Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3RgOR9pv3y_vVN46gSMPb_2F9Ao.roa
File: 3RgOR9pv3y_vVN46gSMPb_2F9Ao.roa (raw, json)
Hash identifier: SqFMu8TrR1l13J8MN8PgkPArQacA5evYAq7KumSzs0c=
Subject key identifier: DD:18:0E:47:DA:6F:DF:2F:EF:54:DE:3A:81:23:0F:6F:FD:85:F4:0A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019105B26C44AFB3BF06C317849717739F9A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3RgOR9pv3y_vVN46gSMPb_2F9Ao.roa
Signing time: Tue 30 Jul 2024 22:11:04 +0000
ROA not before: Tue 30 Jul 2024 22:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:05:b2:6c:44:af:b3:bf:06:c3:17:84:97:17:73:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 22:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd180e47da6fdf2fef54de3a81230f6ffd85f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:7e:7e:23:37:a9:47:b6:90:d5:53:17:ee:
5a:7d:ac:09:f2:6c:27:d8:2d:55:44:4e:08:a5:ae:
b8:c2:c9:0b:29:2d:4c:47:82:44:a1:df:a6:f4:c9:
cc:38:22:7f:0c:3f:f4:1c:05:83:c3:c6:6f:f9:22:
ca:28:b0:a2:4b:aa:0e:8f:45:92:01:dc:14:b8:32:
71:3a:34:be:a8:6c:8b:e3:85:bf:4d:e1:98:48:e6:
29:ff:30:b9:8e:53:37:9a:b6:e2:d4:4b:59:af:c3:
0b:37:67:79:38:a8:9f:9a:83:a7:f0:27:c4:d8:5b:
05:eb:9c:23:76:80:09:35:42:38:60:e2:44:85:ab:
c8:ac:d7:19:54:5e:f4:3d:46:81:f7:73:e5:a0:aa:
e5:75:d2:18:31:82:0a:d3:12:33:d2:1f:7c:a5:5e:
7e:5e:62:fb:fe:01:0f:41:ec:35:e4:85:c6:3b:ce:
77:27:6b:ad:3a:d7:30:da:bf:fb:7a:ca:c3:c9:a2:
c0:47:1e:ce:8d:5c:56:f3:67:3e:54:33:82:a6:ff:
6a:86:b9:9f:29:2c:14:b2:4d:6e:39:30:05:c8:db:
24:e6:82:6d:57:d6:d3:93:ac:08:28:ee:f2:b4:50:
33:ef:32:0c:65:22:bc:bb:95:e3:03:af:74:21:80:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:0E:47:DA:6F:DF:2F:EF:54:DE:3A:81:23:0F:6F:FD:85:F4:0A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/3RgOR9pv3y_vVN46gSMPb_2F9Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3b:34:29:1e:84:20:5a:73:77:54:58:bc:ce:d2:1e:cd:80:c5:
fb:b3:b2:15:44:ad:9e:b3:ed:fa:2c:5c:57:e3:46:cf:64:99:
97:ad:6e:da:17:64:f7:b1:a9:b0:a6:a8:8b:4b:ae:86:0a:ba:
e4:3c:98:84:88:be:7a:68:d1:ed:e8:72:d5:84:0d:9b:bd:e0:
6e:36:50:82:16:76:98:f9:0b:ba:ef:85:b4:43:ae:81:a1:4a:
c2:95:dd:45:a9:8f:28:a2:44:2b:6b:2a:3d:d2:d8:63:cd:26:
43:25:32:b6:4d:fb:ae:d6:4f:23:f4:35:e1:28:36:66:88:ef:
59:7f:63:af:31:f4:ef:2e:b7:6c:3f:e4:53:66:88:66:f4:4d:
5c:e0:3b:6c:3c:4e:66:3c:62:11:13:88:50:61:bc:aa:ee:0a:
4d:12:2a:60:d2:bc:90:97:16:c1:20:31:8c:64:35:a8:c7:16:
4e:66:3c:3b:7d:20:b4:82:a8:69:fc:05:1e:a3:a2:78:74:61:
e2:0b:30:f2:33:39:ff:6a:50:36:38:f5:c9:85:3f:dc:16:61:
dd:0f:a1:6d:ac:f4:d4:eb:5d:5e:c6:a9:73:27:dd:3f:13:09:
7d:fa:79:7d:51:c8:8a:8a:c8:10:ab:4d:67:90:a0:d0:47:d8:
43:a1:83:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:12 2025 by rpki-client