Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0B2N-U_nDUOebBSI1asrcRiR0mE.roa
File: 0B2N-U_nDUOebBSI1asrcRiR0mE.roa (raw, json)
Hash identifier: D2dn+uV+LeNRia1NyhvE3aHz01lSgNCaCb+nsWcv6q0=
Subject key identifier: D0:1D:8D:F9:4F:E7:0D:43:9E:6C:14:88:D5:AB:2B:71:18:91:D2:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191FE5E74F9F1D6DFDC09A88D97ECECEEC1
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0B2N-U_nDUOebBSI1asrcRiR0mE.roa
Signing time: Tue 17 Sep 2024 05:04:48 +0000
ROA not before: Tue 17 Sep 2024 05:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:fe5e:2e7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:5e:74:f9:f1:d6:df:dc:09:a8:8d:97:ec:ec:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 17 05:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d01d8df94fe70d439e6c1488d5ab2b711891d261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:a7:56:b8:9c:51:12:dd:28:e8:c3:75:a9:
31:70:b0:5e:b8:8e:ac:4b:9f:5a:9b:2f:06:38:a1:
af:d3:c9:24:74:a5:ab:c9:2c:c8:61:47:dd:07:04:
4c:85:1c:8f:5d:eb:3a:f1:a9:79:44:54:18:a2:e9:
76:8e:65:e5:46:02:55:67:5d:01:5f:39:1a:4a:f9:
76:ff:2c:08:4e:e0:5b:9f:cf:3a:7c:fb:ce:c4:1c:
21:76:8b:60:a1:a7:a5:ce:4f:0b:64:86:17:31:32:
8d:8c:7c:a0:16:73:72:95:c2:59:79:ba:aa:51:77:
fa:27:2d:3a:d1:9d:23:b8:22:1e:ec:c3:24:26:49:
00:16:2e:fc:5b:b6:8e:67:13:02:ff:46:20:c8:4b:
7f:fe:8d:ab:3c:1d:f2:ad:cd:0e:b0:13:10:9a:16:
79:42:c5:7d:bf:41:66:b9:c3:47:8d:f6:c6:8f:f5:
b7:da:bd:fc:6f:26:33:9b:ce:f8:af:e2:0f:fd:0e:
30:e8:38:79:ad:69:2a:77:5f:59:5a:81:1b:a3:88:
b3:42:31:0c:65:dc:49:90:ee:02:3f:9c:89:7d:72:
80:b7:3b:85:81:e4:5a:e2:73:a2:e2:0a:bd:0d:77:
90:73:a4:11:cc:7a:52:78:27:57:8d:db:73:0d:b3:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:8D:F9:4F:E7:0D:43:9E:6C:14:88:D5:AB:2B:71:18:91:D2:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0B2N-U_nDUOebBSI1asrcRiR0mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:fe5e:2e7d/128
Signature Algorithm: sha256WithRSAEncryption
2a:de:9a:13:4b:3d:09:ad:3e:2f:00:be:d3:12:dd:94:66:ba:
89:22:8d:12:a7:fe:7b:de:a3:36:4a:d4:fb:d4:0a:80:5c:5b:
6b:ce:17:08:fb:3a:c1:30:19:11:d5:35:94:b2:17:d5:b1:90:
90:9d:ac:fb:ca:17:da:0a:48:76:41:da:d0:2e:4c:ad:d4:7e:
82:3b:b5:40:88:8a:7e:ce:06:cd:b3:d9:14:02:04:3b:82:11:
53:15:89:8a:6f:b4:01:db:79:04:68:42:2e:2e:6c:2b:4a:44:
83:24:d6:46:ce:de:08:46:3c:d6:0b:2e:e0:c6:d8:04:43:94:
a9:05:0b:eb:b2:35:60:ed:7a:27:f8:97:50:b7:42:c9:9d:7c:
02:6f:da:10:70:e3:6a:8e:9f:1b:a7:a3:30:75:25:bb:07:22:
77:84:b1:bb:d2:de:1e:f3:52:75:d1:c6:3a:3b:7f:c8:bc:cf:
c5:49:57:41:c7:57:f4:44:dc:37:1b:e8:ce:9a:f8:b3:21:85:
c2:a7:d8:9b:12:b7:db:76:b7:7f:7a:6b:8d:ea:57:39:3f:8c:
38:da:45:e8:0e:66:68:97:1c:21:65:c8:e4:71:df:3d:c5:08:
05:ec:e1:77:c0:10:6d:ce:16:94:c7:d0:25:48:2d:dc:93:cb:
81:34:2d:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:02 2025 by rpki-client