Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yXJ4v82B0QxhSzGvwYQWRV0Dfw.roa
File: 6yXJ4v82B0QxhSzGvwYQWRV0Dfw.roa (raw, json)
Hash identifier: 3MQPE/qKAW0yzPw/LlVr27V+4YiHMCEF79YlRa5O+Go=
Subject key identifier: EB:25:C9:E2:FF:36:07:44:31:85:2C:C6:BF:06:10:59:15:74:0D:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193A026459F49A9F864572FCB004818AC2E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yXJ4v82B0QxhSzGvwYQWRV0Dfw.roa
Signing time: Sat 07 Dec 2024 08:04:42 +0000
ROA not before: Sat 07 Dec 2024 08:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:a025:dc41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a0:26:45:9f:49:a9:f8:64:57:2f:cb:00:48:18:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 7 08:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb25c9e2ff36074431852cc6bf06105915740dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:ea:87:11:2b:a7:10:9b:8f:36:f6:dc:13:
1c:a2:48:05:99:d8:c9:73:08:81:2f:6c:4e:bf:7e:
dd:1a:a9:6e:02:a8:36:db:57:26:f8:49:c7:82:6c:
17:09:9f:94:f9:20:67:a8:6f:99:c1:f3:a9:0e:b9:
06:7a:72:56:46:c7:de:be:5e:72:a4:c7:cc:f6:04:
24:a8:6f:e8:a6:00:3e:3f:8b:5f:f5:40:90:7e:7f:
ac:f9:20:49:94:e4:b6:08:aa:cf:82:46:c1:2a:50:
02:33:11:50:e4:a0:af:34:df:21:39:d3:bb:2f:5e:
c2:77:62:58:ca:91:53:4f:2a:ab:b6:48:dd:13:61:
05:6c:5b:e2:6a:9f:7a:7d:d7:14:e9:31:e1:c8:93:
fe:2d:9b:41:0f:39:6d:87:ab:95:b5:3a:0a:fc:b6:
bc:1b:60:7d:c3:3b:80:b1:cb:fb:7a:8a:31:39:5c:
91:93:23:78:6c:49:ca:59:68:07:59:b3:9e:a6:5f:
74:0e:ff:6e:1a:89:73:b4:ba:a0:f5:28:f5:0d:a7:
c9:ef:7f:26:2c:1e:d4:a8:c4:38:82:8e:fd:a3:87:
cc:bd:4f:5c:02:92:2c:61:8d:67:d0:db:3d:8a:c7:
cb:f4:cf:b0:74:d0:ba:aa:da:64:f5:61:9b:92:95:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:C9:E2:FF:36:07:44:31:85:2C:C6:BF:06:10:59:15:74:0D:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6yXJ4v82B0QxhSzGvwYQWRV0Dfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:a025:dc41/128
Signature Algorithm: sha256WithRSAEncryption
19:a3:57:f2:96:c8:24:20:b0:21:f0:6a:56:8f:1c:ed:93:bc:
06:b5:3b:7e:77:ef:67:33:a5:1e:22:a4:2e:85:6a:1e:1d:cd:
f3:32:13:ed:b3:c3:8e:3a:7a:ae:82:e6:3d:7d:13:4d:d8:b7:
de:05:38:99:36:18:86:18:fb:ec:27:a8:13:a2:ee:6c:53:6e:
75:b6:5c:6f:49:fe:61:7c:d1:52:0a:f5:17:8a:b1:7b:aa:58:
05:21:27:b2:b2:97:4f:eb:db:86:4c:bf:77:d6:7d:46:0a:f2:
e1:a3:26:55:e9:b0:d5:83:4e:b6:86:c3:12:af:4b:15:8a:3a:
bb:17:f1:da:77:11:a4:85:6d:d4:6b:e0:84:d1:db:eb:df:37:
77:69:59:bd:17:31:b5:80:98:a3:c8:5e:db:bc:8d:c1:07:da:
59:70:a2:18:1d:7e:85:31:53:44:5a:de:fd:fe:e8:51:81:68:
99:f3:0e:28:ef:6e:8b:d1:16:0b:21:3b:22:f1:3c:58:40:0a:
d4:67:53:52:8b:af:97:b8:97:ac:35:2e:49:29:8a:c7:d5:b2:
6a:b6:cd:8c:af:a0:8e:f5:23:4b:62:91:58:d1:2a:0f:ce:ac:
8a:d4:7c:56:d2:41:6d:32:41:82:14:bb:d8:11:e6:50:0d:39:
cf:ed:3c:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:59:29 2025 by rpki-client