Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5sqke0zZm_VoeWBaGVuFX5lOb1c.roa
File: 5sqke0zZm_VoeWBaGVuFX5lOb1c.roa (raw, json)
Hash identifier: 5vPDiHW69GUdl+Q5jzRTk6wRlTUv83VXPA6rT3hhkHg=
Subject key identifier: E6:CA:A4:7B:4C:D9:9B:F5:68:79:60:5A:19:5B:85:5F:99:4E:6F:57
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019131787A08E40C1F3A9833D34F66C2025B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5sqke0zZm_VoeWBaGVuFX5lOb1c.roa
Signing time: Thu 08 Aug 2024 10:11:04 +0000
ROA not before: Thu 08 Aug 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:78:7a:08:e4:0c:1f:3a:98:33:d3:4f:66:c2:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 8 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6caa47b4cd99bf56879605a195b855f994e6f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:ba:a9:f5:08:3b:cf:e1:08:fa:53:7e:d4:
58:93:cb:73:77:c0:c4:4d:71:de:03:fb:f8:65:9c:
e1:5a:c9:04:c2:33:33:e9:09:7b:38:f8:1c:c8:00:
10:ee:3d:9b:38:40:46:7c:cb:60:85:db:31:d3:13:
49:59:a3:ec:57:b5:b5:2d:5c:db:10:56:58:c1:08:
2c:99:38:8e:3b:17:06:71:0d:46:a1:97:6b:7d:f1:
5e:35:dd:a7:aa:a7:9c:dc:7b:e0:96:f1:89:0e:1f:
99:68:50:f2:33:0e:0b:a6:78:fd:52:6e:1e:14:04:
92:dc:80:79:4a:b9:b5:2e:c2:0e:35:01:e3:13:ae:
f3:24:19:35:e0:60:77:f9:e0:79:73:62:ac:41:44:
3f:48:22:50:a3:47:7b:88:36:8b:ce:f7:78:86:8b:
46:52:65:6b:3c:df:0b:01:58:12:ce:29:f3:4b:92:
80:e0:02:34:4b:3e:92:13:78:31:56:ba:71:3a:7b:
66:00:70:f4:41:78:a2:75:b8:07:fb:a8:f2:4d:6a:
18:9b:cb:db:cc:11:2f:49:19:08:4f:52:a4:44:3d:
3c:7d:5f:76:b0:cf:28:3c:c5:d7:80:1d:0d:d1:b9:
29:58:60:b5:91:95:f7:fd:9e:5b:76:fe:95:d6:36:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:A4:7B:4C:D9:9B:F5:68:79:60:5A:19:5B:85:5F:99:4E:6F:57
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5sqke0zZm_VoeWBaGVuFX5lOb1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
09:37:c9:29:45:cd:3b:61:90:90:bc:d1:90:0f:ba:1f:08:de:
f3:04:f4:9d:31:2a:68:35:47:55:25:d5:86:ad:08:a3:5b:dc:
9a:8e:e8:47:54:88:b5:41:92:06:02:91:4a:da:e0:15:dc:8f:
48:fb:77:d2:2d:66:ca:92:0f:6a:69:d8:63:db:f9:aa:03:8a:
26:84:77:1d:e9:b4:9f:7b:d3:ef:3c:b2:d0:92:98:26:8b:ea:
18:97:66:2e:c0:cb:ad:a3:28:ed:10:4f:1f:c4:df:d6:25:c9:
de:7a:91:74:56:25:0c:1a:fb:1b:19:76:65:df:39:d4:4e:e9:
78:02:d0:af:0a:ef:4d:52:ee:1b:d7:28:08:d6:73:91:5e:dc:
99:2a:88:46:d8:fb:31:c8:ca:ca:f0:31:2f:e7:06:61:55:68:
da:e3:3f:48:f7:a5:7e:64:4f:8e:26:7e:c5:53:86:f3:bd:4e:
eb:7c:21:ae:18:54:e2:a6:2e:fa:48:84:49:4f:79:b1:04:bf:
b5:dc:2c:d0:10:7b:c8:73:55:25:aa:0e:22:14:6b:f7:42:a2:
b7:2b:3c:5b:6d:89:c0:65:fa:fb:25:7b:8d:73:1f:1d:12:7b:
41:c7:49:98:6a:ff:2a:ab:85:cf:1e:8e:bf:9c:ad:01:b2:d0:
8b:6f:5d:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:28 2025 by rpki-client