Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0rLpl07SCioEkEYlf2A3Qhq3zIg.roa
File: 0rLpl07SCioEkEYlf2A3Qhq3zIg.roa (raw, json)
Hash identifier: kHu72ctEtuxaNwxn9bB3T50udUBPV47Cv+RcZbPv3d0=
Subject key identifier: D2:B2:E9:97:4E:D2:0A:2A:04:90:46:25:7F:60:37:42:1A:B7:CC:88
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918C74AE4254337BD9E0688BC6A3CEFB80
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0rLpl07SCioEkEYlf2A3Qhq3zIg.roa
Signing time: Mon 26 Aug 2024 02:12:22 +0000
ROA not before: Mon 26 Aug 2024 02:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8c:74:ae:42:54:33:7b:d9:e0:68:8b:c6:a3:ce:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 02:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2b2e9974ed20a2a049046257f6037421ab7cc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:1b:7d:47:ba:ea:b8:8a:db:54:5f:2f:8e:
82:15:50:cd:e1:35:12:d4:92:6a:80:22:92:d2:bc:
2c:15:6a:8a:02:ca:37:32:79:e3:39:4d:f2:14:78:
1c:28:7c:08:5b:00:a9:56:1d:f3:75:88:b1:3f:a4:
03:6d:e0:cd:5f:27:65:9b:b2:92:fc:d3:4c:16:17:
83:21:8f:39:e5:3e:73:4f:ec:a5:7d:54:22:e8:be:
ee:2b:8a:ff:2e:3e:53:9b:e3:a6:61:77:42:83:33:
16:e2:9a:2d:9e:a0:cb:81:0d:6e:69:31:66:46:3b:
80:85:d6:aa:72:31:77:5b:c9:19:0d:c7:ec:cb:5d:
1e:38:5b:cc:52:ae:11:cd:f0:2c:dd:a8:35:79:47:
6f:4b:3f:24:95:9d:c8:7e:10:8d:92:dc:e7:98:b7:
40:4e:ab:89:50:d9:4e:06:39:34:12:dc:c4:81:c5:
37:33:21:ac:c7:e8:20:4a:b5:ca:88:eb:80:5e:88:
af:a5:b1:1a:14:e1:ac:6b:01:45:d8:d6:6d:20:dc:
fe:a0:0e:86:b7:85:cf:4f:70:e1:a4:89:fe:a4:10:
51:8d:97:81:ea:01:15:31:70:c1:3f:fd:f2:25:d6:
2f:5c:27:ba:88:f0:b9:b5:c2:8f:47:c4:4d:c9:63:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:E9:97:4E:D2:0A:2A:04:90:46:25:7F:60:37:42:1A:B7:CC:88
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0rLpl07SCioEkEYlf2A3Qhq3zIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4e:79:b8:fa:ee:6d:d6:5e:2a:3c:82:58:e3:a2:41:f4:d0:a4:
c1:b0:eb:95:df:05:2b:b9:46:6b:64:5a:cb:74:35:08:b2:58:
2f:15:67:96:10:e3:8f:fe:31:b3:52:74:4a:52:fc:d2:9e:78:
ea:45:15:6d:01:35:3f:1a:3d:b2:82:2b:ba:73:af:8a:bb:20:
7a:42:30:61:d2:f7:e9:8a:46:b6:9d:70:c8:13:42:f3:11:91:
60:b8:3b:e2:e5:90:c5:9b:6c:6a:47:cd:31:c7:51:12:0c:b7:
b5:f9:4e:6a:03:f6:45:93:e9:6b:df:e7:40:ac:0c:c2:5b:32:
c8:e6:cf:f0:7e:d6:a9:85:9f:cf:2b:93:9c:5d:67:1c:25:f8:
47:b8:70:5f:24:2d:93:1d:de:49:74:bd:42:bd:1a:4c:0c:1c:
55:0a:fc:d2:c6:00:5f:18:43:74:55:74:25:92:82:33:20:af:
30:5d:e1:ea:76:9d:84:03:24:d2:b8:b0:65:eb:7e:c2:78:d6:
0f:db:9e:0d:6d:b5:27:f4:18:27:a9:23:53:c2:10:17:1a:28:
32:d5:4e:db:31:c2:f5:55:19:4d:d6:52:c1:a9:90:16:b3:5a:
67:ca:05:ce:ba:ba:55:7b:8e:c6:62:7c:41:39:1c:bb:0e:87:
64:ae:f1:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:40 2025 by rpki-client