Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xUdT80S4OZq-4_XaW3JPuH4hAs.roa
File: 8xUdT80S4OZq-4_XaW3JPuH4hAs.roa (raw, json)
Hash identifier: yVHtKtutHsLxNDaV7vK3rll1xMFU8liu1lR0hcRiWFY=
Subject key identifier: F3:15:1D:4F:CD:12:E0:E6:6A:FB:8F:D7:69:6D:C9:3E:E1:F8:84:0B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193AF99F3A909A31EF1A89D3B374A7007ED
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xUdT80S4OZq-4_XaW3JPuH4hAs.roa
Signing time: Tue 10 Dec 2024 08:05:22 +0000
ROA not before: Tue 10 Dec 2024 08:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:af99:2dae/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:99:f3:a9:09:a3:1e:f1:a8:9d:3b:37:4a:70:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 10 08:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3151d4fcd12e0e66afb8fd7696dc93ee1f8840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:58:d5:bf:c8:c2:17:c3:f9:8c:6d:08:e9:
f4:0d:59:97:61:8a:9d:d1:28:24:39:0d:b3:9f:52:
98:c2:76:01:b2:40:ce:42:ad:74:17:77:31:67:f8:
9f:d9:d0:69:06:51:49:40:91:c9:ae:84:9e:a6:34:
b9:02:9e:bf:0e:28:39:2f:72:93:cb:a3:3f:be:45:
97:36:e0:33:66:81:4a:52:55:17:42:16:bf:89:d4:
9a:a2:20:4d:ba:2f:7d:69:2d:07:9d:c5:2e:15:f5:
22:01:a7:35:98:1c:6f:63:9d:ac:70:37:92:95:00:
37:7e:21:f7:ba:24:d1:6b:34:fd:08:cd:87:c3:6d:
5b:25:ae:d9:db:ad:84:4f:5b:86:97:f9:3f:b6:91:
b4:ba:8e:73:82:97:5d:9d:24:cd:3d:c6:f1:e5:4b:
06:81:ab:40:fc:2b:ce:36:08:5e:c7:60:59:71:4e:
68:15:fe:40:d8:90:47:28:fd:8e:58:32:d4:ea:eb:
8d:a2:d2:e9:e4:b8:af:85:28:51:39:46:0f:9c:39:
f2:86:68:9e:9d:a4:ae:76:fa:21:37:13:06:44:ea:
81:e0:af:bb:a2:6e:c8:aa:03:44:bf:47:85:a1:3a:
ef:21:a3:c7:30:32:04:e7:28:43:e3:c4:23:3b:c0:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:15:1D:4F:CD:12:E0:E6:6A:FB:8F:D7:69:6D:C9:3E:E1:F8:84:0B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xUdT80S4OZq-4_XaW3JPuH4hAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:af99:2dae/128
Signature Algorithm: sha256WithRSAEncryption
75:90:77:59:51:52:dd:6b:d3:52:a0:f0:eb:05:ff:ee:3b:3e:
a8:3d:ca:3a:98:95:4d:b0:8d:17:b6:42:ed:35:c5:a4:ce:1a:
46:2c:cf:c9:83:08:9d:9c:a5:e1:c4:91:d3:ea:c8:7b:ab:d3:
e0:cc:4f:ad:75:27:0a:a2:fc:fb:27:03:a2:f5:f7:3d:5c:e8:
6d:0b:29:c5:03:e2:c8:18:2b:74:18:9e:be:7f:fe:06:50:54:
1b:6c:3a:21:d3:2c:80:2b:79:73:95:66:2e:3f:96:d8:1c:7f:
eb:3f:ff:12:83:5d:4a:8d:26:23:44:fd:65:e0:48:5b:9e:6d:
1e:0e:ff:fd:8a:da:de:d6:3a:b7:28:ad:eb:3c:32:a8:57:ef:
6d:1c:94:f7:d9:e5:c8:1b:3f:96:19:98:50:d9:dc:60:0f:e1:
bc:b2:85:fb:8f:15:7d:43:ed:f8:d9:2c:09:4a:a6:86:02:51:
f3:66:17:97:31:55:c3:07:92:68:36:8e:de:47:51:ac:e1:7c:
a1:07:c6:0f:ed:92:1f:1a:5a:59:a0:41:cc:60:66:9a:07:92:
0b:ef:ae:5d:a0:65:c2:27:2f:4d:ee:b5:ae:44:61:3b:98:1b:
e1:9e:00:d3:db:96:bc:10:26:d2:9d:cc:27:33:81:74:1f:82:
a5:3a:c5:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:45 2025 by rpki-client