a9:82:8d:8a:18:98:15:84:
48:ff:02:14:39:37:08:34:ea:e6:ec:23:d3:a7:dd:
de:f6:07:5a:fa:c7:7f:8a:fd:46:b0:88:f0:4c:d1:
8d:cf:5c:73:19:74:d5:08:27:4d:44:74:cc:38:91:
98:b3:68:1a:07:5b:bf:b9:1b:2d:2b:3c:7f:c6:14:
8e:d2:35:02:2e:ad:04:70:91:a6:65:11:c0:36:12:
93:ea:88:24:2d:8b:51:6f:68:b3:16:ea:0b:2b:6f:
91:a2:9e:65:20:d0:d8:a8:df:e1:87:fc:6f:1d:4b:
02:00:5e:1e:8c:31:ec:de:0c:cd:e5:3c:2d:b5:d2:
11:b2:2c:cd:c6:b0:da:c0:4d:4d:a9:c9:bc:1e:cb:
78:d8:84:4f:ad:2b:2f:29:ee:6c:14:43:02:50:1d:
6b:d4:36:6e:dd:b4:c4:b2:44:7a:80:ad:4e:2f:2b:
00:e5:44:8a:b9:a3:6f:f8:73:ac:96:5d:9e:7b:42:
57:f3:7e:cb:40:9d:f3:57:11:4a:0d:ad:61:4a:4f:
79:0b:f2:1e:f4:87:92:03:4d:e7:ea:9d:c1:8f:ce:
9f:09:79:64:40:14:f3:db:5d:14:4b:d9:c2:d3:7e:
ad:67:62:3b:d7:6e:9a:c5:c7:6d:e2:0f:0f:8f:55:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:BA:16:2D:29:09:0A:EB:D7:8D:FE:D0:CF:F9:28:C3:10:06:67
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/voO6Fi0pCQrr143-0M_5KMMQBmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
1f:35:a5:9a:33:1f:e2:b3:90:93:2c:92:2c:07:43:98:28:22:
cb:e4:3c:a8:ba:53:1e:44:3c:60:78:1d:0d:6c:5f:8f:6c:5e:
2d:42:c2:cb:2f:6d:c2:47:50:f0:2a:80:13:5e:64:73:7c:15:
25:11:82:5a:39:e1:b6:98:ea:e5:18:06:9b:f4:61:c5:ba:9c:
24:39:07:65:7c:9c:f2:20:9a:27:e1:33:91:89:2c:30:75:85:
f7:44:6c:31:f9:e0:97:0a:fd:32:76:eb:a0:65:f7:0d:c3:b4:
3f:9e:26:da:91:29:f9:2e:1c:cf:1d:e9:d0:3f:0c:2f:56:ed:
e7:86:aa:7a:24:0e:a0:30:8d:aa:bc:81:7a:32:44:a8:11:28:
e8:c0:07:a0:25:4d:f7:e7:57:b8:1b:51:db:17:aa:92:23:3f:
b7:de:2f:5d:64:76:be:91:bf:b6:75:38:49:73:35:a2:f5:54:
de:e6:fc:9b:ae:bb:2a:e9:f4:be:f7:6b:25:c4:66:2e:0b:03:
41:75:39:43:d9:76:a1:0c:8f:c8:89:37:1a:aa:cb:4d:80:15:
6c:51:5b:52:40:5e:fb:6a:94:e9:05:12:d8:1e:d2:a6:4b:95:
57:1f:b6:84:05:04:d0:0c:37:27:6e:b8:b3:99:87:a0:93:4a:
10:c4:eb:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:30:05 2025 by rpki-client