Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Dn2E1wX0QVP5Tc6vPirfdY7Vn8s.roa
File: Dn2E1wX0QVP5Tc6vPirfdY7Vn8s.roa (raw, json)
Hash identifier: vugG2ZR1uhxBcfjOl3txzZmx0KeNY8F4EGCxRvn9CkU=
Subject key identifier: 0E:7D:84:D7:05:F4:41:53:F9:4D:CE:AF:3E:2A:DF:75:8E:D5:9F:CB
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01910C594E8061555680148B9B7321462B9B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Dn2E1wX0QVP5Tc6vPirfdY7Vn8s.roa
Signing time: Thu 01 Aug 2024 05:11:04 +0000
ROA not before: Thu 01 Aug 2024 05:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:59:4e:80:61:55:56:80:14:8b:9b:73:21:46:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 1 05:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e7d84d705f44153f94dceaf3e2adf758ed59fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:e4:76:1c:48:43:45:69:72:c1:09:4e:64:
b7:23:2b:fe:d4:18:7f:83:75:d2:1c:ac:ac:b6:4a:
15:10:9d:8b:b4:8a:b0:7d:a9:8a:12:24:c0:f0:7b:
85:11:a6:31:05:1d:84:4e:d3:44:23:e0:84:ba:bb:
65:87:76:eb:c5:e7:f2:d6:0b:d8:1a:be:32:6c:30:
e3:9b:48:b1:ea:57:d1:05:4f:be:f7:95:9b:36:a2:
6b:cc:bb:7f:cf:bc:f6:b3:31:4f:8e:c9:b7:78:72:
4a:09:50:22:1f:fd:f3:09:60:73:bd:c7:5f:5a:6c:
d1:10:48:e3:d1:c2:0e:d4:70:65:f8:fb:74:27:8d:
2f:1a:dc:34:ed:10:0b:af:02:5c:be:7c:e3:2e:a9:
4a:e8:71:0b:4e:5a:3b:d4:51:62:c7:a6:9d:1d:d1:
0f:9e:9a:79:ff:d0:a1:0c:78:af:2b:be:9b:6f:e0:
fb:9c:4c:08:8d:90:4f:75:84:b7:59:dc:e3:8f:38:
59:b3:5d:c4:df:dd:ef:79:7f:59:18:32:7f:c0:52:
37:2c:47:06:c0:99:8f:d0:fe:7f:12:1a:2c:f7:b3:
69:db:b6:5f:64:b1:4d:8c:69:f8:5e:fd:19:f9:19:
e3:be:f9:8e:f2:1e:f2:23:94:25:6e:46:c3:a4:70:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:84:D7:05:F4:41:53:F9:4D:CE:AF:3E:2A:DF:75:8E:D5:9F:CB
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Dn2E1wX0QVP5Tc6vPirfdY7Vn8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
22:6b:9e:c1:b5:9c:e6:c2:75:5e:34:38:16:7e:24:83:ce:7e:
bc:89:16:53:eb:34:e9:01:e8:aa:83:dc:3a:80:60:6a:2f:00:
c9:ee:5b:ac:bc:2e:e6:d7:ce:10:a3:c1:0d:ee:df:85:10:cd:
59:d9:c6:a3:6b:b4:ad:da:e4:cf:30:25:2c:ea:fa:7e:a0:9b:
e0:80:3b:33:1a:cd:53:a0:2e:40:04:0a:21:76:50:0f:fb:f2:
ec:55:0a:e4:73:41:c7:65:80:fb:9e:3e:cd:82:68:ca:21:78:
55:3d:b1:26:77:62:35:7a:e7:fa:9a:68:d6:b2:22:22:21:9c:
6e:b9:ab:7b:5b:55:5e:25:0b:63:28:1d:30:87:93:a7:52:17:
40:52:55:c1:82:5f:8c:e1:ae:10:e1:ff:12:a0:08:93:d0:fe:
d1:fb:50:5f:47:7f:62:af:1c:1a:03:08:d0:70:10:49:a5:6f:
ce:c8:27:47:47:91:60:27:13:d9:57:76:04:cf:b4:00:c6:b7:
09:56:2b:51:b4:7c:64:92:ec:28:bd:ab:8e:48:58:f2:e0:f5:
29:52:45:43:84:65:48:00:de:2a:c6:d7:71:6f:f5:46:04:3a:
b5:6d:ac:9f:71:42:e6:f1:7f:ff:6a:7c:e9:a2:75:30:32:dd:
72:ce:a0:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:32:12 2025 by rpki-client