Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DWOA5HWs4fM_yVGz7Y9gwkJztzI.roa
File: DWOA5HWs4fM_yVGz7Y9gwkJztzI.roa (raw, json)
Hash identifier: POxvOgKpkHLMlpxyuFH0gHw1RfDQpw9IA2nofteH0xM=
Subject key identifier: 0D:63:80:E4:75:AC:E1:F3:3F:C9:51:B3:ED:8F:60:C2:42:73:B7:32
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191701A8517FD6D073AA1E9DA47419F7A33
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DWOA5HWs4fM_yVGz7Y9gwkJztzI.roa
Signing time: Tue 20 Aug 2024 14:04:31 +0000
ROA not before: Tue 20 Aug 2024 14:04:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:701a:55ca/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:1a:85:17:fd:6d:07:3a:a1:e9:da:47:41:9f:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 20 14:04:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d6380e475ace1f33fc951b3ed8f60c24273b732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:dc:b8:22:8e:04:be:3c:dc:7c:e7:87:0e:
7d:81:40:fa:10:c3:ef:6d:b8:03:3f:84:66:17:f0:
6c:42:9f:11:01:c9:d2:9f:a5:f1:74:e6:08:0e:e4:
c4:24:65:6e:24:8c:fd:c2:9e:4a:ab:b7:44:51:98:
75:4c:95:9c:da:62:42:bb:ba:29:a8:55:74:69:a8:
56:50:82:25:cb:82:88:3d:9b:c1:05:fd:5b:98:55:
fe:c0:76:c9:5d:6f:e9:7a:e8:91:70:b1:7e:87:70:
09:ed:72:ee:35:db:a2:22:93:4b:d0:ee:03:7a:01:
4a:ad:a5:dc:02:13:2a:b7:25:b0:b0:32:d1:45:22:
bd:83:4e:42:90:92:a9:65:72:80:40:97:a5:02:52:
49:d4:74:3e:2b:53:fe:7f:4c:8d:c3:8b:b7:34:2b:
94:8b:73:a1:d1:d3:0d:f4:ff:da:b8:5b:ae:27:3f:
48:85:3b:c0:e5:ee:da:5f:17:4d:12:9e:c9:f6:df:
ba:f7:88:75:0d:50:6b:ac:85:1b:2b:0a:17:ab:8b:
df:7b:68:cd:b2:d7:f9:bc:fb:4f:26:e2:10:9e:0c:
63:8b:19:cb:24:a6:68:d0:f6:1e:55:dd:78:9d:8c:
38:f1:27:38:f7:d3:df:67:25:b8:1b:7e:f0:16:f0:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:80:E4:75:AC:E1:F3:3F:C9:51:B3:ED:8F:60:C2:42:73:B7:32
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DWOA5HWs4fM_yVGz7Y9gwkJztzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:701a:55ca/128
Signature Algorithm: sha256WithRSAEncryption
34:f4:63:ec:a7:84:48:67:0d:d9:7c:cf:ed:81:f4:e2:e0:05:
c6:47:94:92:53:d1:27:c4:dd:8a:d8:15:ea:38:83:df:8f:67:
84:ec:22:2a:fb:62:42:4b:2f:3d:3f:19:57:ef:77:49:45:cc:
82:4a:e9:1f:11:d3:f3:2c:49:d3:27:c4:57:66:bc:85:f1:72:
82:71:de:78:d9:bd:16:67:4a:2b:8b:e0:6e:33:cd:60:07:4b:
01:17:14:92:6e:db:9e:4a:33:2a:c6:28:0d:82:7a:ad:52:ae:
5a:8b:35:47:de:31:05:56:dd:3e:ef:3a:70:e2:51:e5:a9:4e:
af:58:f5:62:ea:29:b1:45:df:03:a9:98:99:94:d4:37:68:01:
09:c2:71:7f:fa:d0:3e:26:be:a8:66:57:72:3e:62:b2:b1:0a:
8e:be:29:cd:73:a6:83:99:52:8d:18:a5:ab:1b:00:37:7d:2a:
46:91:99:e6:eb:0e:15:a6:c1:31:d2:63:60:8e:fb:87:9d:65:
7b:b9:d2:e8:47:a7:8b:8a:9d:9b:01:e8:56:8b:0c:36:a3:2b:
55:41:61:2c:be:fe:4e:98:b3:b5:e0:dc:cf:c3:92:9d:8b:6d:
61:b2:1c:6a:2a:d7:7b:cd:27:16:2f:94:38:25:ad:54:4b:80:
89:78:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:42 2025 by rpki-client