Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E-Oez3mYiC6dkJ7VUfUHInMbvtM.roa
File: E-Oez3mYiC6dkJ7VUfUHInMbvtM.roa (raw, json)
Hash identifier: hG8ray5NoqKdJnQ57K1GeWk3N6Z99uxHzQ43j6XyxD0=
Subject key identifier: 13:E3:9E:CF:79:98:88:2E:9D:90:9E:D5:51:F5:07:22:73:1B:BE:D3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191DF46DC6C852314CCE1AF14D904FA474D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E-Oez3mYiC6dkJ7VUfUHInMbvtM.roa
Signing time: Wed 11 Sep 2024 04:10:48 +0000
ROA not before: Wed 11 Sep 2024 04:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:d606:d79c/128 maxlen: 128
2001:67c:64:ffff:0:191:d82c:371b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:46:dc:6c:85:23:14:cc:e1:af:14:d9:04:fa:47:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 11 04:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13e39ecf7998882e9d909ed551f50722731bbed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:0b:05:72:42:a6:44:5b:1e:2c:a1:61:5c:
da:10:76:04:3f:33:1e:8a:6d:a7:4f:2e:41:fb:f6:
51:dc:03:50:2a:d0:a4:e7:46:9b:bf:ae:9e:0a:a4:
de:9f:35:c1:c1:bd:e0:68:a8:f0:7a:64:e4:6e:de:
02:6d:e2:80:ef:3f:68:84:18:0c:1f:02:f3:f0:0c:
04:f5:2d:b4:c3:31:d4:59:2f:3f:a3:aa:03:a1:18:
ac:1c:28:e0:7b:ef:73:13:3b:49:37:a7:ec:03:c0:
1b:e5:10:bd:7b:40:6e:f6:07:b2:27:c5:00:dd:65:
dc:d3:37:9f:e0:18:1b:dc:73:cb:33:36:df:a3:88:
2b:b2:73:d0:50:1f:f0:d2:47:74:38:03:76:7e:13:
91:62:99:0d:16:c8:21:f3:ac:d1:da:7e:23:8e:8e:
74:d9:47:06:31:38:0b:c3:78:21:75:2e:e9:fe:1e:
cf:4b:2a:1e:ed:3e:13:1d:2f:16:3c:c6:f3:31:46:
91:be:c5:d0:42:8d:44:c8:d5:0a:4e:ec:86:94:2e:
25:99:47:e2:95:85:de:c8:68:65:6c:f7:d1:1d:df:
b9:50:8d:6a:a4:4b:53:89:8e:25:01:16:b8:fd:2f:
15:62:17:52:33:30:2c:bf:04:be:e5:84:95:42:a7:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:9E:CF:79:98:88:2E:9D:90:9E:D5:51:F5:07:22:73:1B:BE:D3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E-Oez3mYiC6dkJ7VUfUHInMbvtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:d606:d79c/128
2001:67c:64:ffff:0:191:d82c:371b/128
Signature Algorithm: sha256WithRSAEncryption
3a:86:37:2f:ff:a2:d1:4b:f2:2d:97:e1:a0:f2:63:19:25:fc:
17:35:f6:7e:ba:fe:0f:d4:df:8a:88:c8:5f:64:43:a1:58:38:
c1:6b:b0:b8:8a:0d:80:85:78:5e:f1:84:95:e6:bf:b5:21:8f:
e4:61:b7:ff:df:6f:f7:f2:38:fb:63:39:03:f2:aa:f3:0e:6b:
f7:3e:a6:49:da:50:28:29:70:83:67:e1:b0:72:c2:90:af:09:
9e:75:37:72:f9:e3:97:1e:f6:2d:bd:df:d3:5f:db:0e:a4:73:
d5:fa:3c:66:e5:19:d7:a1:8c:9b:34:ba:22:f3:1e:d8:da:1d:
54:ec:12:0f:34:a2:d8:f9:bb:66:6e:99:41:52:97:6e:1f:21:
12:79:44:f1:d6:7c:e3:63:c6:d0:41:31:04:d8:26:4c:a2:23:
2d:5c:fd:3f:71:68:05:19:6a:38:73:05:30:e9:f0:c1:64:dd:
7a:4f:f7:ff:07:99:97:45:30:a3:36:f7:ba:b7:3c:a0:47:df:
40:31:e9:d5:da:11:40:be:99:c3:63:41:a7:9d:99:d3:18:c1:
9b:50:ad:77:93:bf:e0:53:67:59:36:41:23:72:64:f9:3c:38:
1f:23:1f:a5:6c:5a:7d:2d:8b:20:43:f6:fd:73:ee:9a:bf:a4:
20:a0:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:01 2025 by rpki-client