Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1qUQv3BryiSm_NusYTMThpGFtok.roa
File: 1qUQv3BryiSm_NusYTMThpGFtok.roa (raw, json)
Hash identifier: l+DugSQqLQAVxTFnxQoSJCPZJcUMnwOWAc95JLeVXlE=
Subject key identifier: D6:A5:10:BF:70:6B:CA:24:A6:FC:DB:AC:61:33:13:86:91:85:B6:89
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192FF00E5C9ABDF30E68D64E8B1EE4F012B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1qUQv3BryiSm_NusYTMThpGFtok.roa
Signing time: Wed 06 Nov 2024 01:05:01 +0000
ROA not before: Wed 06 Nov 2024 01:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:ff00:3bd7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:00:e5:c9:ab:df:30:e6:8d:64:e8:b1:ee:4f:01:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 6 01:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a510bf706bca24a6fcdbac613313869185b689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:9d:2b:f6:be:86:9d:89:a4:b6:c2:ca:40:
49:05:da:92:63:0f:9f:39:b1:fe:6f:3d:99:aa:4f:
44:9a:7c:3b:0f:e0:06:82:46:12:8d:95:65:32:08:
75:ab:1d:30:cc:47:87:1c:89:d5:a5:0e:8e:b9:5a:
49:93:89:08:c1:4d:d6:fb:92:9e:61:b4:0f:aa:26:
7f:ec:c9:10:67:bb:28:f1:5a:b0:f2:8b:df:cc:30:
c2:33:29:e0:4a:85:ce:14:c3:c6:aa:41:66:e0:fc:
a8:16:fb:f5:ff:3c:20:30:8e:36:54:1a:4e:26:e4:
dc:d9:03:d4:c5:f8:f7:b9:0f:a3:08:2f:3d:89:88:
79:6c:6f:9e:61:9e:e5:4a:8d:ce:87:38:fc:b8:f4:
89:3a:63:b4:2c:23:3f:7a:b7:b4:39:cf:48:4d:4b:
b4:36:5b:cd:24:10:cf:c4:34:80:f0:1f:b9:7f:91:
8e:e8:96:1c:f5:63:50:b2:c0:4e:43:d3:1a:53:d6:
d5:12:ae:11:94:6e:a0:09:c6:f2:04:0b:ef:33:a0:
14:a9:46:82:1b:ed:e4:da:b5:1d:30:9a:64:a5:0b:
fc:a8:2f:10:bd:27:40:21:b3:3e:1b:6c:41:40:f3:
46:17:c0:5c:36:39:ef:18:a8:58:77:c9:6e:79:0b:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A5:10:BF:70:6B:CA:24:A6:FC:DB:AC:61:33:13:86:91:85:B6:89
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1qUQv3BryiSm_NusYTMThpGFtok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:ff00:3bd7/128
Signature Algorithm: sha256WithRSAEncryption
87:7b:9d:57:a9:0d:42:df:1d:b6:ed:db:f0:d3:af:c7:2f:cb:
e6:88:c7:c7:e7:04:ff:2f:44:3e:2d:32:0c:02:7f:10:66:8c:
22:24:f8:70:15:09:5c:5a:7c:55:97:28:36:ea:8e:35:50:2b:
92:f5:50:48:6e:e0:6b:17:24:6b:2d:cf:0b:fe:b3:09:65:8a:
d8:19:04:c5:f5:97:05:ff:5f:34:44:d1:e9:04:4e:e2:15:25:
38:bf:13:ee:9c:01:f6:ff:26:32:f6:3d:21:3d:df:3e:44:ad:
b4:6b:93:ab:40:7c:62:fa:f4:41:f2:15:ca:62:ad:9e:1b:9d:
c0:24:35:ae:b3:f7:97:84:21:48:c7:e8:41:4d:94:c2:f0:2a:
02:9f:f1:dd:d5:b7:11:00:dc:24:4a:97:cc:f1:33:38:58:63:
ed:43:71:ac:3d:07:59:74:f3:37:69:b8:95:03:81:aa:c4:ec:
de:ea:2f:e0:74:79:a8:bc:fc:a2:31:aa:8e:ac:5c:93:41:03:
07:a4:08:39:56:b0:cb:b3:b4:a2:79:17:da:f1:82:0b:6e:e8:
6d:ef:fe:35:94:1e:cd:8f:d5:f9:24:6a:b4:3e:6e:ea:7d:a1:
03:e3:4b:60:4c:06:e6:27:46:e2:c4:3a:b5:16:41:bb:ca:69:
29:4e:e9:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:32:13 2025 by rpki-client