Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7vNuNYXRUqfHp0CINEIjSzBuDmE.roa
File: 7vNuNYXRUqfHp0CINEIjSzBuDmE.roa (raw, json)
Hash identifier: TL40TjYjmgH3aregwvwunv67WT8dW2i8piZ75NCD4NA=
Subject key identifier: EE:F3:6E:35:85:D1:52:A7:C7:A7:40:88:34:42:23:4B:30:6E:0E:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191D00C36C50736983086627F64A678D1E6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7vNuNYXRUqfHp0CINEIjSzBuDmE.roa
Signing time: Sun 08 Sep 2024 05:12:26 +0000
ROA not before: Sun 08 Sep 2024 05:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:0c:36:c5:07:36:98:30:86:62:7f:64:a6:78:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 8 05:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eef36e3585d152a7c7a740883442234b306e0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:46:48:67:8a:69:e0:bf:dc:7c:70:4a:d5:
e2:10:9d:0c:69:16:a6:a0:52:09:a9:4d:87:ad:89:
62:6f:44:9d:52:df:24:b4:b4:eb:a7:b3:c6:b0:4f:
af:70:04:32:c3:a7:b8:ef:21:a9:e1:d0:bd:5a:b9:
50:05:f9:d4:ad:50:2f:bd:c3:31:0c:9c:c6:b8:91:
21:2a:48:9f:7b:d9:bd:4f:81:c6:f2:63:c1:8a:21:
31:9a:34:a0:cf:43:48:37:9f:0d:ed:de:57:73:e3:
68:a5:4c:b1:36:10:a0:96:3f:24:0f:ca:eb:37:05:
bf:ac:2f:d0:44:6d:0d:34:86:54:14:0b:ad:35:b9:
e7:05:89:cb:00:15:0e:49:3f:0f:ed:22:31:6c:bc:
e5:d6:cc:ac:bb:f0:9d:54:05:c8:94:4e:60:f3:20:
b6:85:c3:7e:e2:91:37:65:87:fc:47:ba:2f:45:8c:
ee:96:fa:1e:50:84:eb:47:94:2d:7d:41:42:da:24:
ae:5f:ea:85:2d:3c:6f:2b:5f:fc:82:53:80:5c:91:
e0:05:85:3d:e0:be:db:c1:de:87:c3:3c:b1:96:86:
b2:e0:0b:c8:3d:25:5c:4b:fb:61:23:1d:3d:2a:1f:
3e:c1:98:e3:1f:6e:3e:1a:6a:dc:b7:2a:7c:58:38:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:6E:35:85:D1:52:A7:C7:A7:40:88:34:42:23:4B:30:6E:0E:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7vNuNYXRUqfHp0CINEIjSzBuDmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
74:9c:5d:f1:ed:58:46:1a:c2:21:c2:8e:af:7c:29:d0:16:51:
2e:c7:9e:51:05:d4:66:b6:15:eb:e5:19:9b:4b:a0:d7:ae:02:
70:0f:9c:9d:f0:28:34:e9:63:36:be:a9:d5:c5:8a:23:e8:28:
09:66:cc:1f:32:45:69:99:c7:f4:ad:fa:86:99:3f:7b:06:08:
37:4e:38:a3:d7:8e:db:41:60:c5:5a:bd:f9:3a:2c:63:e7:ff:
59:22:73:9c:3d:30:0a:25:5d:0d:d9:34:e9:a4:99:27:cb:6f:
20:c2:7b:69:b7:00:21:da:33:47:7c:82:60:ad:cd:70:78:bd:
7a:ae:8b:be:f5:28:b0:57:b8:5f:56:17:29:9f:c6:61:a7:00:
f9:8a:18:4e:e3:52:87:6a:b3:b1:b5:01:14:9a:3f:d4:d6:dc:
66:38:e6:28:0a:88:9d:ec:85:a6:5e:3d:70:a4:4f:bd:12:53:
28:f7:6a:d8:26:d2:93:d0:e0:88:60:85:21:8d:59:dd:63:58:
b5:01:c4:81:ba:54:07:ee:1a:c1:0f:ab:97:b1:21:b1:de:53:
2f:8e:60:9e:70:60:c8:bc:4e:14:d2:16:ed:87:27:66:7e:ce:
16:dc:b2:a9:ef:2b:3d:8f:88:be:10:6c:23:e5:cd:22:29:32:
0f:0f:08:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:05:35 2025 by rpki-client