Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6RAaEUM6w6JDHPyJZ4YNIWmcKk.roa
File: E6RAaEUM6w6JDHPyJZ4YNIWmcKk.roa (raw, json)
Hash identifier: LjLhkQ1hI4EYAvDiphigpzfJN+pgd5DpTeMMiSUtoRc=
Subject key identifier: 13:A4:40:68:45:0C:EB:0E:89:0C:73:F2:25:9E:18:34:85:A6:70:A9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191E543A7911F860B3B4AA6B639075C041B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6RAaEUM6w6JDHPyJZ4YNIWmcKk.roa
Signing time: Thu 12 Sep 2024 08:05:01 +0000
ROA not before: Thu 12 Sep 2024 08:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:191:e543:10cd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:43:a7:91:1f:86:0b:3b:4a:a6:b6:39:07:5c:04:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 12 08:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a44068450ceb0e890c73f2259e183485a670a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d9:87:0a:18:af:93:0d:b7:c2:1f:b6:a6:f2:
8a:c0:7e:01:1c:e4:33:31:93:a6:e0:e6:4b:ca:e9:
ab:28:8e:ca:e5:4c:74:5d:7b:b3:c1:2c:43:68:90:
1b:c3:90:4e:01:75:e7:d9:7f:7b:b9:85:ec:24:1f:
ae:b0:87:2f:3a:fe:62:a8:a4:70:1d:71:a7:fa:50:
cc:31:41:69:49:81:6c:49:3f:d8:37:a7:11:e2:a9:
fd:fb:fd:e4:03:a4:e9:4d:4a:26:c8:00:24:fc:ae:
3c:c3:82:b9:7c:78:35:1d:19:6b:8c:80:99:5e:8f:
bd:40:61:78:10:2b:a8:45:e4:86:9a:06:37:32:4f:
6f:75:38:be:78:34:bf:ff:54:e8:5e:92:a9:25:ab:
c2:bf:b0:78:eb:d7:d1:a1:77:6b:e1:48:de:dc:74:
64:ba:fe:da:f3:10:34:18:87:d3:5f:b3:92:9f:14:
36:2f:5c:5d:5a:d1:26:fb:c9:68:d1:be:b5:75:c2:
55:4f:a9:44:5b:db:98:de:a2:a0:51:10:6c:90:89:
74:f1:33:08:07:fc:74:97:a8:fb:6d:3c:bd:f3:c8:
e3:6e:ff:50:c0:a6:1d:4e:bf:77:3c:8d:26:0d:10:
a7:ff:1c:a2:d3:12:9d:8a:63:76:51:89:d8:8c:94:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:40:68:45:0C:EB:0E:89:0C:73:F2:25:9E:18:34:85:A6:70:A9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E6RAaEUM6w6JDHPyJZ4YNIWmcKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:191:e543:10cd/128
Signature Algorithm: sha256WithRSAEncryption
3d:45:4b:26:80:25:8d:be:b9:26:91:b8:47:3e:5d:75:30:1b:
b7:d3:2a:57:00:4c:64:34:a3:5a:62:df:ec:0f:a3:0a:d0:4d:
e5:ed:fe:13:30:d3:7b:9d:8f:7c:61:fe:37:ac:d7:e2:1b:aa:
3d:d4:09:52:a2:e7:8a:1a:1f:84:53:22:58:bc:0b:f1:fb:b0:
8f:3a:a5:ea:44:b2:23:4d:5e:96:bc:5b:d4:39:11:8b:87:9b:
2e:d2:13:78:0d:98:ae:07:58:7b:1b:3c:ad:c7:be:da:06:4f:
d6:3d:e8:a7:e9:99:c2:6a:d1:c2:2e:10:16:21:17:b6:c4:61:
96:40:95:5d:d6:02:eb:02:fa:bd:fb:11:18:37:1d:f0:e9:22:
52:48:d5:10:8d:db:be:e3:8a:be:67:0c:2c:f7:56:ad:da:55:
e6:d5:52:d7:ef:d8:93:d7:22:44:29:17:a4:4f:51:61:16:b3:
51:1f:22:f5:bc:8b:f4:06:5c:bd:fd:a5:3f:9d:da:59:00:50:
31:46:c3:2a:b0:07:f3:47:a3:76:59:11:84:de:d1:1d:37:19:
5f:54:e5:2b:39:3a:bb:2c:d9:2a:0a:12:60:57:77:03:45:76:
48:0f:fa:76:2d:f6:f7:43:95:a6:d7:e5:cb:3e:fd:d2:54:86:
0e:d2:25:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:10:58 2025 by rpki-client