Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zDekOLGadkgkFhIGmI0WYgegn8Y.roa
File: zDekOLGadkgkFhIGmI0WYgegn8Y.roa (raw, json)
Hash identifier: uqaTMWcnkLujnRb9m+NbxNG9YdHVzHFPv9xw0UqVNk0=
Subject key identifier: CC:37:A4:38:B1:9A:76:48:24:16:12:06:98:8D:16:62:07:A0:9F:C6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01958C321EB96A1E890C7C7608717512F92B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zDekOLGadkgkFhIGmI0WYgegn8Y.roa
Signing time: Wed 12 Mar 2025 21:10:49 +0000
ROA not before: Wed 12 Mar 2025 21:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:32:1e:b9:6a:1e:89:0c:7c:76:08:71:75:12:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 12 21:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc37a438b19a764824161206988d166207a09fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:fd:c8:ed:bf:ab:53:f8:1d:37:83:86:e8:
f4:11:6c:63:e8:07:26:92:72:7f:78:4e:28:db:bc:
4d:84:db:ad:fe:2c:6f:91:f6:17:f6:00:ad:26:af:
f0:25:20:63:2b:07:e3:b9:c7:02:d5:bb:c3:79:7d:
e9:9d:c2:79:3e:c1:8a:a1:9d:d0:24:3e:06:ba:b4:
9b:98:5f:bc:0f:5a:7d:a4:93:43:90:70:7c:fe:e0:
85:eb:06:e7:06:37:7d:47:14:f8:a9:1d:59:b8:7d:
4b:e4:6f:d8:88:4c:39:ab:87:80:1a:91:1e:4a:67:
82:87:cb:26:42:87:5a:06:52:7b:ef:e7:f3:82:2e:
da:6a:4c:ab:6c:e9:3e:23:1b:7d:1d:e3:b8:4d:af:
aa:55:85:93:80:0f:58:95:5c:98:59:05:ec:9f:56:
86:9e:bf:2b:3d:fe:79:f7:ec:e6:2e:71:a7:2f:96:
1e:59:0c:65:02:bb:d4:87:bd:00:ab:6a:01:6b:50:
fe:42:ee:78:e4:44:21:b8:ad:4e:2f:a9:48:b3:b7:
85:6e:0b:02:33:36:f8:e3:cc:6b:59:79:48:25:c1:
97:14:73:6a:09:ff:5d:76:b1:52:00:51:95:08:af:
1c:bf:e8:80:c1:30:8d:02:d3:09:e2:a0:20:47:18:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:A4:38:B1:9A:76:48:24:16:12:06:98:8D:16:62:07:A0:9F:C6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zDekOLGadkgkFhIGmI0WYgegn8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
62:f4:7b:b9:bd:37:4c:2b:45:56:c6:62:4b:c5:8c:07:32:4d:
dd:be:25:1d:b8:2f:22:94:f0:5c:cf:3f:b7:a3:3b:37:f4:de:
79:51:44:a4:ac:6b:a8:eb:fe:c4:95:a7:32:3e:9c:7f:2a:d4:
e1:bc:5c:19:27:32:fd:ca:41:33:8d:19:3f:f1:c0:0e:cc:cb:
ac:d8:30:b1:99:37:01:18:b9:36:8a:54:75:66:af:1c:91:05:
1c:13:33:1c:c0:66:3c:ea:cc:64:fd:92:44:5b:2c:eb:0e:23:
a5:97:fd:93:99:de:a5:19:c3:d2:12:35:47:ca:d2:f8:39:57:
af:06:f9:b7:02:a6:64:f0:c2:93:f2:0c:1c:d4:66:14:d6:ab:
16:b6:72:1f:7f:3a:0e:c8:3d:62:e0:a4:b1:b1:a9:94:d4:11:
61:97:67:f3:14:b8:56:6b:41:09:a2:a0:d2:23:1e:e0:7d:05:
c0:f5:79:01:b0:f3:88:df:ed:e3:24:32:26:5d:9b:8c:77:b8:
28:c3:64:3f:b5:00:fb:34:41:db:7e:60:e6:d3:46:0b:36:ca:
62:4a:42:81:32:ca:d0:99:8b:a4:ce:38:28:37:14:96:cb:80:
ed:b7:ab:24:f8:5b:bf:68:5b:bb:bc:3e:b3:88:6f:ab:2b:73:
c1:26:b6:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:30:06 2025 by rpki-client