Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AsrAJZzTB1NMEAXOexEf4JxMBDI.roa
File: AsrAJZzTB1NMEAXOexEf4JxMBDI.roa (raw, json)
Hash identifier: A2MatBAt9QFliw5heN+pKTVg7dZWk+ZnxAG3fqrU+Rg=
Subject key identifier: 02:CA:C0:25:9C:D3:07:53:4C:10:05:CE:7B:11:1F:E0:9C:4C:04:32
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0193395E6F5CA872619C24481B4A3B02D7A9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AsrAJZzTB1NMEAXOexEf4JxMBDI.roa
Signing time: Sun 17 Nov 2024 09:05:10 +0000
ROA not before: Sun 17 Nov 2024 09:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:395d:baed/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:39:5e:6f:5c:a8:72:61:9c:24:48:1b:4a:3b:02:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 17 09:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02cac0259cd307534c1005ce7b111fe09c4c0432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:54:eb:f0:90:88:26:da:f0:71:36:ac:d1:
1a:af:94:00:e9:29:23:93:15:f7:e0:03:43:4f:9e:
9e:bd:03:bc:49:45:4f:a5:51:05:47:5f:e6:ad:ee:
70:c4:11:f2:9d:4e:c1:5f:14:83:2c:2a:eb:e2:0a:
e6:2a:57:09:e3:18:48:3b:bc:f6:35:44:56:3d:a0:
0d:7c:4f:fc:ad:f2:29:ab:2e:8e:2c:ca:ee:27:c2:
c6:a5:cb:90:96:84:20:75:b0:00:f4:2b:75:2d:22:
51:a9:c9:a2:f5:62:06:6b:9b:ca:15:c1:9a:21:c2:
92:e8:b5:48:2f:68:07:7d:eb:48:ce:91:b3:92:a2:
9f:e2:39:6b:ab:0b:7b:f2:5a:3c:26:1c:59:b1:d2:
6b:ce:c0:1b:cc:14:29:90:2b:0f:0b:5c:de:61:28:
8d:f8:66:57:5c:e9:e9:51:73:b6:0a:ef:45:b6:87:
b8:69:78:92:0a:a9:0b:96:0b:27:bf:bd:84:47:04:
60:67:f8:29:43:1f:59:06:7c:60:1f:93:ea:97:c4:
64:4b:21:11:a8:ab:4a:1b:ce:a8:a8:72:84:fa:a4:
ad:f0:da:c4:00:81:a6:1f:62:0f:b4:59:6d:99:02:
b5:c9:7f:fb:eb:28:44:9c:0f:78:fb:09:7c:02:9b:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:C0:25:9C:D3:07:53:4C:10:05:CE:7B:11:1F:E0:9C:4C:04:32
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/AsrAJZzTB1NMEAXOexEf4JxMBDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:395d:baed/128
Signature Algorithm: sha256WithRSAEncryption
91:70:ce:c4:1a:1b:7a:bc:70:21:66:44:8f:81:2c:eb:59:e3:
d8:fe:b4:ca:de:07:d7:69:dd:7f:c1:d0:31:88:7b:1f:dd:e2:
b1:cd:0f:a5:99:03:c9:3b:78:21:49:8b:9b:b2:c5:a5:96:8b:
07:41:2d:47:ea:d4:fa:0c:d0:e2:a3:79:fc:51:65:81:25:0a:
07:b2:c1:3c:ee:1e:5a:81:5e:6c:50:65:7e:63:b0:52:b7:8c:
68:91:51:b4:4e:36:1d:83:3e:3f:a0:88:5e:d0:e0:e4:c7:62:
e6:3a:eb:d5:c1:21:78:13:db:28:17:dc:55:2b:01:3a:ce:67:
47:8a:5c:37:f0:2c:a6:b2:34:dd:e0:62:34:32:8d:ef:5f:27:
3e:ec:cd:a9:8c:dd:93:4a:cf:8f:77:78:e7:74:f5:6e:da:7d:
6a:4a:f8:9a:c3:ad:cd:39:72:b9:f2:1e:ce:75:54:5c:d7:c7:
e3:78:9f:e8:a7:3b:12:21:7a:57:cb:d8:b3:53:db:68:3a:b3:
31:ee:de:4e:70:68:0c:a9:59:23:bf:96:ea:f3:49:f4:f9:43:
00:96:46:ce:a2:ee:fa:b0:f9:e9:e6:40:99:7c:d3:a6:3f:16:
33:55:47:ee:4f:53:f3:2c:ce:18:6b:50:b5:b7:6a:e2:8f:2b:
8b:11:55:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:27 2025 by rpki-client