Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-S30xQjo5s4d2zUM33HNJ_W4jBY.roa
File: 1-S30xQjo5s4d2zUM33HNJ_W4jBY.roa (raw, json)
Hash identifier: r1p4rg+qQaW3HZ80maUDvV2ZqEm1CPH9zXzGHwVV+Mk=
Subject key identifier: F9:2D:F4:C5:08:E8:E6:CE:1D:DB:35:0C:DF:71:CD:27:F5:B8:8C:16
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191AF379AF6E97F8931983236D1617F9042
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-S30xQjo5s4d2zUM33HNJ_W4jBY.roa
Signing time: Sun 01 Sep 2024 20:12:22 +0000
ROA not before: Sun 01 Sep 2024 20:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:af:37:9a:f6:e9:7f:89:31:98:32:36:d1:61:7f:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 1 20:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f92df4c508e8e6ce1ddb350cdf71cd27f5b88c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:48:97:df:05:7f:88:ef:20:ca:14:3e:47:
8d:6c:19:eb:0e:5d:85:4f:35:5a:1e:1e:cd:b2:5b:
e5:39:11:59:70:85:83:59:54:da:0f:47:cc:3e:6c:
2e:1d:3d:1b:98:31:8b:4e:3a:f5:45:63:20:f7:3d:
b1:0c:a4:6a:95:17:36:ae:ed:82:45:94:25:99:c5:
f8:8d:fa:df:9f:77:cb:05:f9:c6:5c:7b:20:36:7c:
25:ec:3b:38:ad:f2:8d:33:d1:83:03:06:2a:7d:79:
58:24:22:8a:e4:ae:8a:ab:40:77:ba:bb:9d:dd:ad:
2e:2d:3a:73:bc:c2:32:e6:0b:0b:29:e0:2f:1b:36:
af:05:3a:b3:84:c9:37:6d:ad:1b:4c:ba:8b:8b:ed:
88:e7:7b:ac:e0:73:59:79:d2:21:74:74:89:bf:3a:
27:bb:56:33:0c:6f:24:d2:2b:67:05:f6:07:d2:43:
26:b4:25:02:3d:fb:1c:f0:c5:d0:24:ca:cc:30:03:
51:fb:0b:ed:5c:0a:e1:0d:b3:72:d5:24:e7:b9:95:
52:8e:53:ac:5c:6e:ef:f9:ad:a4:9e:98:38:fd:3a:
cf:8c:f0:97:cf:f5:05:ac:57:e4:7d:bf:3b:de:52:
b0:b2:d8:15:8b:10:af:0b:3e:ea:9a:32:bc:b2:2e:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:F4:C5:08:E8:E6:CE:1D:DB:35:0C:DF:71:CD:27:F5:B8:8C:16
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-S30xQjo5s4d2zUM33HNJ_W4jBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
24:45:d6:15:40:ff:8f:4c:c9:ce:08:9e:13:fe:d8:30:81:43:
b5:5f:66:15:5c:40:f3:f7:b5:d7:37:a1:4d:66:19:ff:00:a9:
7e:b8:fe:79:3e:cf:e9:79:d7:dc:44:7f:77:e9:ea:9c:34:b9:
fb:bd:c3:49:42:19:ad:fc:68:05:7c:39:db:41:28:2a:fb:bc:
78:0b:38:f9:93:b3:93:85:c0:07:fe:32:72:94:fa:28:4e:4c:
fa:4f:31:66:7d:60:0e:cf:a5:00:9c:56:a4:b4:5c:80:c5:df:
d0:d8:02:a2:71:eb:86:c1:98:62:26:0f:cb:a7:32:fb:d7:e2:
02:94:6c:4d:bb:11:ca:41:9d:39:e3:96:c0:8d:a1:59:92:ca:
1d:31:01:2d:05:fc:76:3e:12:c6:93:6e:f1:f2:47:f1:8e:52:
79:c8:63:77:5d:f6:e4:bc:9c:16:70:01:96:90:7a:cf:f6:3c:
f8:59:9f:da:55:c9:65:04:c8:97:87:07:47:53:07:9d:c0:20:
26:2f:e4:1d:08:97:14:3c:c5:f1:0b:a1:9f:85:fe:14:c9:f8:
78:e6:87:ef:6e:07:08:76:fc:72:dd:7d:a9:37:28:0e:2e:e2:
a2:be:48:8e:99:35:22:94:c8:61:5e:77:f2:94:05:82:fa:75:
43:f0:5c:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:33 2025 by rpki-client