Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-cgcAc_C9HfLqui-1e_SzzKbRmU.roa
File: 1-cgcAc_C9HfLqui-1e_SzzKbRmU.roa (raw, json)
Hash identifier: B1IljgvDexEt61wKzfoXLTwjutSejPusSDswnH6aeX8=
Subject key identifier: F9:C8:1C:01:CF:C2:F4:77:CB:AA:E8:BE:D5:EF:D2:CF:32:9B:46:65
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01938E575B9A5AE35517CC03C874E5CAB16F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-cgcAc_C9HfLqui-1e_SzzKbRmU.roa
Signing time: Tue 03 Dec 2024 21:05:09 +0000
ROA not before: Tue 03 Dec 2024 21:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:8e56:9865/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8e:57:5b:9a:5a:e3:55:17:cc:03:c8:74:e5:ca:b1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 3 21:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9c81c01cfc2f477cbaae8bed5efd2cf329b4665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:05:d2:4e:f0:f9:22:df:a3:d2:d2:be:06:
83:c0:bd:ad:25:4b:3b:9c:98:01:c1:fb:bb:93:ae:
9f:ff:e9:71:24:f0:56:06:35:2b:8d:38:05:9d:d8:
e1:e5:8b:5a:a2:35:99:09:32:3c:67:06:7f:db:c9:
ef:07:8d:3a:4e:30:42:67:49:dd:ec:c9:46:0c:73:
e7:70:18:b5:da:db:ad:5b:8d:a9:b0:6e:14:01:9e:
87:a8:ce:84:81:b2:e9:f4:7c:16:05:f0:92:8f:20:
c8:ab:be:e2:2b:9b:1d:bb:61:b1:70:a3:7d:2b:9a:
1b:6b:2f:b6:9e:74:cb:cf:a2:df:1f:ee:9a:80:71:
e9:6d:3f:f9:14:3e:66:85:40:c0:a4:c6:d9:c2:a4:
e6:1b:d5:77:f3:bb:e4:f7:c7:6a:49:0b:b5:ac:47:
ab:f7:df:8b:30:f9:50:f0:ee:16:b5:8d:97:0b:76:
72:11:8b:1f:59:da:a9:a6:1d:4d:3f:d0:81:aa:54:
a3:d0:a1:6e:87:de:62:5e:33:11:02:0c:2a:d0:31:
9e:89:1b:91:f8:fb:3b:ed:2d:46:5a:89:51:ce:4f:
4c:c6:45:32:37:dd:34:2d:d9:bf:24:ec:e0:f6:5e:
de:e5:b7:fe:0b:af:f0:13:2b:f6:a6:e1:76:48:61:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:1C:01:CF:C2:F4:77:CB:AA:E8:BE:D5:EF:D2:CF:32:9B:46:65
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-cgcAc_C9HfLqui-1e_SzzKbRmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:8e56:9865/128
Signature Algorithm: sha256WithRSAEncryption
5e:f0:a2:1f:c5:4e:c6:6f:62:c8:e6:b5:ed:a0:e2:cc:40:97:
20:b3:46:50:a8:49:ba:6e:e9:56:86:20:36:8f:03:e1:12:3d:
fe:50:3d:c4:eb:70:4f:07:0d:72:15:04:9b:1e:4f:c8:ea:64:
68:34:df:be:ba:74:e5:3c:d8:7d:93:a3:ed:b2:88:26:8d:da:
f2:d6:4c:53:5c:2c:88:65:d6:4a:82:be:bb:aa:cb:d8:20:46:
53:32:65:f5:67:08:c5:b5:61:0e:55:15:3a:5e:8e:a7:cb:eb:
b0:22:2a:07:4e:c4:ef:6b:2a:db:9c:e2:ec:fb:5a:71:c3:9c:
2f:5f:23:5d:b9:1b:5a:10:5a:5b:df:9c:31:60:2c:a1:31:4f:
aa:c1:b5:a4:dc:3b:4b:9c:67:2a:af:48:14:7c:59:d6:c4:25:
3b:a9:48:b3:a1:29:f3:48:a0:13:53:3f:fa:34:ae:2c:26:49:
d4:57:9f:83:e5:dc:0b:6d:08:70:ef:b2:57:ed:6d:19:43:31:
72:da:17:3e:72:cd:a1:3c:c4:2a:4a:41:88:e7:de:1b:4a:96:
a9:5d:93:4b:7c:a6:44:47:32:78:6f:9e:fd:b8:dd:92:e5:0a:
c1:dd:ce:08:ec:9a:a8:8b:f1:41:6a:a6:04:81:ac:a5:58:c2:
80:97:45:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:59 2025 by rpki-client