Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7gLWnGeg5TFi_tvRk9JImZkE23c.roa
File: 7gLWnGeg5TFi_tvRk9JImZkE23c.roa (raw, json)
Hash identifier: +Gy4qf+0EVmux0Vr8/ncBFhiuxEwHCHl3FSg4jD2Efw=
Subject key identifier: EE:02:D6:9C:67:A0:E5:31:62:FE:DB:D1:93:D2:48:99:99:04:DB:77
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B80401BF22DDC8822BDDC500CB7F6BB7
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7gLWnGeg5TFi_tvRk9JImZkE23c.roa
Signing time: Tue 03 Sep 2024 13:12:35 +0000
ROA not before: Tue 03 Sep 2024 13:12:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:04:01:bf:22:dd:c8:82:2b:dd:c5:00:cb:7f:6b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 13:12:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee02d69c67a0e53162fedbd193d248999904db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bf:b3:a1:e8:f9:aa:4f:08:5f:17:d6:10:a0:
c3:ba:1c:1f:1d:6c:3a:fb:8c:dc:14:1e:49:e0:d2:
7f:0e:c7:b5:2f:f3:45:3e:ed:07:37:68:cb:20:7b:
5a:a8:ff:e3:bf:30:eb:21:9c:1c:5d:f0:a0:6d:34:
fb:bd:2f:64:b8:b8:c2:85:b8:ac:05:33:cf:56:08:
78:3d:70:4e:87:96:05:b6:47:58:e9:79:1e:3c:9a:
06:e3:c6:03:3e:69:75:6f:df:31:ef:af:ed:62:e9:
7e:d5:d4:50:76:fd:c2:b5:69:86:94:be:60:f5:ed:
3c:14:6c:9a:37:37:2b:98:5b:b1:13:b0:28:3e:03:
c7:86:d2:a0:e0:5a:fd:38:19:97:3c:9f:dd:ff:13:
ee:8c:80:13:6e:4d:02:24:57:c9:5b:aa:a5:45:8b:
fc:b7:5c:a4:c6:11:12:5b:8e:bd:da:8a:cc:a9:45:
23:82:a0:47:a8:22:aa:c4:f1:ab:0b:e1:b5:fe:24:
be:01:36:79:54:57:4d:fc:09:07:ae:71:f3:be:d4:
65:a1:26:e5:22:ee:f9:a1:9e:23:d7:08:09:47:aa:
16:a8:b6:34:2d:a1:bb:29:85:17:be:85:7a:56:ce:
24:9b:44:30:79:d4:57:95:f8:0a:ca:79:e8:22:d9:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:D6:9C:67:A0:E5:31:62:FE:DB:D1:93:D2:48:99:99:04:DB:77
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7gLWnGeg5TFi_tvRk9JImZkE23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0f:da:06:17:5d:97:8f:73:21:cd:60:00:4e:92:fa:a9:b9:2b:
ec:e1:f0:9f:1f:a9:f8:36:48:f5:fb:dd:5d:0a:a4:88:2d:a4:
a1:94:33:a0:ea:c8:61:2d:d8:66:57:4e:dc:a8:58:33:53:10:
bd:69:e1:5b:e1:7f:7c:69:a2:b5:d7:2a:ed:33:68:1a:50:df:
88:8a:3c:5d:de:4f:c7:9f:8c:1d:1f:73:78:13:8f:ee:fe:a8:
98:3b:a0:70:a2:2e:5a:10:ae:31:98:69:10:63:05:f3:fa:bb:
ed:1f:61:4d:53:94:3e:be:eb:d4:48:e7:8a:a0:fc:09:42:eb:
c8:c1:4e:6e:01:a2:20:96:70:b8:6d:45:c3:31:bc:aa:d5:3f:
0b:62:38:1c:6e:51:de:36:f0:52:88:fb:57:96:f0:4c:4a:7f:
57:4f:62:0c:24:3b:b2:d8:05:6d:e4:b7:93:8a:6e:b4:8d:28:
ef:d1:3b:f6:99:f9:c3:0c:f7:d1:d6:c0:e4:b3:6f:87:dd:4b:
a1:64:64:dc:51:b9:0e:fe:a1:19:29:77:d7:f0:47:4e:a3:be:
a5:21:31:45:12:66:b9:38:54:d1:71:ec:d1:89:f8:32:5c:e7:
12:80:5d:71:9e:5f:aa:3a:f2:a4:11:21:1a:14:d5:06:a0:24:
a8:d5:98:49
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZG4BAG/It3IgivdxQDLf2u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTAzMTMxMjM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTAyZDY5YzY3YTBlNTMxNjJmZWRiZDE5M2QyNDg5OTk5MDRkYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7r+zoej5qk8IXxfWEKDDuhwfHWw6
+4zcFB5J4NJ/Dse1L/NFPu0HN2jLIHtaqP/jvzDrIZwcXfCgbTT7vS9kuLjChbis
BTPPVgh4PXBOh5YFtkdY6XkePJoG48YDPml1b98x76/tYul+1dRQdv3CtWmGlL5g
9e08FGyaNzcrmFuxE7AoPgPHhtKg4Fr9OBmXPJ/d/xPujIATbk0CJFfJW6qlRYv8
t1ykxhESW4692orMqUUjgqBHqCKqxPGrC+G1/iS+ATZ5VFdN/AkHrnHzvtRloSbl
Iu75oZ4j1wgJR6oWqLY0LaG7KYUXvoV6Vs4km0QwedRXlfgKynnoItnwUQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFO4C1pxnoOUxYv7b0ZPSSJmZBNt3MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvN2dMV25HZWc1VEZpX3R2Ums5SkltWmtFMjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAD9oGF12Xj3MhzWAATpL6qbkr
7OHwnx+p+DZI9fvdXQqkiC2koZQzoOrIYS3YZldO3KhYM1MQvWnhW+F/fGmitdcq
7TNoGlDfiIo8Xd5Px5+MHR9zeBOP7v6omDugcKIuWhCuMZhpEGMF8/q77R9hTVOU
Pr7r1EjniqD8CULryMFObgGiIJZwuG1FwzG8qtU/C2I4HG5R3jbwUoj7V5bwTEp/
V09iDCQ7stgFbeS3k4putI0o79E79pn5wwz30dbA5LNvh91LoWRk3FG5Dv6hGSl3
1/BHTqO+pSExRRJmuThU0XHs0Yn4MlznEoBdcZ5fqjrypBEhGhTVBqAkqNWYSQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:03:00 2025 by rpki-client