Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Auyo1NYHCsoK38oN1lUGsWSVAvw.roa
File: Auyo1NYHCsoK38oN1lUGsWSVAvw.roa (raw, json)
Hash identifier: 9A2WeofwATjfzTPxvgy3Bp9eYTvNBOpBo+YMlphnqfU=
Subject key identifier: 02:EC:A8:D4:D6:07:0A:CA:0A:DF:CA:0D:D6:55:06:B1:64:95:02:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01948DEF2101D26F2D2998B63728C87CAB18
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Auyo1NYHCsoK38oN1lUGsWSVAvw.roa
Signing time: Wed 22 Jan 2025 12:14:06 +0000
ROA not before: Wed 22 Jan 2025 12:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:ef:21:01:d2:6f:2d:29:98:b6:37:28:c8:7c:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 22 12:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02eca8d4d6070aca0adfca0dd65506b1649502fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:cb:a0:fa:f6:ec:1f:24:c4:fe:58:1d:6c:
a7:38:5d:10:74:5d:18:79:cf:31:0c:6c:54:00:75:
e4:a9:f9:1e:3b:38:fd:cf:e8:8a:39:4e:ad:5e:1d:
ab:3a:41:f2:60:0c:ec:58:42:bb:18:b2:bd:83:6f:
33:b6:48:d4:ec:f9:fe:89:31:a1:ce:99:ea:f7:91:
ff:4e:b3:73:88:39:3c:e5:b2:c3:49:b0:08:e0:d9:
db:d2:93:ec:30:96:c9:66:de:f2:25:00:33:f7:8c:
db:37:36:67:e4:22:67:e9:d7:0c:fc:da:e7:d8:b8:
28:2d:9a:28:ef:c6:c8:d4:da:70:9c:ef:cd:a6:8c:
d4:0e:07:36:79:51:2f:b3:6b:5e:9d:a8:3f:cb:8a:
c9:84:36:4c:a6:a4:aa:7f:e9:86:73:cc:60:70:79:
41:7b:d4:37:50:15:43:73:29:68:1c:a0:56:dd:5c:
d6:47:6c:a7:2b:7b:ce:98:a3:68:3a:3e:2e:e9:26:
4d:8c:59:7f:6e:22:7f:36:62:2b:21:66:83:06:6d:
37:df:39:94:68:2a:7c:a5:fc:d6:69:62:7e:0c:ec:
96:d3:34:03:40:79:65:d7:c8:f0:22:ac:a0:b3:bc:
cb:bd:9a:36:bb:c9:22:d5:f7:bc:35:b2:91:1c:7f:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:A8:D4:D6:07:0A:CA:0A:DF:CA:0D:D6:55:06:B1:64:95:02:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Auyo1NYHCsoK38oN1lUGsWSVAvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
8a:96:77:0d:3e:34:99:8c:40:54:d0:57:ba:45:3a:8a:ef:83:
68:da:a0:8d:45:60:e9:1f:c1:5e:43:87:26:6b:93:c0:70:01:
83:5a:8c:fe:77:57:f7:64:b3:9a:21:d4:52:97:1d:85:c9:18:
1e:44:86:4d:e1:c0:ef:2e:6e:ac:7f:44:3f:bd:29:b8:23:ca:
09:91:ec:f9:26:a2:8c:9f:a1:fe:fd:b2:96:8f:45:73:ef:1d:
61:83:03:68:0e:0a:8b:0f:52:ed:9a:a6:d9:49:2e:0e:76:3c:
cd:5e:6f:9f:0c:ef:c3:28:4c:8f:52:2e:92:02:5d:7c:0c:9e:
c3:de:75:b9:c0:26:2d:c2:9e:ad:7b:0b:7b:c2:85:25:e5:bf:
3c:38:90:26:1d:a8:9a:55:55:bd:e9:29:64:cc:00:dc:2d:37:
be:01:0e:2c:48:8b:38:96:1e:85:9a:db:b9:58:36:26:bf:34:
3d:45:5b:6e:b7:22:f7:62:ad:bb:82:cf:cd:de:85:94:e1:95:
98:84:27:43:e2:90:c3:fe:0d:08:71:ef:a1:60:15:f9:66:32:
af:97:71:8e:73:0a:1a:a2:54:a9:3e:2a:83:89:f8:31:a1:c9:
8b:8b:ae:0f:02:d5:a8:4b:33:f7:fe:23:c1:e0:79:56:48:13:
7b:2c:f6:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:12:00 2025 by rpki-client