Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9WFggXxcoFDC0UkSGroztlxalCo.roa
File: 9WFggXxcoFDC0UkSGroztlxalCo.roa (raw, json)
Hash identifier: 43VfOOxi2aiYOYZsgazATikvv+3tkg+I5jzFfekBbYY=
Subject key identifier: F5:61:60:81:7C:5C:A0:50:C2:D1:49:12:1A:BA:33:B6:5C:5A:94:2A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194549C387AD04FF82D113EDCD75A257236
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9WFggXxcoFDC0UkSGroztlxalCo.roa
Signing time: Sat 11 Jan 2025 09:05:11 +0000
ROA not before: Sat 11 Jan 2025 09:05:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:549b:652d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:9c:38:7a:d0:4f:f8:2d:11:3e:dc:d7:5a:25:72:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 11 09:05:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f56160817c5ca050c2d149121aba33b65c5a942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:16:72:33:1c:f1:1f:15:a4:f8:a3:c6:fd:
e3:1e:99:db:38:ad:dd:aa:05:db:ee:42:c0:93:b6:
e9:3f:c1:4b:2f:fc:9c:38:ff:1d:6d:30:fe:56:06:
62:5a:6b:4d:4d:05:e6:eb:60:5c:c3:a6:7d:33:d2:
2e:01:b2:e2:fd:97:25:aa:75:51:59:7a:02:7b:43:
3a:6a:cb:49:33:d7:a4:05:5b:26:6e:63:f8:b1:9f:
46:f4:37:26:7e:c6:1c:c1:b6:89:21:b4:94:46:52:
da:a1:3e:b4:b0:12:07:84:5b:dd:d4:31:89:6a:41:
ad:d2:ae:a2:d7:2e:b4:93:23:c1:f2:e7:ad:88:57:
68:cf:af:91:fa:37:5d:04:fb:31:a6:fe:ef:85:59:
46:ca:c8:bc:11:2e:e7:0a:e1:6d:14:f4:c1:9b:ea:
54:73:78:a4:e9:47:18:e2:56:cf:11:58:f4:da:d5:
8a:56:4c:4f:60:f5:ff:31:3e:1b:d2:4f:24:52:b3:
95:68:da:b0:d3:ce:58:80:51:cb:ea:8b:71:0c:48:
44:9d:d9:11:4e:7d:d0:a2:9d:c1:b4:8e:34:c0:de:
0d:15:f3:4c:74:f5:50:c7:95:89:dd:9f:ff:d8:b9:
f1:6d:f0:e5:5e:03:36:ac:13:ae:5c:f8:5d:23:ca:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:60:81:7C:5C:A0:50:C2:D1:49:12:1A:BA:33:B6:5C:5A:94:2A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9WFggXxcoFDC0UkSGroztlxalCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:549b:652d/128
Signature Algorithm: sha256WithRSAEncryption
76:21:01:9a:e0:5b:c0:db:4e:58:9e:d3:ef:15:dc:3d:55:b6:
3d:a5:29:fa:52:4c:fb:61:fa:59:72:69:89:e4:ac:a7:59:b5:
e4:f9:b8:c8:7a:54:e9:88:0a:38:8f:a3:56:1b:c0:02:a0:6d:
dd:1c:92:fa:24:7d:df:0d:a9:56:da:07:44:08:99:41:b1:d6:
cb:36:db:75:db:90:fe:0b:95:de:40:85:e4:a5:99:79:17:e1:
9a:c0:66:8d:d3:e8:77:4c:23:24:d0:4c:7a:61:4d:83:25:80:
ee:5f:00:2b:57:86:38:82:14:9e:f0:ad:54:46:fb:c9:32:2b:
52:bd:13:6e:3a:1a:e3:e5:f7:ce:b4:e2:a0:38:35:74:29:c4:
b2:87:ad:fd:01:fe:b4:42:e1:ee:ae:8f:c8:ad:37:1d:3f:a0:
38:78:7d:08:5c:3b:8e:02:0c:94:bb:00:bb:0d:80:10:e8:2f:
34:30:1b:ff:37:a9:f7:c5:26:5a:11:2d:20:0f:85:fd:19:78:
0c:70:86:15:ca:58:08:d3:e2:7b:63:e4:e3:52:f3:55:ac:c5:
67:b5:dc:6d:35:49:f3:99:3d:06:dc:80:7a:ee:70:c9:86:79:
b9:9b:3a:4d:c8:40:ad:d4:87:ca:cf:2d:90:b3:05:2f:4f:8e:
ca:a9:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:45 2025 by rpki-client