Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2IJwU9hz-iWlVhyJbqpLOVXfI0k.roa
File: 2IJwU9hz-iWlVhyJbqpLOVXfI0k.roa (raw, json)
Hash identifier: jL5TWLutNo0gNHtut2VsdlSTgFIa1Py6sF+n+sAtWFc=
Subject key identifier: D8:82:70:53:D8:73:FA:25:A5:56:1C:89:6E:AA:4B:39:55:DF:23:49
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019457D9AEBBD3F8795804C3F6C2432CBFBA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2IJwU9hz-iWlVhyJbqpLOVXfI0k.roa
Signing time: Sun 12 Jan 2025 00:11:11 +0000
ROA not before: Sun 12 Jan 2025 00:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:d9:ae:bb:d3:f8:79:58:04:c3:f6:c2:43:2c:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 00:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8827053d873fa25a5561c896eaa4b3955df2349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:1e:fc:44:f6:26:a6:1e:15:63:b1:dc:88:
75:40:8b:43:2e:ff:28:19:87:53:bb:e2:3a:86:5e:
d6:1d:bf:c9:ec:2c:33:3f:97:ae:51:f6:e0:a8:d9:
dd:1f:fe:fe:63:ca:c0:70:32:7a:56:02:c6:33:1f:
1f:4b:31:3e:cc:60:d3:c9:9b:e6:55:e9:92:32:6d:
be:56:a8:77:2d:28:98:05:9c:34:45:a2:b4:86:55:
4d:3a:70:20:5e:a5:ed:0a:32:01:6b:96:92:0f:e1:
94:7c:c4:62:83:1c:8d:56:34:31:42:c8:9c:e6:2b:
5a:94:5a:cf:0a:99:12:d7:8b:ff:89:51:8f:73:01:
ec:6d:74:34:ef:fe:53:b9:0f:b3:6a:82:a6:1f:17:
a0:4c:32:77:ef:04:e1:2b:16:69:98:59:df:8c:45:
2e:36:af:a6:48:61:c2:32:58:27:16:d2:88:35:4b:
f3:c9:6f:1b:36:31:57:c7:6e:af:3c:54:1b:2c:72:
62:b1:b3:eb:03:4e:be:ad:fb:92:3a:51:2e:4b:0d:
e4:2d:9c:f4:a1:f9:09:d7:d0:ee:7b:7c:bb:e6:d0:
88:bb:02:3b:08:67:7e:2d:d0:98:da:c8:2c:b7:b1:
49:d4:aa:59:3a:c4:19:32:a8:b5:be:ee:7c:a7:da:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:70:53:D8:73:FA:25:A5:56:1C:89:6E:AA:4B:39:55:DF:23:49
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/2IJwU9hz-iWlVhyJbqpLOVXfI0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
2f:d8:30:e5:58:cc:96:03:fe:b9:92:a9:cb:1e:7b:92:d7:b3:
93:29:c8:ac:f9:d7:d8:9f:33:01:30:80:be:55:07:c9:17:ad:
a5:a8:4e:19:a7:c2:9f:9a:2d:fc:6a:3e:b2:b3:f4:21:46:ed:
5d:55:26:36:92:7e:60:4a:c4:2e:d6:d4:fd:12:32:01:dc:7f:
6b:29:b6:06:3f:d1:19:2a:c8:fd:e2:bc:89:41:7c:fb:d7:99:
32:68:37:97:7b:94:3d:15:fe:d1:10:4b:66:e5:07:46:b3:0c:
78:09:98:d8:d9:af:6a:9b:a8:e7:82:6d:a1:17:87:7c:27:84:
60:d9:20:cb:ce:b5:fb:14:4f:13:ca:09:0a:8f:34:d2:53:5b:
8d:c9:95:48:cf:f3:b4:93:17:8d:e9:c8:31:7f:cf:bd:2c:a1:
9c:04:81:f2:f8:eb:c3:9a:c3:9d:ab:80:03:3d:5f:d9:ea:2b:
8d:17:7e:b9:b2:6d:db:0a:28:7f:ce:d6:23:69:c9:2a:c8:b2:
e0:18:e6:2e:87:b5:5d:83:a0:84:ee:ff:d3:78:8e:5c:ac:98:
f8:e1:ec:01:ef:66:f9:f5:96:42:3b:79:2b:7d:52:ec:fd:00:
c8:30:fa:71:c5:1e:fe:9b:e3:33:28:03:af:21:98:31:b1:5f:
f9:6f:6b:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:19:13 2025 by rpki-client