Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ByKZcXJS9kn6G5UCySI2NBLuKSw.roa
File: ByKZcXJS9kn6G5UCySI2NBLuKSw.roa (raw, json)
Hash identifier: DOl9eYRXL1vOLSlz6J58MFFEYJbfCGMUlGtq26LpG90=
Subject key identifier: 07:22:99:71:72:52:F6:49:FA:1B:95:02:C9:22:36:34:12:EE:29:2C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019332B78DC2A8581306697924A6AFAB6831
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ByKZcXJS9kn6G5UCySI2NBLuKSw.roa
Signing time: Sat 16 Nov 2024 02:05:10 +0000
ROA not before: Sat 16 Nov 2024 02:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:32b7:4675/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:32:b7:8d:c2:a8:58:13:06:69:79:24:a6:af:ab:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 16 02:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=072299717252f649fa1b9502c922363412ee292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:86:56:86:bd:66:e1:af:c1:d7:ed:51:1b:
cb:aa:a4:b1:79:d0:04:44:d2:5d:e6:67:df:69:c1:
94:17:05:09:1c:83:7c:fb:54:42:6e:38:42:d4:d4:
73:44:e6:be:a5:c1:7f:56:1a:6f:db:46:e9:89:7f:
c0:0f:c2:a9:14:91:33:87:b3:09:03:fb:e6:b9:f7:
a6:9d:3a:97:d1:e4:4a:69:14:6e:cc:c4:89:0b:1d:
9f:96:08:28:4e:08:e2:f9:b6:0c:a1:f9:b5:39:04:
4d:e9:16:8e:1f:5b:7a:72:75:73:e3:6e:aa:ea:2b:
a6:89:94:5c:4a:d4:35:2e:d6:5f:42:a8:d1:b8:66:
3b:f3:ac:0e:22:66:49:ba:46:e2:49:3e:8c:a0:ba:
66:49:1d:60:7d:8c:eb:62:39:67:ef:a8:0d:5b:34:
07:cf:e1:dd:cc:d7:a9:f7:99:66:68:92:40:7c:bb:
f7:0a:7c:69:6c:69:95:45:a9:51:84:c7:f3:1a:e0:
b5:69:cc:d6:3e:2b:c4:59:3a:41:ef:f1:f9:e5:f4:
cf:25:29:f4:c8:bd:e6:89:a4:ef:62:3f:75:31:12:
a2:94:1a:96:7e:a1:da:86:ac:ca:6c:02:06:1c:93:
c3:84:da:e5:81:07:97:7e:bf:53:32:10:84:8d:f5:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:99:71:72:52:F6:49:FA:1B:95:02:C9:22:36:34:12:EE:29:2C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ByKZcXJS9kn6G5UCySI2NBLuKSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:32b7:4675/128
Signature Algorithm: sha256WithRSAEncryption
83:70:80:7b:3b:a3:49:5e:e3:14:53:fd:f6:9a:34:66:49:a4:
5c:80:aa:3f:ad:5d:32:67:07:2c:c2:13:5f:21:7d:d9:1a:34:
b8:e7:ba:e8:b8:7b:dd:fe:af:3b:d0:be:b0:a2:05:d3:b4:82:
6f:43:b6:e6:eb:5a:a3:23:f8:a8:16:c6:78:9a:c8:2b:2e:78:
cd:ec:61:8c:20:a2:f1:6e:a4:61:1f:b4:9b:eb:32:79:c8:52:
ce:e8:c9:21:be:1c:c1:e9:84:69:86:15:e0:89:75:59:82:23:
bd:74:22:9d:e2:33:2d:6a:06:c2:de:24:1e:a2:66:82:75:90:
57:5c:45:75:c7:d4:d8:1f:41:a6:08:98:2a:af:b9:b2:88:53:
c2:66:ad:d4:4c:66:1b:30:05:87:bd:3f:62:a2:0d:41:0a:14:
73:08:a6:8f:89:f1:f1:e7:0e:0f:59:da:46:82:72:0c:a4:56:
20:76:3e:8b:93:f8:51:db:e5:46:df:6d:8c:39:fe:9c:b4:2f:
62:9f:b0:b6:a1:f6:9d:4c:82:91:21:0d:45:0b:d7:d8:e9:06:
15:f5:47:65:a2:2b:89:4d:d2:18:75:8b:c1:5f:35:e8:d8:ee:
d6:38:b8:a8:4b:29:a5:d2:4b:81:cd:71:38:96:ad:1d:81:41:
70:12:94:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:54 2025 by rpki-client