Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRlsUQ76UeNrvpGImgY9LM4JOhk.roa
File: xRlsUQ76UeNrvpGImgY9LM4JOhk.roa (raw, json)
Hash identifier: DEee+lrWNLJVXKdUGszCHIDuMtTUXDBNJ6eXniv4ySA=
Subject key identifier: C5:19:6C:51:0E:FA:51:E3:6B:BE:91:88:9A:06:3D:2C:CE:09:3A:19
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948220F8ABC55B062DFC73A08CAFE5A34E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRlsUQ76UeNrvpGImgY9LM4JOhk.roa
Signing time: Mon 20 Jan 2025 05:13:06 +0000
ROA not before: Mon 20 Jan 2025 05:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:20:f8:ab:c5:5b:06:2d:fc:73:a0:8c:af:e5:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 05:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5196c510efa51e36bbe91889a063d2cce093a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:99:a5:ae:e0:52:b3:f9:76:e8:bf:51:73:
cf:d7:9e:a5:98:58:e9:74:57:7b:3f:47:66:a0:5b:
db:3d:bf:2d:cf:26:b6:10:a5:eb:32:25:72:d2:61:
2b:73:c3:ab:f1:4a:5c:9b:46:a4:1d:af:cd:31:65:
48:5f:f1:b7:d3:d8:ed:c1:cd:9c:27:be:ec:d2:cc:
6b:23:69:09:da:0a:8a:7d:c8:7d:b7:0f:69:6d:85:
b7:3e:e9:5c:c3:83:90:e1:03:1c:de:6c:dd:5c:4e:
7e:9d:5a:14:75:cf:69:2f:1e:7f:c7:23:68:73:3e:
87:82:bd:af:80:e3:72:08:a6:80:1e:7b:b9:bb:59:
ae:bf:36:ca:fe:53:ec:d7:ec:e5:6f:b7:67:a9:86:
d1:b9:a2:1c:84:b6:98:fb:57:8f:68:5d:5d:85:2e:
38:1a:32:a5:c6:e3:e0:29:91:fd:b2:11:6b:30:ec:
40:61:b1:c3:78:64:b7:97:a4:4f:51:f9:9b:f7:25:
b9:81:41:6f:c9:c9:79:58:52:eb:1d:ac:a2:ac:db:
cb:ac:c4:f1:0f:44:a5:80:7a:33:78:2b:0a:58:35:
78:c0:72:4b:63:ee:71:f8:49:ff:f9:4a:ba:c0:1d:
0b:3d:87:52:e9:15:25:f7:2e:36:4d:fe:de:26:82:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:6C:51:0E:FA:51:E3:6B:BE:91:88:9A:06:3D:2C:CE:09:3A:19
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/xRlsUQ76UeNrvpGImgY9LM4JOhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
05:99:01:13:88:09:1d:c2:d8:83:e0:d4:41:b1:37:d1:e7:50:
32:ee:d7:a4:56:e9:bd:30:c5:e1:59:63:fd:72:da:94:6a:f7:
1d:1f:ed:be:3e:4c:1e:f7:69:21:52:cd:02:ad:fa:fd:91:c6:
4e:d3:50:66:8f:4a:35:a4:cf:0f:26:bd:85:a1:b6:db:14:2c:
0d:21:fd:0a:5c:9a:a0:82:3d:df:4f:8b:9e:dd:b7:6e:67:da:
3a:a9:8e:35:bd:1d:a5:df:91:d5:dd:85:55:fc:f7:c1:62:ba:
dd:ee:eb:d1:0e:6b:48:fc:7c:1e:c1:82:ec:15:ab:b2:f9:a7:
e7:9f:ae:12:cc:53:78:7e:47:fc:23:ae:0d:c8:47:25:34:11:
7f:e5:1d:f9:8c:6c:6a:ec:de:0d:9b:eb:21:bf:ec:05:ed:a2:
f1:ed:10:93:11:58:09:af:cb:76:de:79:bd:81:56:f5:2f:1e:
7b:c7:8a:08:77:3e:b9:1b:8f:58:a6:8c:af:2a:f6:64:ca:07:
07:b8:d7:77:b6:dd:4f:0d:7e:02:b1:a5:25:60:4a:1f:e9:5c:
6d:a7:7a:17:13:cf:ce:1e:d4:05:e8:9a:a2:57:03:9b:72:46:
75:9b:7f:36:3f:af:fd:e5:f9:65:f5:ec:25:94:a4:14:36:e3:
07:37:26:c0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZSCIPirxVsGLfxzoIyv5aNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTIwMDUxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE5NmM1MTBlZmE1MWUzNmJiZTkxODg5YTA2M2QyY2NlMDkzYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDSZpa7gUrP5dui/UXPP156lmFjp
dFd7P0dmoFvbPb8tzya2EKXrMiVy0mErc8Or8Upcm0akHa/NMWVIX/G309jtwc2c
J77s0sxrI2kJ2gqKfch9tw9pbYW3Pulcw4OQ4QMc3mzdXE5+nVoUdc9pLx5/xyNo
cz6Hgr2vgONyCKaAHnu5u1muvzbK/lPs1+zlb7dnqYbRuaIchLaY+1ePaF1dhS44
GjKlxuPgKZH9shFrMOxAYbHDeGS3l6RPUfmb9yW5gUFvycl5WFLrHayirNvLrMTx
D0SlgHozeCsKWDV4wHJLY+5x+En/+Uq6wB0LPYdS6RUl9y42Tf7eJoLpoQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMUZbFEO+lHja76RiJoGPSzOCToZMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEveFJsc1VRNzZVZU5ydnBHSW1nWTlMTTRKT2hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEABZkBE4gJHcLYg+DUQbE30edQ
Mu7XpFbpvTDF4Vlj/XLalGr3HR/tvj5MHvdpIVLNAq36/ZHGTtNQZo9KNaTPDya9
haG22xQsDSH9ClyaoII930+Lnt23bmfaOqmONb0dpd+R1d2FVfz3wWK63e7r0Q5r
SPx8HsGC7BWrsvmn55+uEsxTeH5H/COuDchHJTQRf+Ud+YxsauzeDZvrIb/sBe2i
8e0QkxFYCa/Ldt55vYFW9S8ee8eKCHc+uRuPWKaMryr2ZMoHB7jXd7bdTw1+ArGl
JWBKH+lcbad6FxPPzh7UBeiaolcDm3JGdZt/Nj+v/eX5ZfXsJZSkFDbjBzcmwA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:20 2025 by rpki-client