Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7GYsEcO2SudVvZTItZtOEKcI0-c.roa
File: 7GYsEcO2SudVvZTItZtOEKcI0-c.roa (raw, json)
Hash identifier: Hd421mSaR3Sa3wEjX+y9GBZDyqOGhU2vr/6WEjKjeG4=
Subject key identifier: EC:66:2C:11:C3:B6:4A:E7:55:BD:94:C8:B5:9B:4E:10:A7:08:D3:E7
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191E990AAF47360E964AB712553B8E286DC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7GYsEcO2SudVvZTItZtOEKcI0-c.roa
Signing time: Fri 13 Sep 2024 04:07:37 +0000
ROA not before: Fri 13 Sep 2024 04:07:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:e98d:cd3c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e9:90:aa:f4:73:60:e9:64:ab:71:25:53:b8:e2:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 13 04:07:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec662c11c3b64ae755bd94c8b59b4e10a708d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:a3:ed:70:41:62:12:4d:59:0d:a3:5c:f5:
68:5e:d2:c3:b1:46:c5:40:6b:f5:6d:0e:fa:16:fb:
35:df:05:1a:24:b5:22:5c:94:08:89:3a:db:ce:07:
f3:99:77:b4:f3:fb:e0:d9:91:cb:a0:db:f8:a1:72:
73:3f:c1:8a:0b:53:49:f4:db:b7:c3:2b:43:f6:34:
c3:19:0b:41:0d:7b:9f:38:9a:bd:31:1b:e4:b5:05:
0b:75:30:c2:26:78:08:22:f4:85:8a:11:9f:c2:ac:
7c:bf:86:f0:7a:f4:9e:70:23:23:ae:0d:aa:f0:90:
36:02:06:32:1b:02:30:3b:e0:04:74:94:fb:47:61:
f8:97:bc:a3:88:2b:08:81:b4:fb:8f:71:78:19:09:
76:87:c3:58:3e:9d:34:c8:e5:f2:5a:d6:f5:13:aa:
99:4b:c6:27:34:ea:2c:42:2d:5f:f0:d9:4b:20:c7:
ad:86:e9:d4:6f:d9:23:86:39:05:6e:4c:e2:dd:fa:
d5:9e:ab:68:b7:3b:26:95:49:0e:ad:52:61:77:da:
88:0c:a4:8b:e9:8e:42:3b:83:e8:9d:39:33:ba:ce:
88:d4:5a:38:48:d3:b6:5f:d0:ed:4d:cf:ff:ad:e8:
d2:28:08:39:18:25:aa:0c:5e:a5:a0:9f:38:0b:b0:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:2C:11:C3:B6:4A:E7:55:BD:94:C8:B5:9B:4E:10:A7:08:D3:E7
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7GYsEcO2SudVvZTItZtOEKcI0-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:e98d:cd3c/128
Signature Algorithm: sha256WithRSAEncryption
2d:ff:5c:aa:db:e2:40:44:3e:52:ac:20:36:47:1a:19:ac:20:
42:26:7e:9e:b1:19:ad:c1:c8:ee:ca:b6:09:cc:8a:71:b2:c6:
12:5b:f2:fe:55:d0:f1:d6:9f:0f:5a:ea:8b:c6:42:12:7c:38:
0c:36:0c:d7:64:5f:51:2c:4b:35:87:11:0f:d9:e5:a7:42:45:
bf:99:66:68:fe:a5:bb:e0:8f:f2:fa:48:2c:67:6c:87:55:91:
a1:4b:52:a8:44:44:ad:c1:35:f4:60:a1:be:8e:6b:84:a0:63:
1d:de:1f:ec:8b:a9:b9:b2:1d:1b:39:85:b8:ae:2a:37:7b:25:
1f:ac:2d:8c:4d:ff:90:d4:49:c2:19:c0:39:01:8e:17:98:d8:
cd:ca:c8:ca:aa:3c:62:9a:28:26:6d:fd:6f:51:6b:97:e8:a0:
ba:2e:45:77:78:67:56:34:76:4c:5b:8e:65:86:fa:4b:b4:81:
75:78:6d:c7:0e:32:73:d2:63:3b:8f:83:97:ab:43:66:03:08:
99:2d:f0:1f:3f:0e:fb:50:94:d9:7c:47:02:0e:9b:b9:91:53:
59:bf:b6:30:dd:2b:71:53:c1:8c:46:92:59:d8:5a:0e:be:81:
d6:d3:d2:b1:25:4f:d7:70:c9:24:55:7f:73:e4:aa:77:49:d7:
3c:0b:00:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:42:23 2025 by rpki-client