Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ysPWuRKiYTUI5cCRgBLQH-NCHPY.roa
File: ysPWuRKiYTUI5cCRgBLQH-NCHPY.roa (raw, json)
Hash identifier: 5rDW9pTUIU67IfKu3Bl1tTnyfXxmV57eB2bxcUg7v18=
Subject key identifier: CA:C3:D6:B9:12:A2:61:35:08:E5:C0:91:80:12:D0:1F:E3:42:1C:F6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019598DB16B74D2DFB4B63F63394BD6FCAA8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ysPWuRKiYTUI5cCRgBLQH-NCHPY.roa
Signing time: Sat 15 Mar 2025 08:10:49 +0000
ROA not before: Sat 15 Mar 2025 08:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:98:db:16:b7:4d:2d:fb:4b:63:f6:33:94:bd:6f:ca:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 15 08:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cac3d6b912a2613508e5c0918012d01fe3421cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:df:3a:d0:c1:21:9e:ff:b5:61:6b:58:35:
1a:07:8b:f3:d4:16:85:01:ed:60:9b:5b:ec:18:d1:
ab:d5:fb:30:1c:dd:40:5e:c0:1a:73:10:88:5e:f1:
9b:51:e8:c6:e4:eb:16:2d:27:56:95:37:02:da:ac:
6b:53:bd:2a:fb:35:e9:f6:97:d6:bd:7c:0a:4f:d7:
51:bf:bd:7b:29:1c:eb:3e:91:cb:18:87:6c:5d:66:
b4:e1:ab:a5:38:61:c8:95:0c:e2:f7:d0:23:1e:da:
ed:64:8a:51:8a:a4:1e:10:f8:74:50:e5:6d:d5:ec:
e9:76:3b:b6:fc:ca:c5:08:14:4b:fd:e5:7e:f5:81:
43:42:0b:3d:f2:e4:98:66:34:5b:15:f9:f1:f6:fb:
bf:88:bf:af:75:0d:e8:23:c1:9b:5e:09:7e:47:93:
43:4c:3b:14:23:93:24:9f:af:81:81:68:a2:20:fb:
9b:c8:e1:7b:c9:42:41:1c:8a:b6:97:b1:47:ce:95:
41:7c:f0:7c:ee:a7:12:97:33:cf:37:13:6e:97:04:
8c:da:e8:3d:fa:08:40:b6:87:5e:dc:5e:bc:75:10:
82:af:49:6a:d2:2b:0c:85:6a:05:45:0a:d2:96:d2:
18:90:73:97:60:df:98:3a:9a:4a:db:42:8b:26:9e:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C3:D6:B9:12:A2:61:35:08:E5:C0:91:80:12:D0:1F:E3:42:1C:F6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ysPWuRKiYTUI5cCRgBLQH-NCHPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
52:5d:f7:98:3c:16:12:fe:17:a9:b7:46:ce:1d:b5:a4:6f:c5:
07:d6:68:b7:cd:68:cb:7b:90:01:58:1c:f5:86:e3:40:c9:13:
50:a2:e1:66:0b:30:04:d6:5b:0a:97:c0:c3:a7:87:c1:2b:98:
63:0a:4c:9f:fa:6d:f8:cd:b2:a8:f6:2e:38:d2:9a:a0:0a:29:
ba:15:2c:4f:32:78:1b:78:c5:1e:39:64:4b:1b:bd:8b:1f:6a:
37:04:dd:08:8c:3c:c8:26:8d:86:12:ac:82:f6:ba:37:7f:97:
27:6b:e9:ce:6c:cc:f0:86:e2:21:dd:3c:3e:f0:a5:a5:97:71:
80:d9:fa:e4:5c:34:44:2c:d2:94:b2:73:70:a0:54:d3:75:90:
e9:ca:27:10:33:16:60:e1:d9:8d:8b:79:eb:05:bc:3a:dc:16:
df:0a:88:d3:4e:19:28:85:b1:0c:fe:71:8f:ba:42:c8:b1:76:
27:5e:e9:34:20:ba:60:05:56:56:5d:6a:c4:b7:3d:2d:3b:4c:
5a:a5:de:60:0f:85:cd:56:e4:72:6e:45:83:23:d4:60:f1:09:
cd:ce:e2:5a:b8:77:17:e7:a2:d0:e7:19:69:98:1c:08:c8:bc:
b1:86:8d:29:43:12:d2:ad:a0:c6:88:5c:0c:5b:2c:7b:6e:37:
3e:ee:65:86
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZWY2xa3TS37S2P2M5S9b8qoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMzE1MDgxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWMzZDZiOTEyYTI2MTM1MDhlNWMwOTE4MDEyZDAxZmUzNDIxY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWjfOtDBIZ7/tWFrWDUaB4vz1BaF
Ae1gm1vsGNGr1fswHN1AXsAacxCIXvGbUejG5OsWLSdWlTcC2qxrU70q+zXp9pfW
vXwKT9dRv717KRzrPpHLGIdsXWa04aulOGHIlQzi99AjHtrtZIpRiqQeEPh0UOVt
1ezpdju2/MrFCBRL/eV+9YFDQgs98uSYZjRbFfnx9vu/iL+vdQ3oI8GbXgl+R5ND
TDsUI5Mkn6+BgWiiIPubyOF7yUJBHIq2l7FHzpVBfPB87qcSlzPPNxNulwSM2ug9
+ghAtode3F68dRCCr0lq0isMhWoFRQrSltIYkHOXYN+YOppK20KLJp6QAQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMrD1rkSomE1COXAkYAS0B/jQhz2MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEveXNQV3VSS2lZVFVJNWNDUmdCTFFILU5DSFBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGVhs9jDDANBgkqhkiG9w0BAQsFAAOCAQEAUl33mDwWEv4XqbdGzh21pG/F
B9Zot81oy3uQAVgc9YbjQMkTUKLhZgswBNZbCpfAw6eHwSuYYwpMn/pt+M2yqPYu
ONKaoAopuhUsTzJ4G3jFHjlkSxu9ix9qNwTdCIw8yCaNhhKsgva6N3+XJ2vpzmzM
8IbiId08PvClpZdxgNn65Fw0RCzSlLJzcKBU03WQ6conEDMWYOHZjYt56wW8OtwW
3wqI004ZKIWxDP5xj7pCyLF2J17pNCC6YAVWVl1qxLc9LTtMWqXeYA+FzVbkcm5F
gyPUYPEJzc7iWrh3F+ei0OcZaZgcCMi8sYaNKUMS0q2gxohcDFsse243Pu5lhg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:54 2025 by rpki-client