Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x-m-jgAnXVLlZXZfQ3myDIUk7vM.roa
File: x-m-jgAnXVLlZXZfQ3myDIUk7vM.roa (raw, json)
Hash identifier: BEW0Iw4trB4bABCk0/Xeldmz710nw+DvNqoR//ldxCI=
Subject key identifier: C7:E9:BE:8E:00:27:5D:52:E5:65:76:5F:43:79:B2:0C:85:24:EE:F3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019463390FB03860E23CCAC7BAF4B32F1524
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x-m-jgAnXVLlZXZfQ3myDIUk7vM.roa
Signing time: Tue 14 Jan 2025 05:11:11 +0000
ROA not before: Tue 14 Jan 2025 05:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:39:0f:b0:38:60:e2:3c:ca:c7:ba:f4:b3:2f:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 14 05:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e9be8e00275d52e565765f4379b20c8524eef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:3c:ee:3a:dd:b0:fb:2c:0d:5f:56:bd:2f:
2e:66:64:71:bd:00:57:6e:53:bd:f8:7b:eb:df:6e:
b2:a2:7d:8d:95:6b:9a:cb:e7:8d:94:05:4e:e7:df:
40:1d:39:46:8c:d3:9e:13:88:44:06:da:9b:8e:7d:
af:fd:93:14:33:29:6a:42:dc:c6:cc:39:71:6d:ea:
bb:49:f1:ea:da:8b:7d:21:1d:6e:53:06:56:f4:70:
25:91:7c:6b:6d:84:f1:f5:64:a0:31:ef:cd:8e:84:
c8:19:f1:47:cd:c3:6d:d3:06:8e:93:c7:9a:9f:67:
55:5a:73:01:65:e3:88:18:25:74:66:36:1a:80:9a:
c1:56:8e:c0:8e:45:9b:2c:ab:60:cf:a3:be:86:07:
ac:27:5f:5a:d1:d4:ff:34:dc:bc:2b:5b:2f:63:83:
27:0b:e4:20:f1:49:6f:e8:59:c1:b1:52:72:62:a9:
f7:a2:18:b0:00:4f:05:69:b1:d5:38:fd:ee:1a:e6:
f5:fa:c2:fb:35:2b:fc:a7:c8:50:7e:83:6c:1b:17:
8f:b7:1c:72:3a:4b:6f:65:4b:7a:62:8f:38:90:21:
cc:8d:7f:60:2f:6b:ad:03:99:93:8c:a7:ba:83:61:
19:e5:e5:b0:06:7c:b0:03:c4:2b:48:ae:bc:1b:f3:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E9:BE:8E:00:27:5D:52:E5:65:76:5F:43:79:B2:0C:85:24:EE:F3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/x-m-jgAnXVLlZXZfQ3myDIUk7vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
7b:2d:0c:ae:3f:40:2a:93:cf:51:b6:81:0a:fd:c1:b1:c7:ec:
c7:ff:ac:75:10:43:80:34:1e:55:a2:c4:d1:7c:4b:87:87:3a:
8a:3a:21:24:bf:db:54:7c:c8:f6:49:d0:3b:76:06:92:ed:60:
ca:c3:1a:13:8d:76:7b:4e:2c:ba:ee:ba:46:30:90:7f:b0:05:
f5:d5:8f:5e:ee:ee:e4:4b:3c:f6:50:c6:8e:29:b5:aa:7e:3d:
59:8b:9b:13:4c:b2:35:9c:6b:41:59:fa:18:ae:c4:a3:73:50:
99:fe:f7:bf:25:e6:c3:39:a6:f2:ee:c5:ba:03:44:bf:6e:c4:
18:a3:86:5f:53:a2:c3:20:13:c6:98:c6:41:7c:ec:d4:bc:db:
0d:03:80:95:8e:a6:6f:5a:b7:cf:95:b5:53:66:13:c9:f4:8f:
61:c4:cc:23:f3:ee:93:ee:95:4f:a2:19:c2:17:d3:db:8d:12:
a7:92:75:d8:57:bb:9b:80:27:da:f0:66:2f:83:83:ec:79:ee:
76:2d:3c:d3:c0:eb:e1:32:40:c0:b7:f7:ed:4f:43:d8:13:88:
ba:75:3f:39:94:70:8a:06:ac:30:c5:43:be:1d:a4:f8:3e:00:
01:75:6c:1d:97:1b:1f:4f:5a:aa:2d:e9:a2:52:ff:60:dd:1e:
dc:6e:4a:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:58 2025 by rpki-client