Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZmpbo8i48x5040rLa2B0HUAJYA.roa
File: BZmpbo8i48x5040rLa2B0HUAJYA.roa (raw, json)
Hash identifier: v5lG0qD2gurQpmY9S+mTb0G17yJY6IVh0/UZAaZExYI=
Subject key identifier: 05:99:A9:6E:8F:22:E3:CC:79:D3:8D:2B:2D:AD:81:D0:75:00:25:80
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019105448ED99C74D292E6A6696ED1AC0D07
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZmpbo8i48x5040rLa2B0HUAJYA.roa
Signing time: Tue 30 Jul 2024 20:11:04 +0000
ROA not before: Tue 30 Jul 2024 20:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:05:44:8e:d9:9c:74:d2:92:e6:a6:69:6e:d1:ac:0d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 20:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0599a96e8f22e3cc79d38d2b2dad81d075002580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:b7:e5:d7:55:38:d2:9c:b0:7c:be:d8:2d:
c2:5c:20:6a:38:90:2b:cd:8d:1c:79:44:10:7d:d4:
ee:a2:af:f6:59:e9:fe:00:d1:2f:ea:a0:bb:4f:57:
0c:fe:c6:a0:3d:a9:2d:37:97:e1:7d:ec:28:3d:83:
e8:18:0f:15:a5:d3:fe:f8:03:86:e6:2a:83:a7:c4:
5f:6e:5b:1b:88:1d:9f:c6:5f:ad:0c:42:aa:1c:ba:
dc:f0:6b:0c:3b:68:bb:4e:2d:19:df:f5:c9:76:58:
f1:a7:4a:17:f2:9c:19:6b:2d:92:e4:e1:79:be:79:
8c:12:67:4b:b4:bb:33:b9:c6:73:35:70:28:32:2f:
97:3d:63:f8:c5:07:a9:7d:20:0c:9d:1c:c5:c7:aa:
f6:28:a0:fb:d8:59:e7:21:bb:c0:7d:e6:2d:a2:cc:
49:ad:90:a8:31:93:d5:0d:79:c1:3f:2c:51:80:a0:
55:c9:90:68:ee:46:e9:35:5c:de:1f:c9:0f:6f:e9:
79:d6:33:3c:21:bf:5c:56:ac:d2:eb:3a:7c:36:5d:
33:7f:e3:e3:a3:4c:25:6f:0d:3a:25:db:c9:69:5f:
f0:9f:3b:6f:94:ce:52:8b:15:06:02:b9:6e:a9:fe:
2a:fc:1c:29:65:a2:cd:d9:8f:a5:3a:99:b4:c7:79:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:99:A9:6E:8F:22:E3:CC:79:D3:8D:2B:2D:AD:81:D0:75:00:25:80
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BZmpbo8i48x5040rLa2B0HUAJYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
59:4e:16:89:2f:e3:94:f2:c7:34:80:b7:98:60:74:b4:57:50:
e6:c3:dc:bc:90:af:b7:fd:ff:63:20:ab:b4:56:4b:34:cb:a3:
ba:63:f1:4e:82:c9:dc:ba:d3:e0:4d:a4:02:70:1d:88:fb:1f:
3f:66:34:c7:6f:36:e7:4f:9c:78:e2:aa:4e:9c:43:12:16:94:
3b:c9:d9:4f:68:21:de:4e:fb:e0:41:95:ee:8c:3e:4a:31:2e:
a2:a0:56:45:33:78:80:57:22:82:8c:f6:be:a8:01:86:48:39:
5f:83:bd:52:c2:06:a4:66:b6:cc:16:2c:6e:44:e0:d6:4e:89:
5d:3f:a1:a9:f9:30:33:5e:d7:13:0f:97:b5:43:1b:cf:b4:4c:
83:5a:d7:cd:c3:29:d1:ec:fd:01:ca:31:bf:62:1f:38:08:a7:
6b:8d:47:c8:13:2e:c0:ba:86:eb:18:ce:26:ad:6d:e6:cf:6f:
9b:0f:4c:3e:47:11:d0:98:bc:de:ea:70:2f:03:8a:3a:3b:af:
4b:b6:a5:14:d9:2f:2d:65:b4:45:12:c2:86:34:4a:ca:e9:f3:
10:7d:42:ee:1f:1f:53:9c:88:85:7f:47:10:51:5b:5d:35:af:
8a:77:93:77:a1:39:0f:6a:1c:3f:8f:af:26:42:f3:48:f7:b1:
c1:f0:bf:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:30 2025 by rpki-client