Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-GLPe5dzcSp3L7bc8YUIvNnYdRo.roa
File: 1-GLPe5dzcSp3L7bc8YUIvNnYdRo.roa (raw, json)
Hash identifier: Rt7xbOWp/jmH6VTNqq6/xkbGw+xE2wTMLLlCGRNWmcA=
Subject key identifier: F8:62:CF:7B:97:73:71:2A:77:2F:B6:DC:F1:85:08:BC:D9:D8:75:1A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918596DE4366E489AA96D1640E7C7BE3C8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-GLPe5dzcSp3L7bc8YUIvNnYdRo.roa
Signing time: Sat 24 Aug 2024 18:12:22 +0000
ROA not before: Sat 24 Aug 2024 18:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:96:de:43:66:e4:89:aa:96:d1:64:0e:7c:7b:e3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 18:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f862cf7b9773712a772fb6dcf18508bcd9d8751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:9c:4f:fd:de:87:e7:a2:ae:6a:ff:95:e7:
21:3c:60:47:74:fa:eb:f5:1e:83:4b:a0:e4:16:da:
6e:ee:57:50:c3:1b:df:d2:4a:28:63:8e:b3:d1:36:
a3:bc:46:53:57:7e:ad:34:e5:80:20:19:86:1e:e1:
f7:39:71:97:e0:b2:79:2b:6e:7c:ba:c2:36:a5:85:
e8:b3:2c:f9:d0:8c:ce:6a:6e:d9:1b:b8:e1:7e:b8:
ea:43:23:30:88:af:7a:f7:86:36:c8:5d:56:03:a0:
94:61:2f:1e:28:01:f2:30:f2:ec:23:14:56:5a:d4:
47:81:bf:3a:18:6d:79:a9:50:18:3c:74:e7:37:c7:
ca:01:25:60:9e:63:a5:6a:47:bc:da:cf:7a:02:86:
d0:a0:92:14:54:af:e0:46:94:07:ea:23:1d:05:31:
43:6d:5c:b8:61:f3:e4:41:53:17:f3:c8:0f:1c:c2:
5a:ab:d5:d4:7c:cc:2a:09:3e:1b:66:96:00:ea:91:
fd:8d:6b:48:69:32:45:42:4c:42:f3:a5:7f:40:05:
38:78:2a:51:91:a3:70:bd:43:a0:9a:ec:6e:56:5f:
4e:2c:cb:00:e2:35:50:1b:ce:58:e4:b8:52:17:24:
8e:49:8f:b2:ed:e1:ca:93:58:39:56:52:00:0d:83:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:CF:7B:97:73:71:2A:77:2F:B6:DC:F1:85:08:BC:D9:D8:75:1A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-GLPe5dzcSp3L7bc8YUIvNnYdRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0a:3a:8d:0e:70:ae:bf:98:fa:3b:76:40:79:ee:fd:47:68:1f:
3e:74:00:dc:5e:cd:e8:f9:71:ea:7d:dc:72:63:a9:e0:6c:cd:
25:81:45:4e:fb:be:53:37:95:27:9f:45:97:f6:c0:93:e3:f5:
e1:ff:b9:73:9e:66:08:41:cc:35:b9:2d:86:ae:07:aa:44:70:
fb:28:15:f7:be:40:e1:51:da:33:0b:1d:a9:14:11:d8:de:29:
e4:ea:5e:6a:e0:49:4c:5c:c6:54:af:8e:d0:c3:88:67:e6:26:
c9:0b:04:5d:77:d9:7d:99:41:14:e1:05:ce:01:38:20:9b:a6:
fb:1c:77:80:6f:ca:ac:dd:f2:2b:19:20:26:54:c0:05:a0:f7:
1e:e4:26:ad:33:77:ce:48:6d:3f:0c:cd:30:6f:fe:cc:d8:b5:
61:e0:42:36:96:31:11:6d:e7:7c:52:95:f8:fd:f3:83:54:79:
3c:48:76:dd:e2:6c:8b:cf:83:20:4e:c0:d8:5d:a2:cb:f6:04:
a0:d2:0a:b2:60:75:87:e5:78:ba:7a:64:42:87:73:99:79:e4:
8d:30:9c:df:08:a3:0e:df:4b:22:71:dc:64:4c:f4:96:08:c8:
21:e2:16:92:c6:c5:26:56:63:80:0d:6f:22:79:c2:11:62:fd:
85:ff:97:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:50 2025 by rpki-client