Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1HzzVmTJWrzwSrWx-KFYZkNaptg.roa
File: 1HzzVmTJWrzwSrWx-KFYZkNaptg.roa (raw, json)
Hash identifier: 7JDRo4npJn3PcPUX1NO7aoUkKTG2g/samUf7RbqMESc=
Subject key identifier: D4:7C:F3:56:64:C9:5A:BC:F0:4A:B5:B1:F8:A1:58:66:43:5A:A6:D8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916B6935FAEB6C8B73CBC16D8225C68DE6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1HzzVmTJWrzwSrWx-KFYZkNaptg.roa
Signing time: Mon 19 Aug 2024 16:12:22 +0000
ROA not before: Mon 19 Aug 2024 16:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:69:35:fa:eb:6c:8b:73:cb:c1:6d:82:25:c6:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 19 16:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d47cf35664c95abcf04ab5b1f8a15866435aa6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:eb:20:ea:cc:5a:33:43:1f:bf:e6:95:1b:
87:44:95:e3:69:20:52:e7:3d:84:03:63:b6:96:49:
a4:da:43:34:79:8c:42:4d:78:c3:d4:3a:d4:08:d8:
49:21:77:61:c2:90:3c:d6:76:b3:1f:4d:91:a9:e1:
dc:54:5e:53:7b:70:e7:60:3e:dc:20:cc:bf:a1:7c:
0e:e6:e1:c1:29:cc:ab:b1:09:c2:10:fd:6b:73:53:
1d:ed:8a:be:33:c6:cc:be:9a:8c:44:d9:03:66:1e:
e2:e5:85:40:1c:c2:61:cf:83:d0:9e:63:93:4f:95:
57:bc:83:a1:90:69:35:cc:89:40:f0:18:46:79:51:
3a:ad:c2:bb:34:12:bb:fc:47:cd:b1:94:06:dd:ca:
a9:7d:d7:79:8f:f2:7f:e1:7b:6e:85:1e:1f:71:f8:
29:45:49:07:d8:81:5c:83:cd:31:53:93:64:c1:5f:
fe:b9:4a:bc:9b:e8:60:73:48:a6:87:e7:95:a2:dc:
53:d7:23:9d:57:fa:37:ee:3d:43:d2:4c:b7:76:04:
9a:ff:ec:a8:c2:47:6f:0e:69:1a:10:ba:2e:0c:36:
60:59:60:73:39:9e:d4:ff:db:b2:3d:a9:25:e0:82:
ec:ee:75:af:36:b5:a6:87:c0:51:56:bf:29:18:a9:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:F3:56:64:C9:5A:BC:F0:4A:B5:B1:F8:A1:58:66:43:5A:A6:D8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1HzzVmTJWrzwSrWx-KFYZkNaptg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
8e:2f:4c:b2:c2:34:c0:0d:7b:8f:d3:65:6d:a8:92:05:df:58:
a8:ec:fb:3f:34:1c:95:ee:c2:af:62:14:3e:be:0c:b6:1a:27:
88:f8:f5:bc:35:e6:4f:d8:49:79:c9:80:50:7a:b2:ed:05:87:
7b:ae:70:62:1d:7f:c5:f3:f4:7d:b0:6c:0f:32:ea:90:93:0d:
ef:ba:6a:59:ec:0e:ca:1c:62:8f:0e:7e:29:47:f5:51:87:0d:
c0:a5:8f:c3:c9:62:74:1e:4b:7f:af:b3:f4:36:47:b8:0b:23:
8d:ee:5f:2f:74:e7:ef:25:ac:57:ce:5f:c6:d3:c3:50:59:23:
e2:67:be:80:56:e0:1a:9d:da:20:e3:41:66:9d:9e:43:0a:2c:
83:01:52:cd:41:a9:4a:64:d0:34:d9:a5:c8:a4:40:db:6d:3a:
32:4c:35:21:df:62:0f:cc:33:a5:3a:60:a5:41:9f:44:58:93:
83:eb:bd:ec:af:ad:1d:34:aa:28:ac:98:29:30:73:0a:de:19:
6e:06:d8:aa:32:b7:6c:da:23:79:8a:ba:3d:62:01:d3:2a:c3:
a1:23:c9:c7:46:b8:7e:97:d0:62:e0:c0:df:1a:03:5c:a5:61:
e9:8f:b4:32:69:df:93:5d:9e:2d:37:df:9c:ef:d4:49:3e:9c:
9f:18:c6:35
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFraTX662yLc8vBbYIlxo3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODE5MTYxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDdjZjM1NjY0Yzk1YWJjZjA0YWI1YjFmOGExNTg2NjQzNWFhNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIvrIOrMWjNDH7/mlRuHRJXjaSBS
5z2EA2O2lkmk2kM0eYxCTXjD1DrUCNhJIXdhwpA81nazH02RqeHcVF5Te3DnYD7c
IMy/oXwO5uHBKcyrsQnCEP1rc1Md7Yq+M8bMvpqMRNkDZh7i5YVAHMJhz4PQnmOT
T5VXvIOhkGk1zIlA8BhGeVE6rcK7NBK7/EfNsZQG3cqpfdd5j/J/4XtuhR4fcfgp
RUkH2IFcg80xU5NkwV/+uUq8m+hgc0imh+eVotxT1yOdV/o37j1D0ky3dgSa/+yo
wkdvDmkaELouDDZgWWBzOZ7U/9uyPakl4ILs7nWvNrWmh8BRVr8pGKlapwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFNR881ZkyVq88Eq1sfihWGZDWqbYMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvMUh6elZtVEpXcnp3U3JXeC1LRllaa05hcHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAji9MssI0wA17j9NlbaiSBd9Y
qOz7PzQcle7Cr2IUPr4MthoniPj1vDXmT9hJecmAUHqy7QWHe65wYh1/xfP0fbBs
DzLqkJMN77pqWewOyhxijw5+KUf1UYcNwKWPw8lidB5Lf6+z9DZHuAsjje5fL3Tn
7yWsV85fxtPDUFkj4me+gFbgGp3aIONBZp2eQwosgwFSzUGpSmTQNNmlyKRA2206
Mkw1Id9iD8wzpTpgpUGfRFiTg+u97K+tHTSqKKyYKTBzCt4ZbgbYqjK3bNojeYq6
PWIB0yrDoSPJx0a4fpfQYuDA3xoDXKVh6Y+0Mmnfk12eLTffnO/UST6cnxjGNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:04:52 2025 by rpki-client