Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AGlOkThu5Ul5FZG012mRaxmE-Nk.roa
File: AGlOkThu5Ul5FZG012mRaxmE-Nk.roa (raw, json)
Hash identifier: lfnzZ+PUFg4ZY5qz4c/9fojrKZkbZYdMtJnS5zOZUSY=
Subject key identifier: 00:69:4E:91:38:6E:E5:49:79:15:91:B4:D7:69:91:6B:19:84:F8:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01951B17D975D967B391D5B60A1B65298699
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AGlOkThu5Ul5FZG012mRaxmE-Nk.roa
Signing time: Tue 18 Feb 2025 22:05:02 +0000
ROA not before: Tue 18 Feb 2025 22:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:1b17:1cd8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1b:17:d9:75:d9:67:b3:91:d5:b6:0a:1b:65:29:86:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 18 22:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00694e91386ee549791591b4d769916b1984f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:73:22:65:f8:52:6b:1b:e0:62:37:f1:82:
2d:54:87:38:84:96:cc:42:f9:2d:65:3f:ca:e1:50:
6d:ee:05:3b:47:9f:b8:45:ac:11:08:eb:d8:75:a5:
11:9e:7d:bc:86:30:ec:f5:95:31:74:92:92:bc:b6:
12:bd:f2:fe:78:62:3f:f5:7c:18:6d:85:66:36:de:
51:13:c8:ea:e5:15:41:db:df:dd:6d:62:c3:0f:4f:
8b:23:74:4b:ef:0d:f7:10:9d:8e:b2:3e:d4:4c:6c:
aa:57:b5:58:40:93:67:0b:f6:dc:70:ff:98:23:28:
87:7b:28:f5:77:ec:30:ca:b1:49:1b:cf:a8:32:af:
84:93:3b:d9:a6:62:c2:22:97:61:4c:04:50:4b:a8:
74:31:ac:48:19:f1:f8:05:36:71:42:b9:11:30:75:
ed:46:9a:fe:9c:87:42:93:af:05:ce:ea:c6:4f:75:
20:a3:eb:85:f4:e1:3a:b1:3b:d3:36:3b:bc:45:7d:
95:d0:0a:2d:16:51:e6:53:0e:3d:97:99:9d:61:43:
1d:93:4c:26:49:1d:10:ec:18:54:8b:db:d0:50:c6:
22:ba:d9:48:5c:4c:21:b5:6b:81:20:19:8a:40:63:
51:54:e8:80:19:2f:20:9c:9d:e5:e8:20:04:db:7c:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:4E:91:38:6E:E5:49:79:15:91:B4:D7:69:91:6B:19:84:F8:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AGlOkThu5Ul5FZG012mRaxmE-Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:1b17:1cd8/128
Signature Algorithm: sha256WithRSAEncryption
50:af:8a:49:3e:e3:68:be:6e:b0:38:35:ce:8b:59:82:60:0e:
61:49:e3:cf:d7:63:51:db:fc:68:51:9a:d6:fe:2d:e5:f3:7a:
42:98:58:66:c6:cf:8c:fd:be:90:b2:58:00:34:77:b0:7e:d0:
1d:e6:4f:08:f3:bb:2b:3e:22:d1:35:08:25:b9:32:62:b9:89:
b1:a3:f4:56:62:23:95:2a:3d:a2:3d:30:72:b8:8e:5a:af:18:
c9:0d:b3:77:e6:30:81:e0:6e:05:0f:b2:10:29:a9:20:f6:f7:
2f:c1:98:6c:5e:7d:32:8b:3e:0d:ee:31:d4:19:9c:b9:9b:44:
b6:11:20:31:85:ab:3e:39:d0:81:59:dd:34:d3:71:1c:fd:13:
c7:8f:b8:de:a0:a2:40:8d:62:9a:e4:48:70:50:eb:f8:e8:cb:
30:03:bb:55:26:14:fb:8d:2b:c0:27:62:7a:4b:ad:81:6e:1f:
c6:14:2e:e0:10:bb:d8:89:5d:da:bc:60:34:69:be:f7:14:6f:
3c:d1:9a:aa:ec:63:27:c9:02:e8:ae:bc:ff:3b:d0:f2:e0:fd:
d0:21:c5:64:7f:f1:8e:c6:3e:c8:70:ac:ea:9e:a6:50:b8:23:
bd:6c:66:83:0e:c0:41:af:a1:1d:b9:5f:c5:1f:38:ad:f4:22:
16:29:22:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:43 2025 by rpki-client