Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/72ggXR1fbrFnaD28aA5ZR1TMhWI.roa
File: 72ggXR1fbrFnaD28aA5ZR1TMhWI.roa (raw, json)
Hash identifier: 2687i6ds2H6iOohdsWTw7XvSMY5E3EbJ/R6oXPj/CIM=
Subject key identifier: EF:68:20:5D:1D:5F:6E:B1:67:68:3D:BC:68:0E:59:47:54:CC:85:62
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191BEA8DB6D1663EC218C13997B17FBEF7B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/72ggXR1fbrFnaD28aA5ZR1TMhWI.roa
Signing time: Wed 04 Sep 2024 20:10:22 +0000
ROA not before: Wed 04 Sep 2024 20:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:a8:db:6d:16:63:ec:21:8c:13:99:7b:17:fb:ef:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 4 20:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef68205d1d5f6eb167683dbc680e594754cc8562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:97:a5:4d:be:ef:7e:4d:5b:86:81:77:c3:
00:1a:46:df:fd:8e:da:11:ca:ea:a4:0b:0b:7b:61:
53:c1:49:07:7a:1c:9d:45:76:52:d3:cd:32:fc:3d:
3a:f8:7e:17:21:90:28:9c:1e:ba:cb:39:9a:6c:52:
01:43:ba:b7:1c:d4:60:60:f9:47:65:1a:3a:eb:c5:
50:15:86:fa:e0:d1:91:8b:a3:f0:f0:2c:96:21:18:
0f:1a:cf:4b:d6:4e:0b:bb:20:ad:7f:7d:22:60:85:
61:ef:4a:9d:a8:3f:41:26:da:29:cb:fa:14:69:4a:
e5:32:68:ae:38:8c:98:41:cd:9b:5c:38:7b:7b:53:
63:d5:9c:9f:7d:ef:37:92:6a:ed:34:9f:bb:28:e3:
57:57:d2:60:34:d7:79:9e:02:b3:37:d5:4c:90:6f:
8c:d4:bb:9f:6e:15:ae:b1:1b:54:f6:f8:20:fa:d9:
95:ef:a3:ca:73:74:bb:47:94:24:9c:d1:31:fc:26:
09:72:5a:79:5a:88:1b:cb:dd:6a:51:08:64:32:c3:
66:e3:16:94:04:4d:bd:0d:a2:85:8c:fe:ba:77:bd:
07:65:8b:dc:69:b6:78:e3:95:28:8d:52:01:19:bc:
b5:f7:65:05:73:fe:34:9f:8f:04:18:ab:a9:ef:58:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:20:5D:1D:5F:6E:B1:67:68:3D:BC:68:0E:59:47:54:CC:85:62
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/72ggXR1fbrFnaD28aA5ZR1TMhWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4b:0b:6b:54:5d:b2:aa:04:b2:7f:76:89:77:66:18:b9:67:21:
9a:61:e4:67:42:44:d2:a5:a3:7b:0c:00:43:e1:7e:67:02:06:
1e:fc:0d:b9:d1:b1:49:a8:5f:ed:ba:0c:cd:01:6f:d7:b0:67:
45:b4:eb:ed:b6:ff:92:33:0e:20:90:f3:91:1c:0b:37:03:99:
f8:2b:4d:47:da:dc:1a:c1:17:33:a4:5b:80:c5:47:af:31:69:
48:80:29:22:82:d4:fc:4c:66:35:44:95:1b:2c:3d:d3:c4:35:
21:14:50:7c:9d:dc:eb:8d:ad:cc:e8:4f:e5:9c:c6:de:11:af:
f5:59:77:39:b2:a1:bb:8d:d2:f8:d8:a5:9e:d0:d7:e9:43:44:
b5:58:8e:07:03:3c:36:de:66:3b:3a:4f:f2:d3:89:34:b2:96:
b2:f4:99:9b:ca:f0:93:3e:73:6c:17:c0:6e:2e:09:62:c4:99:
ef:b2:cd:a9:8c:af:76:33:8d:9e:ae:3a:f3:7f:ef:42:a4:b1:
81:2a:10:4a:46:48:8e:42:60:25:d5:cf:b3:70:f2:b4:93:78:
58:58:3e:4c:ed:29:0d:dc:83:9d:ab:08:76:d2:5e:d8:b5:26:
cf:b9:e1:bc:8c:9b:70:ee:49:a7:38:de:8c:a9:ea:b1:aa:93:
8f:e5:95:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:07:18 2025 by rpki-client