Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/039CvQYkWmYXb-paulkE_3jNqCg.roa
File: 039CvQYkWmYXb-paulkE_3jNqCg.roa (raw, json)
Hash identifier: gvT3+HKaXtA2w64fHBiRLLXq6EKHBc3dXaSXGQhs4Do=
Subject key identifier: D3:7F:42:BD:06:24:5A:66:17:6F:EA:5A:BA:59:04:FF:78:CD:A8:28
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B3806871E9D470DCA440B008DDDCF3A1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/039CvQYkWmYXb-paulkE_3jNqCg.roa
Signing time: Mon 02 Sep 2024 16:10:22 +0000
ROA not before: Mon 02 Sep 2024 16:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:80:68:71:e9:d4:70:dc:a4:40:b0:08:dd:dc:f3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 2 16:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d37f42bd06245a66176fea5aba5904ff78cda828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:09:73:46:66:59:b3:55:a2:aa:d3:47:8a:ff:
41:d6:fb:09:56:9a:9e:2e:c4:05:a4:b7:56:38:e7:
a9:e7:6f:e2:95:35:5b:41:ed:0e:0f:81:db:fa:95:
1d:00:48:1c:8d:85:1c:e7:e9:8a:05:7e:bc:4c:0d:
e7:ea:4c:0f:aa:9d:fa:5c:35:33:4c:76:e6:00:15:
cc:87:24:8e:78:22:37:1d:f8:fd:0d:b8:0b:00:89:
f0:36:22:b7:a4:56:89:2b:cc:cb:39:11:2e:9a:7a:
a6:1e:de:1d:65:df:a1:ca:7c:98:b5:db:13:c3:ad:
8d:6d:4d:9c:d2:7f:19:f9:78:0b:3c:74:bc:11:de:
16:24:e8:8f:17:0d:ee:32:34:12:53:15:63:1a:26:
18:67:96:34:05:21:94:db:b1:b0:8b:fa:6e:50:f0:
3a:41:a9:0d:66:7b:6f:af:0a:c7:72:88:c4:ff:11:
f3:27:26:29:1f:55:6b:0f:ec:ef:29:78:e4:18:0f:
1c:9e:86:b9:ef:ea:27:8c:a0:eb:74:13:55:a3:24:
c9:28:dd:05:2d:37:ab:dd:8c:e5:de:46:19:17:55:
ab:d3:2b:bc:fa:3e:0f:68:e6:fe:d2:48:a3:c6:b8:
2b:72:93:b7:75:45:cd:57:f2:48:c4:5a:6e:f6:f2:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7F:42:BD:06:24:5A:66:17:6F:EA:5A:BA:59:04:FF:78:CD:A8:28
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/039CvQYkWmYXb-paulkE_3jNqCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
68:b7:4f:eb:1b:44:71:a5:af:53:49:9b:e8:60:56:37:07:93:
4c:f4:c9:73:d7:13:c3:97:91:77:72:52:7e:e7:29:29:bb:02:
df:45:a0:a5:5a:d1:62:ff:4c:22:ce:74:fe:67:2e:08:1b:23:
17:9f:70:57:f4:5a:e4:63:41:96:73:f4:ba:c7:90:a1:29:ef:
bc:b5:96:75:e4:3e:d5:31:bc:7e:c8:54:f8:34:b7:03:fd:11:
52:a6:0e:eb:98:f4:8e:ea:8a:4b:41:fd:7d:a3:e0:2a:1a:24:
4e:18:09:53:8d:52:30:76:6c:98:2e:bf:cc:f7:a1:e5:a3:08:
83:44:6e:f7:f0:57:1e:5f:36:d5:fd:d6:59:9d:4d:90:0f:b9:
e2:7d:ca:cb:90:82:d7:e5:34:ee:90:6f:d3:35:ef:c8:2b:e1:
02:26:3d:d0:bc:ab:99:92:f0:0b:c2:56:f4:f5:1b:b6:e9:14:
c5:91:6e:66:51:22:fb:d6:e1:72:7a:df:4d:5c:27:4d:7b:fd:
df:a0:a1:b0:84:2a:f1:95:a9:78:a9:2c:31:5d:d8:dc:bd:a3:
8a:b8:8e:c3:5b:5d:32:33:f5:b3:06:2b:39:8d:93:c2:9c:a1:
e3:cb:e4:5f:80:28:ee:47:4d:42:94:36:85:33:1c:68:d9:ed:
e5:c5:b0:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:36 2025 by rpki-client