Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4ejpnLYxaDNN1btRSgHzpSrYqZc.roa
File: 4ejpnLYxaDNN1btRSgHzpSrYqZc.roa (raw, json)
Hash identifier: +BlxWnANipk09u+/3Gpwr2K6RfAIkudDIZ10JZwFr+k=
Subject key identifier: E1:E8:E9:9C:B6:31:68:33:4D:D5:BB:51:4A:01:F3:A5:2A:D8:A9:97
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192A819D21D7E0CBB502B955FCDE86809F6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4ejpnLYxaDNN1btRSgHzpSrYqZc.roa
Signing time: Sun 20 Oct 2024 04:05:17 +0000
ROA not before: Sun 20 Oct 2024 04:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:a819:286f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a8:19:d2:1d:7e:0c:bb:50:2b:95:5f:cd:e8:68:09:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 20 04:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e8e99cb63168334dd5bb514a01f3a52ad8a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:14:e6:ce:61:7e:b3:25:b2:aa:94:7d:5c:
54:b2:1b:c1:69:0f:bd:b4:83:7d:40:29:1c:da:2a:
f4:0c:9e:0c:fd:f4:a1:5c:7b:7f:09:59:a2:14:48:
bb:b2:05:1e:ba:51:ee:35:61:1e:0e:9d:1c:cf:0f:
3d:cd:cd:ed:a6:4a:6c:40:21:29:5a:c8:1e:10:8c:
0b:6f:e1:d3:c6:3c:12:5d:b5:24:f1:1f:7e:fb:fa:
d4:38:b1:a0:a0:f8:e1:90:83:6d:80:3d:b1:73:36:
0a:27:01:9f:13:b1:7e:b4:b0:1b:f4:16:f3:23:c3:
d4:02:38:35:29:04:f5:fd:50:98:07:f1:40:38:e1:
7e:44:03:f3:39:0e:5f:f2:a6:26:4f:53:eb:30:dc:
e0:46:7a:c4:e7:16:f5:03:93:b7:21:ca:7e:8d:36:
34:f5:ed:b0:0b:a7:00:4d:91:89:d1:87:53:05:60:
b2:09:3a:25:85:ad:48:f8:02:79:29:9d:40:89:f1:
46:5d:70:ac:24:26:19:6b:0f:84:43:36:4a:8a:90:
3a:04:1c:34:5f:40:cd:9d:d8:2f:3c:0e:7e:80:83:
6d:2e:7e:36:2a:9e:78:e3:ed:b7:d8:f3:be:fa:b6:
47:28:72:4d:e9:f3:9e:91:e9:1c:b1:7e:3e:02:e9:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:E9:9C:B6:31:68:33:4D:D5:BB:51:4A:01:F3:A5:2A:D8:A9:97
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/4ejpnLYxaDNN1btRSgHzpSrYqZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:a819:286f/128
Signature Algorithm: sha256WithRSAEncryption
92:95:65:07:32:54:1c:dc:1f:e0:b4:9c:aa:55:aa:ce:aa:f3:
25:c7:24:dc:35:0d:97:f4:86:3e:a6:d8:94:17:d6:9e:2a:25:
4d:ab:c4:54:a2:e0:ba:13:fc:55:6e:ae:3b:04:aa:31:d3:00:
3b:d3:bc:fc:04:64:8a:26:af:6a:4b:97:37:16:3a:13:28:9a:
fb:40:d9:da:51:9d:70:a5:2a:07:44:a6:cd:e0:1e:9a:59:49:
58:20:fa:cd:e0:d8:58:a8:bc:e6:83:38:2c:94:d2:34:40:24:
0b:b9:aa:0a:46:fe:82:1d:56:12:83:56:c6:4a:41:9b:6c:50:
7c:f1:55:e9:51:ec:31:62:00:66:00:9a:c0:d8:7d:50:7a:f6:
4d:93:a0:25:e8:6c:15:e4:dc:30:57:c3:3d:e5:98:74:3b:2e:
b4:75:a8:0a:78:dd:13:c9:c0:45:88:98:18:9d:ed:ef:9c:8a:
cf:be:12:d9:29:38:d5:fd:7e:1f:88:67:f7:b7:60:64:48:20:
91:56:c3:ec:6d:09:8e:b5:2d:76:d7:cd:eb:17:e7:ff:82:f6:
7e:c1:6f:17:75:66:6b:29:20:4a:ac:a5:ed:5e:ec:d3:29:b7:
70:03:27:02:81:e4:48:e6:26:f6:82:46:6e:ef:ed:18:a2:6d:
a2:9d:dd:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:04 2025 by rpki-client