Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DavcXEwDuvpbC9cPvVwpamNupvw.roa
File: DavcXEwDuvpbC9cPvVwpamNupvw.roa (raw, json)
Hash identifier: PF+1iO+MUohY5rkM8kFw3wdQnWjN1upPVTpRbsNT8BU=
Subject key identifier: 0D:AB:DC:5C:4C:03:BA:FA:5B:0B:D7:0F:BD:5C:29:6A:63:6E:A6:FC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019251D998DF0A4A3D5BADF3E04F86ED83AC
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DavcXEwDuvpbC9cPvVwpamNupvw.roa
Signing time: Thu 03 Oct 2024 10:07:47 +0000
ROA not before: Thu 03 Oct 2024 10:07:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:51d6:7551/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:d9:98:df:0a:4a:3d:5b:ad:f3:e0:4f:86:ed:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 3 10:07:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dabdc5c4c03bafa5b0bd70fbd5c296a636ea6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:95:84:6d:97:4f:c0:f2:01:e2:70:cb:e5:
85:76:75:3a:14:f4:c2:53:59:51:08:ac:46:2b:85:
5e:07:7a:ee:c8:38:71:c3:77:02:3b:4a:16:3e:09:
12:22:b0:11:f7:39:64:40:4a:8b:76:be:e9:d0:0e:
14:c4:bf:d9:5c:31:07:3c:1c:f0:d4:98:6f:5f:de:
c0:1d:33:48:aa:1c:8c:43:40:3d:67:9d:18:cb:ac:
f1:cb:17:97:0c:66:c9:62:2a:ff:08:8b:69:7a:3f:
a5:89:a4:fa:e5:b6:94:dc:7f:25:55:ca:de:92:aa:
f8:d1:da:fe:e4:a0:27:8b:df:46:af:f2:be:70:f7:
b4:70:73:2a:00:f3:02:ea:9d:86:e7:9e:79:28:e7:
f4:3b:8d:ec:a6:fe:3f:55:d5:bb:6b:5d:56:e8:9a:
14:c0:8c:64:72:97:db:30:36:1b:df:a9:13:06:62:
b3:35:13:87:df:c9:29:72:81:dd:4f:d7:91:3b:68:
81:f9:f4:e9:99:e4:a9:59:d1:f5:16:8e:fd:27:07:
d7:3b:a1:8e:eb:9b:15:56:c3:4d:6e:79:30:74:cf:
64:e5:61:e7:5e:c2:a0:0e:67:f3:8d:e9:c3:c3:83:
9f:a1:6d:5e:87:35:68:52:9e:2e:80:93:4b:2a:7a:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AB:DC:5C:4C:03:BA:FA:5B:0B:D7:0F:BD:5C:29:6A:63:6E:A6:FC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/DavcXEwDuvpbC9cPvVwpamNupvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:51d6:7551/128
Signature Algorithm: sha256WithRSAEncryption
13:d4:04:b5:58:de:ed:fe:56:9e:75:70:56:f6:e7:e3:4c:ae:
5b:79:5b:d2:4a:8a:a7:69:d4:ce:69:5a:8f:af:1d:00:74:95:
22:2d:ea:63:e2:48:23:ee:e8:e1:0f:39:9d:fc:23:35:d7:b4:
8c:68:5e:e0:77:67:7e:f2:ac:34:ba:03:23:86:3e:56:60:d6:
50:a2:3b:1b:ba:dd:47:b9:07:1c:1c:51:a9:88:9a:6b:6c:7c:
52:07:32:13:18:8f:dc:a3:96:16:c4:4f:bb:7e:d5:48:ba:67:
d7:c6:fa:1a:f9:d2:41:23:00:f1:ba:41:98:a6:91:b3:aa:80:
68:17:89:76:72:fd:e2:2e:64:79:03:90:3e:25:86:e8:9e:1a:
a9:bf:96:d4:fc:50:ff:50:40:e3:08:e6:36:05:9c:d2:d9:5e:
09:dd:bc:6c:5d:a3:93:4d:88:da:af:7a:5b:d2:1c:29:41:57:
8a:d2:af:36:37:bc:26:a5:48:ad:95:ce:e8:69:ed:ac:6b:03:
6b:81:1e:e2:e6:e4:ff:32:d4:09:9d:ab:9a:23:3f:cb:73:3b:
f0:6a:da:9c:df:a7:f5:38:4e:cb:20:6b:55:51:e4:3d:d6:ee:
f3:20:f5:d1:39:19:7c:c7:37:1c:15:9e:9b:31:d4:29:85:70:
f3:51:dc:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:20:18 2025 by rpki-client