Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EJzOe5PoobKctCqp-QhhmWhG9o8.roa
File: EJzOe5PoobKctCqp-QhhmWhG9o8.roa (raw, json)
Hash identifier: Dev+aR1Z45s8WS0dXi49CVJcY2FVz7okW+RvTMSEWSw=
Subject key identifier: 10:9C:CE:7B:93:E8:A1:B2:9C:B4:2A:A9:F9:08:61:99:68:46:F6:8F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019312BE9A0976125DD91E653497A8C0270A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EJzOe5PoobKctCqp-QhhmWhG9o8.roa
Signing time: Sat 09 Nov 2024 21:05:01 +0000
ROA not before: Sat 09 Nov 2024 21:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:12be:2c82/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:12:be:9a:09:76:12:5d:d9:1e:65:34:97:a8:c0:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 9 21:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=109cce7b93e8a1b29cb42aa9f90861996846f68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:38:5a:36:1c:27:6b:3c:e2:c3:7a:8c:41:
d3:63:c3:4c:9a:4c:1b:1e:f4:54:75:71:46:8e:3f:
3f:65:42:45:b4:fc:6f:ba:8e:e9:a0:8d:9e:90:5f:
ae:64:8e:11:a2:cf:af:5c:10:7e:cf:8b:06:17:61:
9b:0e:6f:e1:67:4c:d4:c1:53:35:31:1f:64:f8:bf:
67:5e:db:be:44:78:96:22:ce:65:3a:87:96:37:1a:
b0:5b:e3:65:f9:84:81:e9:07:2c:24:36:bb:c3:35:
17:cb:50:a8:1b:1c:90:d7:10:46:60:4d:e3:09:36:
9e:2f:7b:07:29:67:fa:0b:a3:94:15:83:f7:05:27:
ac:6a:79:e2:31:5d:9a:16:80:bd:13:4b:71:7d:72:
20:3d:29:61:ea:35:2c:a4:b0:12:54:bb:fe:ad:c6:
d6:d5:1c:0c:61:2f:22:77:43:1d:63:12:37:6b:08:
92:08:ee:6f:8a:ff:da:61:7b:b4:ce:b1:ed:9c:8d:
44:10:e6:48:56:fb:ab:56:ee:84:ad:3a:c2:ac:b4:
15:00:6a:c8:aa:04:81:8b:75:35:49:93:fe:5a:ff:
05:74:69:68:4c:d4:d1:e3:d6:97:36:39:a0:f1:01:
d6:d2:a6:e1:dd:46:9b:89:9b:06:3e:8a:95:a5:73:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:CE:7B:93:E8:A1:B2:9C:B4:2A:A9:F9:08:61:99:68:46:F6:8F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EJzOe5PoobKctCqp-QhhmWhG9o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:12be:2c82/128
Signature Algorithm: sha256WithRSAEncryption
46:45:98:68:be:13:5a:1d:b6:40:0e:ab:75:6d:87:de:40:cc:
4b:18:72:a2:cb:99:4b:5d:fd:50:df:e0:1e:8f:44:34:74:13:
a5:07:1d:38:26:71:ac:b6:4d:96:53:4d:e1:92:f6:8f:0e:d2:
4b:e1:48:11:39:5e:6c:03:cd:ac:ff:a7:ac:3b:a0:69:a6:aa:
b8:6e:ac:3d:bd:df:07:38:67:f4:81:b3:62:ac:db:3f:52:03:
ef:eb:0d:3e:33:a2:2c:04:22:f4:fa:f6:9d:aa:6c:c6:dc:01:
48:67:45:69:ae:d2:40:e5:26:dc:0d:f9:a9:4f:f3:65:c6:80:
ab:55:c0:83:48:2c:9b:7e:f6:9a:f3:f0:a9:12:a3:71:ac:d1:
ab:89:b1:4b:2d:3f:c7:39:5f:e4:87:b0:31:81:ca:9c:2d:1e:
4b:23:ba:74:10:41:1b:07:ac:43:c4:3e:08:08:78:cc:d7:16:
93:99:ee:3a:2b:dd:a8:92:48:c5:02:08:29:bf:c8:3c:46:21:
c8:3c:d5:25:ab:23:7c:f2:7f:cc:30:c5:31:35:61:5b:8e:d4:
c9:df:d9:ec:fa:bd:46:53:e2:4b:47:d5:3e:a7:82:56:d1:84:
83:86:ca:30:66:cc:cf:da:f4:8d:2b:9c:4f:a6:6f:19:05:f2:
6d:71:b7:4b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:14:24 2025 by rpki-client