Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5dBFq5Zq4XzbCtsKZ6RdkTR_zNY.roa
File: 5dBFq5Zq4XzbCtsKZ6RdkTR_zNY.roa (raw, json)
Hash identifier: UaDVqisxDtWgsKcX6FoBsSj1pUycH8hNBO6VIiJ4HMY=
Subject key identifier: E5:D0:45:AB:96:6A:E1:7C:DB:0A:DB:0A:67:A4:5D:91:34:7F:CC:D6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191AE5BE1879DCB35B0F598DB4C0F3D7F0A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5dBFq5Zq4XzbCtsKZ6RdkTR_zNY.roa
Signing time: Sun 01 Sep 2024 16:12:22 +0000
ROA not before: Sun 01 Sep 2024 16:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:5b:e1:87:9d:cb:35:b0:f5:98:db:4c:0f:3d:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 1 16:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d045ab966ae17cdb0adb0a67a45d91347fccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:69:55:83:96:4a:3d:f8:a1:b1:86:a6:39:
31:8f:5c:36:7b:2b:ae:0b:6a:d2:d3:c9:30:2f:37:
a8:8c:8b:83:a7:cc:45:02:3b:f7:ff:87:cf:bf:58:
a0:b8:ad:d8:42:f0:4f:fb:18:c5:0e:ba:59:f7:9a:
33:5e:c0:53:df:b9:72:79:9a:9f:4e:99:d9:49:3d:
80:64:ca:3f:cc:ff:ef:8b:e5:da:b2:84:df:71:a0:
65:fa:0c:a0:a5:e3:38:bd:15:11:c3:7d:6a:0d:a0:
a0:92:0a:e0:35:65:1a:e1:ff:6b:28:72:a5:57:82:
95:66:4d:89:90:43:2b:0c:2c:f5:af:17:18:8e:7d:
3b:ec:bc:44:73:16:4e:24:6f:6a:e3:ad:89:a8:48:
96:7d:40:fc:05:10:fa:8c:2e:81:31:42:db:d8:ab:
54:fc:9e:9d:ed:5e:34:04:4d:75:a1:54:1c:a6:6e:
8d:c7:f5:b6:6b:0c:3d:37:04:2f:ee:40:ca:cb:d5:
02:9f:5e:c9:02:39:77:d3:1e:44:cd:cd:f4:ed:5d:
5e:07:27:37:3f:b8:76:e3:6b:25:ab:e0:8e:89:7a:
b2:28:d3:d1:55:66:09:97:5d:85:1c:8b:85:f2:04:
9b:10:a3:aa:37:71:ce:2a:7c:6c:ef:30:75:6e:19:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D0:45:AB:96:6A:E1:7C:DB:0A:DB:0A:67:A4:5D:91:34:7F:CC:D6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5dBFq5Zq4XzbCtsKZ6RdkTR_zNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
78:ea:d4:fa:c8:ff:0c:e1:7b:ea:ab:b0:e8:22:ae:0e:bd:ea:
b5:e3:52:b0:89:e1:7e:ef:55:24:1f:53:c8:6a:bc:2d:9c:92:
2c:09:bd:e3:1f:0d:22:51:18:7f:7e:a5:fc:80:54:f0:10:d9:
ce:24:9b:ec:75:dc:12:02:b3:46:a5:ad:92:07:0a:d3:49:35:
74:cf:55:4e:c6:10:d3:97:93:e1:81:51:ae:99:93:08:20:f1:
41:f2:63:30:71:ed:c7:76:e6:a2:5d:bf:ef:86:ea:c6:ca:04:
89:af:57:29:2c:91:1c:84:f6:19:62:1f:62:1b:85:0c:98:63:
5c:6f:0a:87:5c:43:16:e5:eb:5e:4a:d4:91:75:b0:56:c9:dc:
af:6d:ed:26:b5:e6:c1:9a:9b:22:6c:d9:a1:9f:e0:08:5b:46:
7e:15:c7:82:07:b3:49:8c:89:21:5d:f7:bc:33:83:fe:5b:80:
ba:ca:d7:5d:f6:52:7c:53:d1:db:d2:9f:5e:8d:d4:70:70:1e:
a6:a8:3d:32:7b:0f:f7:51:48:83:21:c2:a2:eb:0a:8e:a4:8a:
6c:10:f6:46:77:af:d8:07:19:18:fa:7b:0b:4b:bd:79:09:8b:
9a:4f:be:34:05:3e:8f:f8:af:ae:e4:14:73:07:f0:3a:4f:a9:
86:52:d6:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:47 2025 by rpki-client