Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LlB-Co1X8YGtlIFTUw8m6YTFdg.roa
File: 8LlB-Co1X8YGtlIFTUw8m6YTFdg.roa (raw, json)
Hash identifier: RxLkNI3SGuiDaLSkDuswOH5ZDjqpID+oi3zkeEPyEeI=
Subject key identifier: F0:B9:41:F8:2A:35:5F:C6:06:B6:52:05:4D:4C:3C:9B:A6:13:15:D8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192A7ABF3BC3C7428D394B9DE0AC518A045
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LlB-Co1X8YGtlIFTUw8m6YTFdg.roa
Signing time: Sun 20 Oct 2024 02:05:17 +0000
ROA not before: Sun 20 Oct 2024 02:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:a7ab:20de/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a7:ab:f3:bc:3c:74:28:d3:94:b9:de:0a:c5:18:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 20 02:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0b941f82a355fc606b652054d4c3c9ba61315d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:74:75:2b:e5:45:15:e7:23:8e:eb:37:c3:
6c:3f:50:14:3c:ce:d8:44:2b:c0:22:c1:4f:6b:8e:
73:09:1e:a4:22:ee:97:40:a8:ee:c8:06:bb:78:dc:
a1:ca:a4:e4:98:e8:f0:b5:d7:7b:b6:56:ad:68:e2:
52:65:89:a1:8f:ce:ce:4c:05:de:14:1f:bf:95:4c:
87:ff:df:34:78:cb:d3:16:ba:93:97:16:94:d8:f9:
5b:7e:65:76:48:e3:96:18:93:f9:5c:26:ab:5b:d4:
30:77:bf:24:e3:f9:25:ed:76:ca:7f:ca:6c:f1:52:
07:64:78:87:49:09:bf:78:ba:0f:61:e5:28:fc:94:
32:39:b3:7d:88:48:54:ce:76:cd:79:3d:1f:36:44:
67:6a:ae:df:c0:4a:ea:f3:f4:88:b8:59:0e:ea:93:
e5:4e:63:0c:0f:75:e2:79:8a:41:1c:09:85:75:05:
6b:81:df:60:83:8f:56:47:84:0c:94:4d:ba:3d:2c:
c1:94:f6:19:64:35:62:f0:a1:25:53:7d:e3:6a:a5:
f9:aa:0d:b2:59:c9:b3:5e:29:68:de:76:15:7e:ef:
9c:2e:76:06:32:27:ee:1c:64:f1:39:e2:1f:34:c6:
33:15:c4:4d:12:5e:6e:cf:8d:17:99:22:15:07:f0:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B9:41:F8:2A:35:5F:C6:06:B6:52:05:4D:4C:3C:9B:A6:13:15:D8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8LlB-Co1X8YGtlIFTUw8m6YTFdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:a7ab:20de/128
Signature Algorithm: sha256WithRSAEncryption
5e:b8:a1:c3:dd:e4:cf:03:c3:63:e3:01:e2:e2:18:39:53:cc:
d8:18:80:65:9e:66:1e:93:59:58:96:6e:da:74:57:a1:dd:6c:
69:4f:f0:5e:57:7f:c2:10:38:df:4f:38:3c:64:5f:c7:42:48:
20:67:7c:df:8c:76:81:ad:00:1a:50:d8:02:83:63:93:13:84:
ea:37:e8:c2:84:dc:17:70:21:15:96:00:58:2b:46:f0:19:dd:
82:a1:1a:2a:d8:97:cf:e6:e9:3a:45:63:44:46:4d:0f:78:a7:
65:2b:a5:fc:d6:a5:bb:45:09:09:c1:57:fa:07:d4:c5:fd:2b:
fc:d8:4b:7e:d6:84:01:7e:3d:61:6e:6a:66:44:d4:03:ca:8d:
86:b4:a8:a3:da:cc:8e:64:e1:1e:ab:c4:84:1e:7a:5e:64:0b:
11:5d:b8:66:3f:a0:b8:27:ff:0c:7f:68:af:0a:12:22:4e:bc:
62:85:85:5d:1a:3a:f6:67:4a:f9:86:e3:26:10:b2:9a:db:1c:
3d:31:15:ba:72:a0:a9:06:04:80:e3:f3:3a:c3:26:40:aa:b7:
4f:e1:74:2a:05:d6:b7:7f:77:ce:40:af:d1:9c:29:42:29:70:
4c:c9:28:30:4e:6f:68:6d:a5:d5:41:4d:6f:3d:2a:32:fa:56:
d7:00:bb:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:28:57 2025 by rpki-client