Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Y9xn5skAhaa5OYghrhpTYYl_AU.roa
File: 5Y9xn5skAhaa5OYghrhpTYYl_AU.roa (raw, json)
Hash identifier: TR05Uy8RLBIKe/hb2qw3SI5NszNvKlXV8L2166qYNTM=
Subject key identifier: E5:8F:71:9F:9B:24:02:16:9A:E4:E6:20:86:B8:69:4D:86:25:FC:05
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917990DD86D4852B29DE619D5CDF44AD0E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Y9xn5skAhaa5OYghrhpTYYl_AU.roa
Signing time: Thu 22 Aug 2024 10:10:22 +0000
ROA not before: Thu 22 Aug 2024 10:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:90:dd:86:d4:85:2b:29:de:61:9d:5c:df:44:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 10:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e58f719f9b2402169ae4e62086b8694d8625fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:5d:91:8c:86:48:8f:29:5b:c7:fd:3a:18:
a6:d6:16:bd:48:40:80:12:1a:da:10:b3:5a:c8:22:
bf:09:82:e3:85:b9:00:25:c5:3e:7a:36:14:9f:16:
23:3c:ad:e4:6d:29:31:52:0c:fc:4b:73:81:05:5b:
10:d0:de:2b:63:a1:0d:3e:df:f7:3c:1c:cf:49:32:
cb:ab:64:d5:dc:f6:5f:78:b9:e0:4b:e1:69:be:22:
cf:35:6e:a6:66:d2:3a:ea:77:0d:39:89:b0:26:f3:
8b:d6:22:82:89:29:82:f4:5c:ca:77:bf:2e:49:a2:
d5:41:e5:03:ac:4f:3a:79:79:2b:1f:50:2f:14:66:
60:36:42:f3:4d:ff:f7:10:1e:65:7d:94:55:93:21:
df:fc:32:4d:86:07:d4:8a:ba:ed:da:05:13:0a:fa:
66:74:e3:90:01:1b:a7:1f:60:b8:9b:04:ac:da:65:
78:31:6a:10:0f:24:40:71:90:1f:41:72:b3:cc:29:
b1:e3:47:a3:c2:e2:a9:07:6a:86:75:a3:7c:1f:36:
1e:e6:99:53:10:37:f8:7c:19:e3:ca:3c:fd:79:6a:
2c:b6:03:ed:f0:f1:86:65:8f:fd:3a:77:40:a8:de:
1d:c4:42:eb:cd:e6:5b:9a:ed:11:23:09:bf:f9:7d:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:71:9F:9B:24:02:16:9A:E4:E6:20:86:B8:69:4D:86:25:FC:05
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5Y9xn5skAhaa5OYghrhpTYYl_AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
32:79:49:82:af:8f:98:53:20:05:06:cd:45:f9:9d:e7:ee:27:
7f:bf:f4:2e:c0:f5:54:69:00:97:ed:5b:83:c2:6b:9d:5b:3e:
4d:d6:03:22:d2:d1:ac:78:d3:80:f8:83:5a:7d:7c:a7:d4:23:
bd:5a:de:1a:71:a0:85:60:a7:06:29:bd:40:19:93:45:0d:19:
4f:b8:c6:8e:2a:9f:a7:fd:9b:02:8e:60:f3:41:5c:eb:7e:a9:
67:97:f1:bd:a9:05:4c:5b:57:4a:47:e8:da:69:6a:13:e1:cc:
10:fb:85:c7:df:e9:54:ee:18:fe:46:8b:d6:6c:11:2a:2d:3e:
0b:61:76:e2:17:58:ec:50:f2:d0:3d:80:07:74:dd:01:18:a7:
d3:ef:0f:18:f9:06:0b:d2:e5:1c:2e:cb:5e:1c:d6:a5:e3:96:
0f:34:d7:ce:33:62:c9:7a:b8:fb:f4:89:86:0d:af:36:71:eb:
11:c4:00:9b:64:68:f3:4f:eb:89:b9:82:ee:d5:58:c4:8d:c1:
4e:d5:ba:70:18:25:97:3c:d8:ea:ef:a1:20:4b:af:11:06:7f:
8c:34:41:37:6c:65:29:df:c2:93:f1:c1:ee:e5:53:3e:10:50:
06:b7:d8:41:93:4a:41:a2:0d:24:a9:f4:94:8d:68:c9:6b:7a:
00:ef:4f:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:59:32 2025 by rpki-client