Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4PU6GGlNvSUHUCzSpPzuBD-A_kw.roa
File: 4PU6GGlNvSUHUCzSpPzuBD-A_kw.roa (raw, json)
Hash identifier: +JtwuBwZ3P/6zDTq6RPV0qvPPrTsh5hWeDl8Uu+elSU=
Subject key identifier: E0:F5:3A:18:69:4D:BD:25:07:50:2C:D2:A4:FC:EE:04:3F:80:FE:4C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914CEFA5C8CD334376CC9CB1B20F735A8F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4PU6GGlNvSUHUCzSpPzuBD-A_kw.roa
Signing time: Tue 13 Aug 2024 18:10:59 +0000
ROA not before: Tue 13 Aug 2024 18:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:ef:a5:c8:cd:33:43:76:cc:9c:b1:b2:0f:73:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 18:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0f53a18694dbd2507502cd2a4fcee043f80fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:50:67:1b:83:79:25:7b:c2:07:d1:ad:d2:
fc:e0:38:60:c6:98:a6:d1:2c:05:16:07:d1:b9:94:
ee:25:16:27:63:e8:10:73:3d:06:b3:37:51:0f:3f:
f8:4f:b2:fc:3b:d7:cf:f1:1b:95:1b:8d:27:96:99:
cf:70:d0:53:39:c1:3f:6e:7b:8f:8e:72:a0:fa:a5:
1f:9a:96:64:d2:a8:5a:99:6a:77:de:d5:39:34:0f:
36:25:d0:4d:4e:79:17:43:22:67:b3:fe:cb:fd:6d:
58:f7:d8:fe:59:0a:90:b3:97:4d:62:1b:7b:93:3e:
11:89:51:75:b6:ba:02:64:0d:bc:92:1d:5a:93:d5:
fb:b0:fc:83:13:5e:71:4d:fb:a6:7d:75:af:51:e5:
df:64:e6:53:63:1e:b9:75:ec:08:f9:c3:1b:b8:aa:
70:c5:49:10:2d:44:4b:58:82:d7:9c:ba:91:f5:5e:
a3:0d:d1:87:2b:a7:1e:20:e2:11:e7:b7:1b:0d:2f:
cd:40:9f:74:97:0b:f5:7a:e2:a3:1e:a4:40:35:ea:
3f:a2:03:cb:ef:61:26:cc:05:02:95:26:b1:7d:2b:
98:0f:61:29:8f:be:70:23:f5:08:3a:21:2b:77:53:
10:49:7f:13:e0:7d:59:77:cd:00:22:7a:5f:85:ea:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:3A:18:69:4D:BD:25:07:50:2C:D2:A4:FC:EE:04:3F:80:FE:4C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4PU6GGlNvSUHUCzSpPzuBD-A_kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
50:b1:a3:f0:0a:39:11:49:cf:5c:77:9d:ef:04:2f:be:3d:f7:
30:c4:52:47:5e:60:1a:d9:3d:d5:db:81:4c:a0:5e:b4:de:83:
20:77:01:ce:19:df:48:f2:f1:1a:e0:aa:e1:15:65:b6:86:f9:
63:4f:1e:dc:b6:30:04:ce:f1:74:c7:b2:94:f9:10:f4:d3:b7:
52:b7:77:07:1f:1b:37:97:0a:7a:cc:23:3a:ba:d4:ee:70:8c:
ff:72:6d:c7:85:95:b6:dc:64:e7:1b:cc:49:7e:74:8a:94:ab:
4c:f9:cf:59:57:01:3c:2d:b5:21:97:b9:84:7e:e0:c5:02:ab:
74:36:3f:97:4e:ac:76:60:78:0e:75:85:f8:31:ad:06:cf:fa:
46:d1:cb:d6:c9:b2:b7:15:43:eb:a0:8e:3c:cd:18:f9:7c:06:
2a:84:1b:31:0c:8e:4a:f4:e8:1d:e3:ae:b7:35:a7:a6:2a:a2:
c5:ab:f9:50:c1:99:a1:a9:63:07:97:07:73:9c:44:11:b8:5c:
a8:6c:5f:9a:1b:72:bd:85:e0:3e:e8:20:e4:dd:15:32:ac:f2:
23:d9:7f:34:e9:ae:b3:a3:36:9b:23:01:bd:1a:28:ec:9b:08:
ce:dd:5b:a3:6f:b9:ba:70:1d:f9:70:29:bd:43:78:e5:e2:77:
18:98:ed:03
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZFM76XIzTNDdsycsbIPc1qPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODEzMTgxMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGY1M2ExODY5NGRiZDI1MDc1MDJjZDJhNGZjZWUwNDNmODBmZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RtQZxuDeSV7wgfRrdL84Dhgxpim
0SwFFgfRuZTuJRYnY+gQcz0GszdRDz/4T7L8O9fP8RuVG40nlpnPcNBTOcE/bnuP
jnKg+qUfmpZk0qhamWp33tU5NA82JdBNTnkXQyJns/7L/W1Y99j+WQqQs5dNYht7
kz4RiVF1troCZA28kh1ak9X7sPyDE15xTfumfXWvUeXfZOZTYx65dewI+cMbuKpw
xUkQLURLWILXnLqR9V6jDdGHK6ceIOIR57cbDS/NQJ90lwv1euKjHqRANeo/ogPL
72EmzAUClSaxfSuYD2Epj75wI/UIOiErd1MQSX8T4H1Zd80AInpfheoLeQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFOD1OhhpTb0lB1As0qT87gQ/gP5MMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvNFBVNkdHbE52U1VIVUN6U3BQenVCRC1BX2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAULGj8Ao5EUnPXHed7wQvvj33
MMRSR15gGtk91duBTKBetN6DIHcBzhnfSPLxGuCq4RVltob5Y08e3LYwBM7xdMey
lPkQ9NO3Urd3Bx8bN5cKeswjOrrU7nCM/3Jtx4WVttxk5xvMSX50ipSrTPnPWVcB
PC21IZe5hH7gxQKrdDY/l06sdmB4DnWF+DGtBs/6RtHL1smytxVD66COPM0Y+XwG
KoQbMQyOSvToHeOutzWnpiqixav5UMGZoaljB5cHc5xEEbhcqGxfmhtyvYXgPugg
5N0VMqzyI9l/NOmus6M2myMBvRoo7JsIzt1bo2+5unAd+XApvUN45eJ3GJjtAw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:22 2025 by rpki-client