Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9miaRvVOCdv5NfH97k-tm-AuqiM.roa
File: 9miaRvVOCdv5NfH97k-tm-AuqiM.roa (raw, json)
Hash identifier: 8gDp+LhNAJBPGhDWfSqL96atFCP1e5KVPkuKQQu/Osw=
Subject key identifier: F6:68:9A:46:F5:4E:09:DB:F9:35:F1:FD:EE:4F:AD:9B:E0:2E:AA:23
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019123EE49CD90AD48202473899ABC97AC0F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9miaRvVOCdv5NfH97k-tm-AuqiM.roa
Signing time: Mon 05 Aug 2024 19:05:04 +0000
ROA not before: Mon 05 Aug 2024 19:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:23ed:d16f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:ee:49:cd:90:ad:48:20:24:73:89:9a:bc:97:ac:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 5 19:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6689a46f54e09dbf935f1fdee4fad9be02eaa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:86:61:db:c0:27:51:8b:4e:17:77:6f:22:
48:22:a8:5f:4e:4a:0f:4e:40:cf:1f:a9:68:63:48:
b7:49:1a:66:1a:bf:6e:cb:3a:fe:1e:d6:78:5d:21:
45:60:0b:b1:7d:c0:b0:e8:69:65:47:87:c4:c8:8c:
3c:80:04:da:25:f2:ad:c6:eb:1c:97:70:84:6a:84:
67:8c:4f:46:ae:64:c8:e1:12:3e:94:b9:5e:fa:9c:
2b:97:4e:54:8e:64:40:f1:97:8f:b9:6d:f3:f3:de:
a5:ba:b2:1b:89:e6:b3:51:ad:30:77:c2:6a:c9:ef:
b0:51:17:ac:96:e2:c5:f1:b7:4c:c7:cd:c8:c9:f1:
9f:1a:62:36:72:e3:a5:7d:77:15:10:a4:f7:82:36:
bb:72:0e:ee:9e:89:22:9e:83:a2:02:af:48:17:70:
f7:63:64:b4:da:f8:ac:a2:a3:b9:a4:1c:c5:01:b3:
18:fc:5e:f9:c9:1e:47:8f:2a:7a:28:c6:4c:85:79:
e5:77:73:45:9e:61:66:77:82:45:a6:ca:36:5a:8c:
d3:a3:05:8c:60:64:6e:95:a8:61:fd:88:27:2f:d6:
b9:ca:0c:14:7a:d1:3f:de:29:c3:09:5b:f6:b2:c6:
5c:05:d8:29:8c:44:a6:1c:33:3b:18:84:3a:60:4a:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:9A:46:F5:4E:09:DB:F9:35:F1:FD:EE:4F:AD:9B:E0:2E:AA:23
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/9miaRvVOCdv5NfH97k-tm-AuqiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:23ed:d16f/128
Signature Algorithm: sha256WithRSAEncryption
04:7b:94:85:b2:36:00:f3:36:f5:61:c4:cf:f2:b1:04:98:89:
81:37:8b:3c:48:6f:c7:38:22:4e:4d:a0:b5:e8:55:ef:45:03:
32:15:32:53:eb:03:21:88:10:75:81:86:e8:de:7c:de:87:68:
3c:a6:0b:17:a8:22:ea:e1:42:74:d1:b7:35:29:3c:90:11:5d:
17:5a:3f:04:73:49:88:80:61:3d:9f:c7:d0:7d:d4:9a:3e:99:
76:a5:b2:eb:62:50:7c:22:72:b6:b3:f7:82:db:1e:39:15:56:
41:0c:ad:9b:54:ed:60:15:62:e1:4a:2b:c9:27:27:d1:7e:08:
da:09:62:de:8b:b3:04:8c:0e:0b:f4:9b:90:d1:3e:53:08:fe:
8a:62:c3:80:c7:0b:09:84:2f:de:c7:92:56:be:9c:dc:d5:3c:
32:3b:c9:d8:4d:3e:9b:ba:6c:f2:6a:d9:8d:1a:62:7a:43:38:
1e:c3:76:a3:96:53:af:6d:9f:d6:05:72:d0:b2:4a:bc:f5:5f:
ec:01:e7:fe:94:1b:9b:ce:00:6d:09:df:41:9d:25:0d:52:4a:
f2:e5:3d:75:33:2a:98:a8:ce:36:a2:f5:2b:d0:88:6f:6e:f5:
7f:17:3f:c6:cb:e9:fb:4b:56:3b:75:8c:2f:41:58:4c:8a:02:
5f:d6:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:59 2025 by rpki-client