Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/34ColL-SEZMQAGBQJmsUxoz2yPc.roa
File: 34ColL-SEZMQAGBQJmsUxoz2yPc.roa (raw, json)
Hash identifier: UaRd0vr8CPJgFV/GIejGXie23ykKE83cP/4KxvAnNr0=
Subject key identifier: DF:80:A8:94:BF:92:11:93:10:00:60:50:26:6B:14:C6:8C:F6:C8:F7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019164F941B95789C218E702E2F2F295394F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/34ColL-SEZMQAGBQJmsUxoz2yPc.roa
Signing time: Sun 18 Aug 2024 10:12:22 +0000
ROA not before: Sun 18 Aug 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:f9:41:b9:57:89:c2:18:e7:02:e2:f2:f2:95:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 18 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df80a894bf92119310006050266b14c68cf6c8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:49:69:94:fb:fc:f6:0f:51:6a:5d:81:a0:
d6:7f:6e:5d:ae:67:6b:68:82:6d:7f:88:be:16:de:
c1:d3:e3:65:dd:a4:6a:99:52:fa:e0:fd:bc:70:62:
d1:fe:52:50:34:55:bb:ab:d0:3c:4e:7b:b7:1e:cd:
31:60:0b:02:15:f8:09:9d:4c:29:d4:bb:59:a2:b3:
11:93:62:17:cc:c9:89:9f:20:9d:e9:41:a2:ab:ca:
25:9b:48:7a:78:94:a4:fa:dd:38:ed:52:12:98:6a:
d8:b4:56:73:1d:8c:e6:bb:a7:35:6b:2b:17:eb:61:
dd:4c:43:a7:1b:46:0a:f6:f6:a6:f5:7d:05:ca:ec:
d5:da:1c:a3:74:ed:81:fd:1e:d1:56:4b:58:88:28:
e9:08:2f:d6:29:f7:18:2b:0a:59:c9:f8:1f:68:cf:
08:7c:87:1a:37:6a:11:25:56:7c:33:9d:0c:19:85:
c6:14:41:6d:af:14:f8:96:55:c6:f7:3b:a2:33:ce:
6e:3e:8a:24:5c:d0:67:0a:92:68:06:54:79:61:16:
40:e3:a9:a1:62:f0:ef:a3:b6:30:c6:13:dc:68:32:
a5:e8:ca:a2:3f:29:ff:fb:ee:2c:51:83:e1:f4:0e:
8e:a5:d9:e6:e5:79:c6:ef:90:8d:11:ab:90:de:1e:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:A8:94:BF:92:11:93:10:00:60:50:26:6B:14:C6:8C:F6:C8:F7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/34ColL-SEZMQAGBQJmsUxoz2yPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
61:63:98:6b:4f:ec:36:ef:d1:4c:8b:14:c2:18:83:7f:8f:91:
1c:ba:66:dd:4f:84:a3:8a:ab:4b:c7:4a:c1:0c:ae:7e:79:48:
d1:b6:61:f0:af:be:c2:94:2e:30:7d:c7:f9:58:43:ba:0d:63:
75:15:16:87:e2:bb:d0:8b:7a:96:b8:23:8d:8f:7d:07:3a:1f:
b7:b7:83:0f:00:ce:7a:1d:fa:3a:d8:bb:bf:55:cd:22:f2:15:
2e:82:7d:2d:49:a9:fb:5f:92:75:68:8a:1c:39:39:c7:93:be:
ea:bd:1c:22:b9:8c:21:c4:4d:0a:5a:43:ce:16:d8:bf:b5:0c:
e5:48:28:31:bf:d7:51:1a:36:fa:e3:98:2c:4a:1f:aa:0e:24:
08:f0:ff:65:5b:0b:43:b0:ce:f0:87:4a:92:3a:8c:2a:b1:19:
b1:94:aa:54:b2:6e:4b:84:00:5f:fd:9d:a0:f4:1c:2d:26:a6:
bb:b7:a0:f7:91:f1:23:e2:52:77:a5:43:01:84:cc:6a:61:af:
5d:06:08:b5:00:2a:a8:04:f9:6a:eb:98:ce:18:cb:bd:5d:f7:
64:8d:98:af:25:87:4a:9f:91:b6:07:a3:5c:36:b7:5d:d1:96:
f3:f2:3e:24:13:77:3c:a5:00:ce:05:ae:ab:02:31:8a:78:9d:
8c:f9:a7:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:37:59 2025 by rpki-client