Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/198DgHa_f7K3Ww_xLCATstrnqZI.roa
File: 198DgHa_f7K3Ww_xLCATstrnqZI.roa (raw, json)
Hash identifier: E4Vu/iU43tL5buE1ycPu2OR42w7k0bVWA6/nvu0E11A=
Subject key identifier: D7:DF:03:80:76:BF:7F:B2:B7:5B:0F:F1:2C:20:13:B2:DA:E7:A9:92
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190BCEEA37ABA4D0BA75B7D89511D4F2BF2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/198DgHa_f7K3Ww_xLCATstrnqZI.roa
Signing time: Tue 16 Jul 2024 19:04:34 +0000
ROA not before: Tue 16 Jul 2024 19:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:bcee:5345/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:ee:a3:7a:ba:4d:0b:a7:5b:7d:89:51:1d:4f:2b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 16 19:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7df038076bf7fb2b75b0ff12c2013b2dae7a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:24:4d:f8:67:93:03:61:73:d9:6f:87:ab:
f5:bf:c3:c2:92:06:0c:0c:19:a3:b9:68:8e:38:da:
7b:4e:8f:93:e3:ea:94:49:66:60:38:e9:2b:b1:53:
79:e7:4d:f2:b0:7d:48:2f:af:3f:a5:3a:93:aa:62:
a3:85:20:39:6d:55:81:7c:df:b8:83:b2:b1:11:b6:
72:aa:75:9c:88:4c:98:2f:80:02:28:c7:70:9a:9d:
af:a6:7a:73:eb:86:54:b9:69:62:8e:11:59:ce:4a:
a5:45:d4:1a:f7:c2:03:96:d0:df:fc:38:a7:db:63:
82:cb:45:4c:37:57:57:2d:83:a2:97:dd:86:85:e3:
d6:f8:c7:0a:40:61:fc:a0:99:84:87:db:70:0c:9f:
c7:16:7b:78:45:96:75:f9:28:27:c8:98:6e:50:56:
1b:bd:78:74:c5:e2:24:51:c6:27:14:0a:fd:85:10:
f4:c3:ef:7a:fc:77:da:a9:c5:61:66:c9:db:3f:49:
f4:3f:7e:19:6d:bd:11:e6:1f:e4:d6:6d:86:c0:e3:
b3:7f:58:11:5e:a6:80:f6:76:79:e6:f7:32:ee:61:
33:72:3d:a7:d5:6b:cf:0d:12:66:2c:0d:43:f1:97:
c6:f2:c2:98:53:5b:71:6e:17:f0:12:09:ed:3e:dd:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:03:80:76:BF:7F:B2:B7:5B:0F:F1:2C:20:13:B2:DA:E7:A9:92
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/198DgHa_f7K3Ww_xLCATstrnqZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:bcee:5345/128
Signature Algorithm: sha256WithRSAEncryption
49:78:4a:69:03:8a:cb:98:99:d1:e5:5e:e1:98:65:57:3a:e3:
0c:8b:ab:62:e5:20:49:13:e6:5f:e1:d2:cc:05:55:f9:84:0c:
cf:f8:8c:61:75:b6:fc:2e:44:22:ac:0f:20:1a:90:26:5b:ac:
c7:31:a6:cc:a9:45:46:81:26:1c:2c:56:b9:f9:41:e8:0b:bb:
1a:38:02:33:1c:50:73:4c:ec:32:5d:9e:2f:5c:f2:a2:7c:bc:
8f:84:a6:c1:d6:0e:aa:71:40:5c:6c:5e:11:96:e2:a7:82:7c:
8c:58:55:9e:0c:5c:09:00:64:6c:af:3d:67:79:78:38:c8:40:
90:57:04:ab:fe:75:81:3c:bc:13:11:3e:31:63:67:29:a2:db:
93:58:80:f6:48:a1:82:ed:34:eb:f1:d1:65:1d:b9:e8:68:df:
de:46:56:02:c7:8d:a6:16:91:82:f8:fa:7b:3a:00:ca:f6:d8:
85:3d:e3:3a:e8:7c:3e:e4:31:55:99:41:4d:a2:7f:e3:08:50:
de:60:78:3c:18:d9:c4:86:7f:cf:54:2c:02:93:45:f5:5b:bf:
84:f4:80:ce:2c:85:36:9e:22:55:e3:fe:1b:d9:23:ff:9c:2d:
24:71:34:42:27:bc:53:88:ae:62:42:f3:8e:91:dd:e7:3a:44:
2e:c1:95:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:16 2025 by rpki-client