Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0iTmUCiftRs8WNEOzMCYAOcx2NI.roa
File: 0iTmUCiftRs8WNEOzMCYAOcx2NI.roa (raw, json)
Hash identifier: 08JoYcURky0tze0WulGldaJ2xfWkOnzn41g/wa8pSc0=
Subject key identifier: D2:24:E6:50:28:9F:B5:1B:3C:58:D1:0E:CC:C0:98:00:E7:31:D8:D2
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C061399651027129D160A1B2465E3D65
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0iTmUCiftRs8WNEOzMCYAOcx2NI.roa
Signing time: Thu 05 Sep 2024 04:11:22 +0000
ROA not before: Thu 05 Sep 2024 04:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:61:39:96:51:02:71:29:d1:60:a1:b2:46:5e:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 5 04:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d224e650289fb51b3c58d10eccc09800e731d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:f4:f8:e3:96:1c:4c:7c:82:7b:56:48:e3:
f1:e0:65:71:4a:41:fb:9e:55:36:75:4c:9a:d1:89:
54:11:09:f1:b7:bc:f7:6c:66:31:75:5a:f2:68:5c:
d7:58:0b:13:5b:96:a1:1d:c5:80:25:a5:a1:fd:ad:
16:8d:aa:0e:35:6b:8d:31:25:74:66:7c:23:da:ca:
bf:78:88:67:b2:14:55:43:02:12:bc:ed:03:fd:43:
ed:10:d7:2a:85:b0:87:05:5e:3d:fb:51:62:e2:36:
be:41:96:30:ae:1a:a4:83:16:10:71:62:c3:4d:b2:
11:7e:dc:f4:d4:19:41:26:64:a7:40:90:e7:85:d1:
1a:97:db:de:58:df:ef:87:8d:c3:fd:f2:c8:34:5a:
9f:2f:40:89:5a:a4:83:a6:de:93:f2:33:26:77:d5:
af:1b:ff:c4:cc:0e:d2:ac:c2:14:4b:f2:83:60:f9:
27:9c:fc:6b:4d:bd:83:d2:e2:2d:17:27:72:a4:10:
18:d8:bd:3a:3f:c0:a7:78:56:ae:84:80:2a:8f:d4:
12:da:63:4d:0a:f1:97:ce:3b:c7:01:ea:00:ad:7e:
4a:b0:b2:75:df:f5:ee:4b:50:89:52:1d:64:e5:e0:
93:1c:76:b4:e2:da:3c:da:1a:5f:d3:bf:8d:1a:62:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:E6:50:28:9F:B5:1B:3C:58:D1:0E:CC:C0:98:00:E7:31:D8:D2
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0iTmUCiftRs8WNEOzMCYAOcx2NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
43:9d:53:2a:f6:34:0e:df:98:42:e0:f3:2a:bc:b7:74:a2:c0:
13:d2:6c:98:4d:89:51:a8:8c:ce:0e:c4:8b:b1:f0:a1:ab:43:
30:01:36:ac:b2:72:b8:ed:63:d3:3a:86:32:76:b5:e3:fc:b5:
4c:78:3e:14:c2:f8:b2:42:18:bb:7b:19:6f:20:14:4c:7a:74:
74:d8:da:2d:9b:6a:39:6c:14:24:fb:82:90:00:f9:8e:f4:e5:
77:80:2c:f0:87:b6:8d:f6:34:bd:c8:27:6c:41:a4:7e:a5:32:
3d:f3:a1:9f:1d:62:f1:9e:40:10:06:fb:4b:8d:31:51:72:89:
79:7c:b7:e6:59:8b:e3:e8:e6:9b:2f:dc:39:24:5c:93:3d:a3:
ac:3e:49:8b:2f:1f:e6:ce:1d:ac:00:96:97:be:6b:7f:1b:ce:
f1:8d:51:46:ce:0f:d7:99:6f:fa:90:6c:ff:2b:3d:b4:fa:26:
c4:7c:bc:e5:25:95:4e:3b:c4:bb:a2:bd:ec:ef:67:bb:4e:30:
20:8f:21:33:9d:68:b7:2c:26:55:94:14:61:80:4e:04:6f:3a:
88:35:3d:71:24:95:f5:af:c7:f6:3d:c8:3e:fb:eb:f5:b5:e4:
3d:c4:46:35:f0:6f:e5:82:7e:ce:f7:96:cb:c2:4d:25:83:ff:
19:8d:8f:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:36 2025 by rpki-client