Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7cp79eKf53UktZxlKts-P0xA9Fc.roa
File: 7cp79eKf53UktZxlKts-P0xA9Fc.roa (raw, json)
Hash identifier: B7wxr/ud1nw/C19aw0sCmiev09ehBDY6dq423hDyDKY=
Subject key identifier: ED:CA:7B:F5:E2:9F:E7:75:24:B5:9C:65:2A:DB:3E:3F:4C:40:F4:57
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B612ABD49A08B9C4D28AAFDDB2AFCA77
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7cp79eKf53UktZxlKts-P0xA9Fc.roa
Signing time: Tue 03 Sep 2024 04:09:22 +0000
ROA not before: Tue 03 Sep 2024 04:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:12:ab:d4:9a:08:b9:c4:d2:8a:af:dd:b2:af:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 04:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edca7bf5e29fe77524b59c652adb3e3f4c40f457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:ce:cb:49:2b:a4:3b:34:b1:6f:6d:ab:5a:
39:57:f9:0b:4e:92:83:08:0f:bc:63:61:59:a4:6b:
87:8e:71:fc:f3:c3:79:f6:8f:9d:f0:92:69:84:9c:
f9:62:b4:99:0e:a4:a9:8a:7c:4b:95:f7:bf:64:f5:
79:2f:3c:30:02:8c:0c:85:1a:4e:51:70:5b:84:39:
06:24:b9:dd:8c:28:e4:5d:67:26:f1:14:b4:b6:97:
a5:26:b6:1d:2d:51:2c:58:e4:74:bd:53:6c:fc:41:
40:7a:b1:9f:dc:c0:09:53:3d:ba:56:53:5c:79:14:
89:1d:9f:fe:aa:65:98:fe:47:fd:a1:28:22:a0:43:
4b:2a:34:4a:70:f2:e2:25:d7:3f:11:67:ae:46:3f:
9a:76:14:5a:ee:a3:a9:ae:b0:f7:36:a6:31:bd:87:
34:16:8f:81:04:34:97:7a:5b:fe:98:66:d8:98:bf:
ad:66:33:f8:90:f7:07:ba:d9:2f:5a:c0:67:2a:ec:
0d:b4:53:f5:2e:8e:b2:ab:71:41:85:1e:3b:f8:0d:
25:ab:85:a2:13:c2:a8:3e:50:c7:5a:c7:1e:e4:51:
05:bd:04:46:f2:85:0e:8b:84:05:e1:1e:4d:4e:33:
1b:2c:5e:39:d7:0f:8f:55:d7:ce:9d:4b:b1:2a:ed:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:7B:F5:E2:9F:E7:75:24:B5:9C:65:2A:DB:3E:3F:4C:40:F4:57
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7cp79eKf53UktZxlKts-P0xA9Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
39:08:20:8c:dc:e2:0f:91:67:48:a0:95:3c:89:bb:5d:7d:64:
e3:0f:6a:95:d8:9d:a4:a0:cd:73:15:e1:9b:24:ed:2b:c8:47:
cf:52:e0:98:bc:65:38:c8:40:54:90:f9:5d:2c:9b:b7:4f:1f:
1f:2c:06:a3:28:9f:9a:d5:cf:29:70:76:c5:06:51:df:1a:38:
ca:e1:06:e9:12:48:df:ea:e1:dd:d6:aa:3e:8d:0b:2c:84:ae:
ab:c6:3e:fc:c3:cc:86:1d:a3:41:4a:10:56:13:23:7c:44:2d:
6a:91:8a:c0:7a:a5:c4:24:f0:62:06:06:8e:d1:54:cf:ca:24:
7e:c7:16:bb:7f:ce:d3:ec:99:be:fa:0d:ea:f9:9b:f2:e9:30:
b0:ef:7e:2e:44:a3:b9:ab:9d:fa:66:fe:5c:9f:da:d7:96:47:
66:03:64:49:b2:9e:64:18:da:e2:47:1d:1c:33:70:df:88:bd:
04:92:4f:3e:34:54:a2:e4:17:8f:5c:c4:58:f0:98:5e:58:89:
9d:f6:86:9a:f1:47:16:cd:ae:ae:ec:a1:6e:ba:bd:14:51:6d:
e6:09:2b:59:e7:92:d8:99:01:a2:09:73:70:27:b7:8d:c3:10:
3e:e1:0f:c5:6c:89:93:69:8a:d7:66:f2:1c:a0:cb:db:8b:f8:
f7:1d:95:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:58 2025 by rpki-client