Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yfk9U4-0lmCfTxL5KtRVeHJSk6U.roa
File: yfk9U4-0lmCfTxL5KtRVeHJSk6U.roa (raw, json)
Hash identifier: ifMKE2je6slKbdVIT76ibLg/Z+S3e99/rMNwPm/3jHE=
Subject key identifier: C9:F9:3D:53:8F:B4:96:60:9F:4F:12:F9:2A:D4:55:78:72:52:93:A5
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0195870D97E10E4746865F29FD483ADCE572
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yfk9U4-0lmCfTxL5KtRVeHJSk6U.roa
Signing time: Tue 11 Mar 2025 21:12:49 +0000
ROA not before: Tue 11 Mar 2025 21:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:87:0d:97:e1:0e:47:46:86:5f:29:fd:48:3a:dc:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 11 21:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9f93d538fb496609f4f12f92ad45578725293a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:d7:53:06:ff:6c:1e:d0:87:6c:d7:45:7d:
37:29:12:4e:d9:76:6f:6e:c2:79:01:6f:ce:07:a0:
b1:56:9a:6e:0a:ef:05:bb:97:88:ea:13:80:21:15:
9b:4f:01:99:c3:ef:10:77:e7:4a:0e:4d:e3:19:1e:
8b:9f:2a:e4:25:4e:2e:90:c4:b7:78:3a:60:71:6c:
5d:07:42:48:ff:8b:05:0e:91:ad:36:4c:f9:00:cd:
c6:45:c5:81:c3:bb:ed:9c:04:22:7c:5b:95:98:a2:
1c:73:a1:8c:ee:67:1a:06:aa:d2:72:2d:f7:a9:80:
7f:21:2e:06:dc:98:e3:81:c7:46:12:16:d4:9c:6b:
55:52:e6:c8:a3:f2:1b:a1:41:55:10:bd:47:8c:b8:
10:21:d7:f6:3f:0e:37:1a:6c:18:c3:61:91:19:47:
8c:b8:fc:d4:45:dd:e3:94:84:5b:ae:86:9d:a1:bc:
4c:3a:af:6b:d1:98:77:f6:08:41:b8:d6:37:e6:03:
87:5a:44:44:e2:19:f0:52:07:cb:f9:13:89:3f:64:
0d:23:aa:a1:0e:68:28:e7:f2:7e:98:11:2a:9a:c8:
11:3c:80:85:c5:be:3f:a1:b5:d3:3a:86:fb:6c:46:
aa:b4:0a:ea:3d:21:b7:16:18:e2:96:c0:ed:e6:f4:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F9:3D:53:8F:B4:96:60:9F:4F:12:F9:2A:D4:55:78:72:52:93:A5
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yfk9U4-0lmCfTxL5KtRVeHJSk6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
8f:1b:fd:d5:e1:10:0b:3d:f7:f0:5d:18:be:a9:d6:7e:59:5c:
1d:08:f0:cd:65:e7:2e:eb:d6:87:5a:88:af:af:11:b4:48:30:
d2:28:73:a4:63:79:6d:6a:ae:1e:dc:8d:05:f4:25:39:6f:58:
10:f3:39:58:33:e9:4b:46:fe:5d:c9:4f:d5:17:24:46:3a:2e:
25:38:c5:88:35:03:42:09:06:99:3a:8b:d2:2b:a3:45:f1:d7:
dd:54:12:aa:e4:40:3b:5a:73:54:bf:0e:86:be:ab:b8:7e:4b:
92:a1:3c:15:ee:58:29:97:81:6b:71:49:cc:b7:e8:e4:3b:11:
b6:7b:02:14:d2:e7:02:96:da:6a:c0:c0:3a:7e:e2:6d:68:00:
35:dc:b0:12:64:5b:be:ee:50:04:22:04:93:ed:20:37:b7:1d:
66:b1:ac:96:09:23:6a:60:bd:ec:23:24:f1:21:de:20:3c:09:
6a:60:0e:94:c6:7f:3b:aa:27:47:72:41:c3:8c:97:04:43:0f:
d6:4f:8e:5f:4d:dd:6f:42:38:cd:8e:cf:b1:6c:39:dc:24:b6:
44:5e:d7:52:60:50:0e:ca:ef:8f:ed:8a:ea:71:19:7f:e5:8e:
1b:3f:1f:5e:c4:4d:7e:77:1a:f3:e7:73:8b:0c:13:10:31:91:
dd:4b:f0:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:47 2025 by rpki-client