Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0vxwLtfFtNosYktTTLsSgVCP7tE.roa
File: 0vxwLtfFtNosYktTTLsSgVCP7tE.roa (raw, json)
Hash identifier: 8FhRVEKaHDorRfIPomVU25WFlnKXLaHlqUgFDtl34Tw=
Subject key identifier: D2:FC:70:2E:D7:C5:B4:DA:2C:62:4B:53:4C:BB:12:81:50:8F:EE:D1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01920950859612547D2F4B66142486201360
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0vxwLtfFtNosYktTTLsSgVCP7tE.roa
Signing time: Thu 19 Sep 2024 08:05:24 +0000
ROA not before: Thu 19 Sep 2024 08:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:94f:73c3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:50:85:96:12:54:7d:2f:4b:66:14:24:86:20:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 19 08:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2fc702ed7c5b4da2c624b534cbb1281508feed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:5e:7d:2c:dc:0f:ac:9a:fe:c8:b9:16:41:
2b:ec:05:15:bc:b9:49:a4:35:44:74:35:eb:2a:4b:
de:a8:b5:52:c7:59:6c:6e:1e:42:87:e7:ff:50:4f:
a3:2c:1b:60:75:8c:67:0d:0f:db:4c:fd:0f:d8:0e:
95:d2:45:be:d1:78:63:66:cd:35:35:1c:33:95:bb:
d4:ee:6c:d0:f0:6e:25:c7:57:d9:9b:2d:a9:cb:d4:
94:87:9c:2a:14:d1:6a:77:72:ec:a1:35:2b:a6:75:
a6:af:45:d7:1a:d7:f4:f0:bf:31:85:ab:77:59:f4:
2c:d3:f3:fc:41:25:72:6f:a2:71:bd:a4:60:10:0e:
13:35:a3:46:bb:2d:dd:34:01:09:89:7c:d0:2e:fe:
a9:2d:56:e3:86:fb:cb:6a:ee:ea:e4:46:6c:cb:0d:
0a:87:c4:ea:94:ac:7d:4c:f5:98:e6:95:1d:ac:f9:
4c:3f:0f:ef:cd:cf:d2:a8:8b:4e:61:2d:5a:2d:7e:
be:e5:e8:e5:64:0c:18:d6:24:8d:e8:6c:47:78:6f:
02:6e:51:6c:8b:61:a7:63:23:6f:19:84:37:4b:17:
4b:98:8d:8c:7b:ae:5c:bc:b5:50:b1:65:7d:e6:8e:
29:c7:88:23:0e:61:e5:17:85:bf:ed:cd:f0:de:ce:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:70:2E:D7:C5:B4:DA:2C:62:4B:53:4C:BB:12:81:50:8F:EE:D1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/0vxwLtfFtNosYktTTLsSgVCP7tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:94f:73c3/128
Signature Algorithm: sha256WithRSAEncryption
0a:fb:a1:25:39:33:84:1a:66:c6:9d:61:81:fb:44:d4:ad:61:
a5:08:ad:e6:be:b5:aa:97:d9:7d:d6:40:85:3e:21:65:bf:22:
72:55:6f:cb:83:f4:7a:ad:70:68:ad:ae:88:7d:0f:d1:9b:59:
d3:86:76:85:33:83:2b:37:17:17:fb:79:d3:3f:7e:3a:83:37:
2e:5b:70:ff:25:43:b5:91:50:ac:43:3f:cf:1b:3b:cb:29:e5:
0c:5e:b4:7f:98:47:df:97:b7:4d:5c:02:47:02:c4:a2:53:c4:
86:82:5f:fb:f2:c5:3d:b4:b9:58:b0:e7:43:c7:92:80:b4:81:
35:2f:4a:99:00:0b:79:34:5d:12:9c:5d:49:0a:ec:3f:24:23:
6d:d4:ee:15:1e:6d:40:68:1a:ec:9e:f8:1e:16:bc:cf:4b:74:
87:7c:87:9b:f6:e0:da:af:86:58:79:9b:be:c8:54:0a:3d:60:
8a:e8:43:4f:ea:9c:4f:46:87:c5:78:32:db:c4:63:b7:32:99:
6c:f5:2f:a6:a9:4e:5e:ac:60:00:23:a6:46:d1:79:f3:ed:94:
8a:92:eb:e7:31:cb:54:cf:7d:01:69:15:0b:86:10:ab:25:f1:
ca:54:0f:f2:27:19:a2:cc:28:f1:dd:1b:a0:12:7c:c3:47:1d:
91:5b:45:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:55:39 2025 by rpki-client