Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cuuswAQUmYn0pLGTGXWxQJiaOa8.roa
File: cuuswAQUmYn0pLGTGXWxQJiaOa8.roa (raw, json)
Hash identifier: 7r8SVhyyXKnJO7DIZQfurn654MKCYdErywYOjs6NWIM=
Subject key identifier: 72:EB:AC:C0:04:14:99:89:F4:A4:B1:93:19:75:B1:40:98:9A:39:AF
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D11C0F7EF2EFF2CF6FC24B6856EF3D5F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cuuswAQUmYn0pLGTGXWxQJiaOa8.roa
Signing time: Sun 08 Sep 2024 10:09:22 +0000
ROA not before: Sun 08 Sep 2024 10:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d1:1c:0f:7e:f2:ef:f2:cf:6f:c2:4b:68:56:ef:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 10:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72ebacc004149989f4a4b1931975b140989a39af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:34:a9:d7:b8:cb:cb:6e:c2:26:c2:cd:fb:
21:62:53:a6:13:41:d8:59:65:1e:33:7b:ad:a4:9d:
7d:68:92:de:ef:d7:01:8a:a7:ff:8c:d6:a7:42:34:
5b:5a:b3:01:71:ff:6c:06:75:cd:c5:7f:73:a9:22:
14:2a:fa:71:2d:0b:42:20:fa:75:b2:ba:f4:64:77:
6d:1a:2b:cd:f0:a7:a9:3b:3c:40:bf:1c:74:9e:58:
be:76:82:2d:39:63:05:a1:ab:b4:d6:ba:2f:3a:3b:
13:62:17:3d:75:ff:40:cd:58:05:b4:e6:59:93:e3:
87:b2:d3:3a:c1:2f:03:b3:47:5d:fd:e0:85:1c:e6:
71:ae:f6:03:aa:2b:7a:4a:ae:08:93:34:68:75:bd:
0a:fe:2b:00:ba:20:79:0e:44:91:e9:14:a5:4c:a1:
d6:96:75:73:32:7d:0c:fd:ed:5a:5a:8d:1b:27:86:
8d:fb:5c:8c:1d:60:b9:1d:9c:88:93:3f:80:f4:ef:
be:09:77:c4:71:c4:3b:9d:fa:af:4a:88:43:d8:b0:
36:2c:a9:4f:96:b8:16:56:b4:1f:07:ff:15:30:8f:
ed:6c:8c:da:0f:fd:73:e0:0c:71:f9:1e:4d:4d:0c:
6e:76:7c:4a:a2:c9:99:db:9f:c2:1e:cf:bd:03:5b:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:AC:C0:04:14:99:89:F4:A4:B1:93:19:75:B1:40:98:9A:39:AF
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/cuuswAQUmYn0pLGTGXWxQJiaOa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
76:da:61:26:16:96:9e:b1:bc:e9:d1:65:16:d9:2f:ce:2f:d6:
e8:6f:f8:8d:3c:bf:f4:e4:ce:b1:28:3e:b9:94:5c:35:fe:3e:
c7:d9:5d:86:b6:ed:e3:51:f9:f3:97:dc:0c:eb:1f:fc:35:0f:
f8:05:ee:ef:3b:75:e1:9a:ea:4d:56:68:d5:e9:16:7f:df:1e:
93:2e:ad:42:5e:b1:22:32:7d:65:c2:8b:fd:e4:5b:2d:9f:10:
d0:24:19:b0:e2:de:99:27:45:04:58:55:b4:d0:aa:bd:29:01:
77:28:dd:32:a7:70:90:c4:23:1f:4e:31:7d:25:bf:9c:9a:98:
92:b7:42:73:42:b3:e4:13:8a:cd:9a:c6:9a:a7:09:ab:5e:96:
64:6f:c0:72:82:28:10:f9:08:c3:d6:f0:48:07:15:a1:ca:67:
e5:cb:f4:19:f6:16:dd:0c:4d:16:ac:0b:5d:d2:76:d9:d3:15:
14:c1:76:9c:09:4d:ca:be:85:4b:fe:6d:5f:f4:48:3e:85:50:
fd:7a:d8:63:56:e9:7b:ba:d0:71:18:78:84:74:29:6e:6c:9b:
fd:63:c7:4a:00:22:8a:13:25:29:77:67:d1:84:41:de:df:8e:
2b:4e:b8:e2:10:2a:de:0e:10:e9:4f:7e:7d:fb:b2:8f:33:dc:
c9:27:0a:6e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHRHA9+8u/yz2/CS2hW7z1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA4MTAwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmViYWNjMDA0MTQ5OTg5ZjRhNGIxOTMxOTc1YjE0MDk4OWEzOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxE0qde4y8tuwibCzfshYlOmE0HY
WWUeM3utpJ19aJLe79cBiqf/jNanQjRbWrMBcf9sBnXNxX9zqSIUKvpxLQtCIPp1
srr0ZHdtGivN8KepOzxAvxx0nli+doItOWMFoau01rovOjsTYhc9df9AzVgFtOZZ
k+OHstM6wS8Ds0dd/eCFHOZxrvYDqit6Sq4IkzRodb0K/isAuiB5DkSR6RSlTKHW
lnVzMn0M/e1aWo0bJ4aN+1yMHWC5HZyIkz+A9O++CXfEccQ7nfqvSohD2LA2LKlP
lrgWVrQfB/8VMI/tbIzaD/1z4Axx+R5NTQxudnxKosmZ25/CHs+9A1sCBQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFHLrrMAEFJmJ9KSxkxl1sUCYmjmvMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvY3V1c3dBUVVtWW4wcExHVEdYV3hRSmlhT2E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAdtphJhaWnrG86dFlFtkvzi/W
6G/4jTy/9OTOsSg+uZRcNf4+x9ldhrbt41H585fcDOsf/DUP+AXu7zt14ZrqTVZo
1ekWf98eky6tQl6xIjJ9ZcKL/eRbLZ8Q0CQZsOLemSdFBFhVtNCqvSkBdyjdMqdw
kMQjH04xfSW/nJqYkrdCc0Kz5BOKzZrGmqcJq16WZG/AcoIoEPkIw9bwSAcVocpn
5cv0GfYW3QxNFqwLXdJ22dMVFMF2nAlNyr6FS/5tX/RIPoVQ/XrYY1bpe7rQcRh4
hHQpbmyb/WPHSgAiihMlKXdn0YRB3t+OK0644hAq3g4Q6U9+ffuyjzPcyScKbg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:20 2025 by rpki-client