Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6xHpKUQduHmmO9DE9Pa_hRrciaQ.roa
File: 6xHpKUQduHmmO9DE9Pa_hRrciaQ.roa (raw, json)
Hash identifier: mzLZS213WRdou2Fz+z0X0rVFUcoQpav/SR016mupdhw=
Subject key identifier: EB:11:E9:29:44:1D:B8:79:A6:3B:D0:C4:F4:F6:BF:85:1A:DC:89:A4
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193EEE6BFBE2E07CA7A46A36085D368E0DD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6xHpKUQduHmmO9DE9Pa_hRrciaQ.roa
Signing time: Sun 22 Dec 2024 15:05:19 +0000
ROA not before: Sun 22 Dec 2024 15:05:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:eee5:daf1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:e6:bf:be:2e:07:ca:7a:46:a3:60:85:d3:68:e0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 22 15:05:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb11e929441db879a63bd0c4f4f6bf851adc89a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:56:a9:d3:97:85:eb:d8:b2:4f:13:09:20:
1b:9f:8c:aa:5d:18:5e:2f:00:5c:67:e5:39:a1:0d:
8c:2f:b4:0f:9f:a5:e0:a4:80:93:71:3b:2f:5b:13:
32:1a:42:da:c1:84:fc:ac:b6:cd:d3:65:4d:95:25:
66:7d:5c:d4:66:58:a5:6c:6f:e4:71:d6:13:20:aa:
e7:86:17:82:73:46:b6:7e:ec:3e:2d:94:98:75:40:
1d:65:5d:fa:33:f6:19:c4:38:f9:dc:fa:f7:a6:cf:
01:78:47:04:84:e8:eb:fd:2e:66:ca:65:d9:e1:65:
34:12:d2:b2:85:68:ce:4a:da:fd:46:94:83:ce:41:
25:0a:38:2f:d9:3a:86:08:37:41:96:ca:3c:6e:7d:
29:b2:d1:62:84:9a:18:cb:fa:98:bc:ac:bd:ed:28:
12:45:74:8e:ce:c0:60:a1:8f:56:83:b8:25:24:2b:
03:dd:7b:11:d4:1a:1c:92:90:9e:1c:18:ef:28:ae:
84:04:f2:0b:4c:32:0f:f1:e9:15:a0:74:78:aa:db:
13:cb:e2:cb:fb:d1:c6:6d:33:a1:7d:ce:45:ce:89:
0b:48:30:71:d2:a6:66:e2:32:88:07:dd:f1:a5:2e:
5b:9e:1c:7a:d5:b8:7e:b2:52:ef:78:db:b3:6e:4e:
b2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:E9:29:44:1D:B8:79:A6:3B:D0:C4:F4:F6:BF:85:1A:DC:89:A4
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6xHpKUQduHmmO9DE9Pa_hRrciaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:eee5:daf1/128
Signature Algorithm: sha256WithRSAEncryption
2d:f4:bd:73:00:d9:07:37:9f:af:81:37:9b:c5:b7:0a:d0:d3:
be:a2:de:4b:38:a7:0f:9b:58:c5:a0:5a:b3:87:d7:68:ab:3b:
52:2c:a0:b5:5b:b8:5c:6b:db:06:ea:06:d1:5e:16:a3:e7:1d:
c1:99:7f:81:9a:d0:51:81:7f:aa:b8:85:47:fb:78:e8:66:74:
f1:39:6c:db:ad:5e:ac:b9:d1:92:30:96:43:9a:51:5a:67:cd:
a7:3d:8f:21:7e:0f:a7:b2:87:50:be:61:97:96:93:73:6e:87:
31:6d:d4:51:22:a1:a0:0a:21:c1:c0:b8:1d:ae:3b:05:2d:74:
90:a3:b1:17:fa:bc:f3:8e:e3:ee:38:51:15:59:7f:47:27:b5:
69:20:9e:f1:ed:19:3f:6a:10:c7:0a:a5:55:4b:f5:6e:e9:13:
d4:8c:7e:58:e5:57:f4:b4:cc:e4:db:51:81:a5:59:b0:38:1b:
e5:c8:41:a2:00:86:8c:63:82:ce:66:62:b2:c9:39:1a:e0:b2:
ae:96:2d:6a:d8:69:26:32:75:9a:87:b3:bf:c0:4a:32:76:89:
fb:f4:4d:82:34:e3:96:3f:2b:d5:96:a7:64:64:86:31:22:3b:
63:0c:6c:15:92:7a:40:5d:9d:64:73:c9:a2:22:45:98:d6:51:
6e:b1:51:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:54:08 2025 by rpki-client