Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-UUS9fJn8ikBLAIHO_DdFkoSuek.roa
File: 1-UUS9fJn8ikBLAIHO_DdFkoSuek.roa (raw, json)
Hash identifier: eN+2BMMokn/7AC4677Q7/ZAL3WvUcNVnC1bptMiHvXk=
Subject key identifier: F9:45:12:F5:F2:67:F2:29:01:2C:02:07:3B:F0:DD:16:4A:12:B9:E9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192DB2B8CE9E60B7B3B175D6959791E1D4D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-UUS9fJn8ikBLAIHO_DdFkoSuek.roa
Signing time: Wed 30 Oct 2024 02:05:17 +0000
ROA not before: Wed 30 Oct 2024 02:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:db2a:a09d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:db:2b:8c:e9:e6:0b:7b:3b:17:5d:69:59:79:1e:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 30 02:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f94512f5f267f229012c02073bf0dd164a12b9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:26:6a:8f:38:0d:ea:21:aa:3e:dc:a5:03:
ee:7f:4e:86:f7:41:c8:e7:28:0f:1d:e1:1d:45:5e:
5c:2b:e4:cc:5e:59:b5:00:e9:9b:28:14:e5:e2:33:
c1:fc:0f:f4:15:7b:54:58:29:97:65:b3:ef:d6:cf:
42:9e:25:be:80:d1:07:5b:fb:65:46:fb:18:93:59:
7c:be:07:76:d4:19:79:85:6f:17:7b:c3:88:f4:cd:
78:5f:f4:f5:b8:b3:91:4d:b0:71:ff:26:28:f7:aa:
c2:b4:02:ec:d2:a4:67:a5:68:dd:75:43:bf:35:e5:
5d:9f:1d:66:2c:96:97:01:da:93:62:1d:37:a2:6f:
d3:e6:a3:6e:53:90:20:23:37:5e:81:ae:07:07:b2:
6f:76:f4:bc:08:39:60:23:a9:a7:6a:1b:67:62:8e:
40:13:d5:97:85:cf:8f:a5:3d:91:86:02:79:bc:06:
b5:37:81:66:b7:16:38:13:9c:4c:2a:1d:9f:d8:de:
cf:4e:e5:cc:c2:68:1b:93:ff:4e:2a:fa:a9:94:3b:
ec:c3:2c:ec:be:ef:4c:7a:13:81:5a:a8:f7:c8:d6:
58:b5:98:3a:aa:98:c8:73:27:f2:98:e4:b8:e6:a2:
11:6e:ed:18:d5:29:6d:42:d7:57:13:d7:18:12:9b:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:12:F5:F2:67:F2:29:01:2C:02:07:3B:F0:DD:16:4A:12:B9:E9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-UUS9fJn8ikBLAIHO_DdFkoSuek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:db2a:a09d/128
Signature Algorithm: sha256WithRSAEncryption
08:2d:76:79:45:55:8a:c5:d0:07:12:c1:a8:00:14:72:48:f4:
dc:d7:74:12:40:4d:04:35:01:e2:1f:b9:63:18:a8:c9:61:51:
f9:96:b5:76:26:15:34:4f:ac:b8:19:0a:f4:6f:2a:4b:b3:e7:
ac:61:3f:87:e3:4d:c1:3c:b0:6c:39:49:51:f5:41:64:c1:a5:
1d:5d:48:14:09:9d:e1:10:15:11:c6:6e:48:db:59:d6:06:79:
38:eb:de:a0:b5:28:2c:9c:9d:d0:41:1d:67:98:03:89:81:3f:
de:b4:87:8b:d4:99:41:85:f5:08:20:38:1c:82:cd:a1:37:33:
49:c3:dc:5b:1b:3d:1e:da:59:55:0b:3d:86:fb:55:03:f3:12:
71:8a:e5:d4:77:3c:4d:c8:c1:78:4c:80:ca:10:b0:85:e2:81:
19:10:4a:61:5e:ae:e0:ba:e1:5b:d2:be:e6:00:a9:cf:62:a8:
60:cf:a0:1b:14:58:99:43:4b:3d:31:d0:9a:bb:e9:66:68:88:
f3:e6:7b:d6:ff:87:52:73:08:1f:5e:83:18:25:21:eb:57:ee:
cd:75:33:15:6d:c0:b0:95:79:7c:a1:7b:5a:62:63:ca:0d:5d:
35:42:0a:79:49:66:b0:5c:66:4d:34:3d:ff:c0:e1:cd:5a:ff:
b7:d4:0a:d2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZLbK4zp5gt7OxddaVl5Hh1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQxMDMwMDIwNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTQ1MTJmNWYyNjdmMjI5MDEyYzAyMDczYmYwZGQxNjRhMTJiOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr4mao84Deohqj7cpQPuf06G90HI
5ygPHeEdRV5cK+TMXlm1AOmbKBTl4jPB/A/0FXtUWCmXZbPv1s9CniW+gNEHW/tl
RvsYk1l8vgd21Bl5hW8Xe8OI9M14X/T1uLORTbBx/yYo96rCtALs0qRnpWjddUO/
NeVdnx1mLJaXAdqTYh03om/T5qNuU5AgIzdega4HB7JvdvS8CDlgI6mnahtnYo5A
E9WXhc+PpT2RhgJ5vAa1N4FmtxY4E5xMKh2f2N7PTuXMwmgbk/9OKvqplDvswyzs
vu9MehOBWqj3yNZYtZg6qpjIcyfymOS45qIRbu0Y1SltQtdXE9cYEpsQkQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPlFEvXyZ/IpASwCBzvw3RZKErnpMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMS1VVVM5ZkpuOGlrQkxBSUhPX0RkRmtvU3Vlay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvMDk4MzdjLTk4ZjMtNGM5Zi1hZWJmLTg4MTQ4OGZmZGJi
MC8xL1VtSUVGZEpKQ2w3RDlwSmJuM2tFRG80aTNiOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACABBnwA
ZP//AAABktsqoJ0wDQYJKoZIhvcNAQELBQADggEBAAgtdnlFVYrF0AcSwagAFHJI
9NzXdBJATQQ1AeIfuWMYqMlhUfmWtXYmFTRPrLgZCvRvKkuz56xhP4fjTcE8sGw5
SVH1QWTBpR1dSBQJneEQFRHGbkjbWdYGeTjr3qC1KCycndBBHWeYA4mBP960h4vU
mUGF9QggOByCzaE3M0nD3FsbPR7aWVULPYb7VQPzEnGK5dR3PE3IwXhMgMoQsIXi
gRkQSmFeruC64VvSvuYAqc9iqGDPoBsUWJlDSz0x0Jq76WZoiPPme9b/h1JzCB9e
gxglIetX7s11MxVtwLCVeXyhe1piY8oNXTVCCnlJZrBcZk00Pf/A4c1a/7fUCtI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:56 2025 by rpki-client