Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xrgvw5zS6pkF19_75tN-qP-LsM.roa
File: 8xrgvw5zS6pkF19_75tN-qP-LsM.roa (raw, json)
Hash identifier: Ng1mjy2qgPlscd30sMKGk16UzNkJMd2FG+ENFHuvPnw=
Subject key identifier: F3:1A:E0:BF:0E:73:4B:AA:64:17:5F:7F:EF:9B:4D:FA:A3:FE:2E:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191840FEFDF46F4C10C42B229FA1466ED6D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xrgvw5zS6pkF19_75tN-qP-LsM.roa
Signing time: Sat 24 Aug 2024 11:05:22 +0000
ROA not before: Sat 24 Aug 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:840f:1fd8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:0f:ef:df:46:f4:c1:0c:42:b2:29:fa:14:66:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 24 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f31ae0bf0e734baa64175f7fef9b4dfaa3fe2ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:0c:f9:6d:b3:15:3f:e3:78:cc:58:9a:e1:
1a:0c:05:a4:c4:26:83:e9:4f:7a:a1:af:69:02:36:
f9:73:7d:66:5c:39:5f:3c:62:4a:c1:57:20:ea:7e:
ac:f5:2c:84:90:3b:4a:a9:f4:2f:44:88:d9:6e:54:
e3:bd:45:20:83:82:4e:58:f3:6d:78:8b:f9:f7:ec:
f2:28:b6:66:e5:b1:8f:e1:c6:e3:7b:33:12:21:a5:
25:cc:23:3a:ba:95:ee:ca:aa:9e:5f:3d:00:19:bf:
2e:bd:9e:05:07:5d:f3:8c:c6:a3:14:96:6a:da:43:
c8:9c:7e:18:cd:54:25:0f:38:45:9d:65:46:e0:79:
17:a8:6d:25:48:94:72:16:05:07:b7:d7:0c:db:20:
ee:99:eb:ae:cc:41:8b:6d:f5:a3:3d:65:6c:81:28:
dc:3b:f2:59:bb:6d:f3:ef:0e:3b:3d:f1:99:6b:d4:
1e:f0:e6:6a:3d:85:e8:79:07:8c:c5:a3:38:76:a1:
a8:75:b8:b3:3b:e1:37:34:4e:17:bd:02:f4:9a:55:
0c:9f:98:ac:e7:1f:f0:4b:41:67:ef:e2:7e:c0:f3:
15:63:9c:f9:c4:86:30:44:99:86:08:06:87:fc:fd:
0b:cd:df:cb:4b:4e:e4:3f:83:a4:f6:f3:5d:9f:57:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1A:E0:BF:0E:73:4B:AA:64:17:5F:7F:EF:9B:4D:FA:A3:FE:2E:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/8xrgvw5zS6pkF19_75tN-qP-LsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:840f:1fd8/128
Signature Algorithm: sha256WithRSAEncryption
7a:d5:50:a5:6a:df:a2:4e:c3:cb:35:ab:7f:91:a7:1b:a0:ac:
1e:e8:68:f0:94:02:b7:8a:fd:57:8f:9d:26:a2:7a:f7:14:ad:
76:5d:07:6f:25:b2:f6:7a:09:4f:5d:cb:68:18:30:d1:85:85:
7c:53:4d:b3:a7:4f:ca:15:4c:86:c8:22:ea:93:d7:9d:45:2c:
25:92:d7:29:38:5b:ce:a8:d2:e2:ae:28:b4:62:cb:a6:3a:aa:
da:61:9c:68:4c:4e:23:ab:d4:c1:bb:e7:1d:92:3d:12:ac:a7:
ca:75:f9:87:53:17:7b:5a:e7:5d:e7:43:65:8e:1f:ec:74:e8:
4e:71:d9:a8:14:b0:c0:8b:f8:6b:e0:f3:02:3c:48:b9:de:bc:
c5:26:04:9e:be:b8:73:30:a3:5c:2f:58:7e:83:24:b2:83:56:
e4:b5:d4:01:fc:a8:e1:01:5b:d3:8d:e9:0a:31:6e:6e:13:f6:
00:b4:c8:eb:d6:79:e8:03:1f:b5:eb:99:ff:c3:e6:9e:38:94:
50:75:58:24:b3:8f:7e:07:59:2d:fb:b1:d1:3d:8b:cc:ea:22:
3e:4f:7f:99:07:f2:50:16:da:1e:e0:fd:c3:ef:87:e9:58:d3:
8a:e0:6a:23:c9:05:01:45:e2:29:b5:24:01:40:ed:04:44:89:
f4:b4:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:56 2025 by rpki-client