Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/woQWN6kb9R1SFMSQ6SqZ3rG_hec.roa
File: woQWN6kb9R1SFMSQ6SqZ3rG_hec.roa (raw, json)
Hash identifier: 8UPZZIKUvvgH21T1Yk01VIEy29T4Wyv8Fhc8gPzgm4k=
Subject key identifier: C2:84:16:37:A9:1B:F5:1D:52:14:C4:90:E9:2A:99:DE:B1:BF:85:E7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195A4A854A6ADE1F58F8752560CE316CB60
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/woQWN6kb9R1SFMSQ6SqZ3rG_hec.roa
Signing time: Mon 17 Mar 2025 15:10:49 +0000
ROA not before: Mon 17 Mar 2025 15:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:a8:54:a6:ad:e1:f5:8f:87:52:56:0c:e3:16:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 17 15:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2841637a91bf51d5214c490e92a99deb1bf85e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:a0:94:08:33:bd:82:1b:47:08:2b:b1:a7:
0c:75:c2:56:e8:e8:7f:f9:16:4b:15:59:4f:f1:d8:
ed:e8:7b:26:8f:8b:e7:57:44:e0:d5:c4:8c:ba:25:
1d:12:d5:de:e8:2b:f4:65:0f:a5:0d:13:a8:1c:eb:
4e:b7:e2:bb:e9:ff:be:5e:c8:ed:17:f9:c5:d4:d6:
3c:d0:0e:2c:ae:3b:cd:91:17:98:62:4f:c5:80:b1:
6d:e7:cb:f9:c3:40:25:7e:cd:ce:ab:e2:0e:81:c5:
90:49:d2:d6:7f:35:4e:a2:a3:f2:9e:e1:80:37:c0:
8a:b5:5b:6d:9c:5c:ed:a6:8c:aa:b8:56:fe:55:c5:
04:ac:ed:93:b9:9c:67:15:31:e6:2a:2e:42:b5:5c:
f8:a2:37:fb:a0:26:f2:72:91:43:5d:f8:ec:9c:09:
16:c9:15:47:00:03:6c:3f:ec:85:c9:6c:12:78:2b:
eb:f1:38:47:6e:0e:32:e7:49:31:5d:e0:6b:46:f9:
02:98:a7:5d:ae:ee:54:9a:01:70:5c:d1:04:01:3a:
9e:58:fe:1e:c8:bc:f9:29:eb:93:a1:37:72:ea:89:
47:c7:40:1e:d8:b4:41:15:83:21:e9:08:2b:4b:d5:
dd:61:75:89:7e:15:f7:03:00:79:4a:d6:57:48:4a:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:16:37:A9:1B:F5:1D:52:14:C4:90:E9:2A:99:DE:B1:BF:85:E7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/woQWN6kb9R1SFMSQ6SqZ3rG_hec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
3d:61:31:36:42:98:24:3d:91:ef:bd:44:1b:d3:96:9b:35:cb:
7a:b1:89:99:8a:f0:b8:3e:42:ac:7b:4c:02:af:c8:66:d2:25:
de:6a:1e:a6:8a:e1:e1:2f:0a:e5:c1:dd:d0:88:0b:3a:68:c9:
61:b1:ae:e0:fc:8b:a9:8f:77:7b:db:da:a9:27:a9:91:bc:c8:
73:36:ab:2d:78:36:ba:d2:12:ab:ca:51:ab:a0:2b:7f:02:55:
4d:ed:42:7c:b1:af:6e:d5:bc:bf:42:83:37:13:b4:09:f7:e1:
cf:8c:db:a9:dd:a3:4f:99:b3:f8:ec:2f:17:a2:ff:6c:08:15:
aa:a1:66:04:18:c3:e4:0c:b6:9f:89:79:82:ff:da:d4:db:52:
10:21:23:e0:a6:d9:58:f0:1c:23:b0:2a:da:3d:c8:d2:c6:19:
d8:22:cd:44:aa:70:9d:93:3f:26:e7:09:9a:f2:3e:0d:17:58:
59:c1:e2:7f:32:76:dc:cf:10:8f:30:fb:fe:64:2b:d9:54:aa:
03:57:8a:64:14:73:aa:18:c0:d0:50:2c:65:74:b1:e6:b2:c4:
c8:33:35:44:ab:80:bd:bc:db:ba:f0:6c:81:69:02:53:41:ab:
33:88:e2:8b:7f:52:e6:bc:15:69:a8:9d:fb:04:c1:c9:b8:1a:
97:23:e6:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:17 2025 by rpki-client