Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fac1Hij5XQRgLJm-eCtQyTusbbo.roa
File: Fac1Hij5XQRgLJm-eCtQyTusbbo.roa (raw, json)
Hash identifier: endOwiEJfs9sXBEfST3tgV12m5GeX7WvfXtzBJt7aEo=
Subject key identifier: 15:A7:35:1E:28:F9:5D:04:60:2C:99:BE:78:2B:50:C9:3B:AC:6D:BA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019110A304F00DA1ACC7ECF4AB458012A290
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fac1Hij5XQRgLJm-eCtQyTusbbo.roa
Signing time: Fri 02 Aug 2024 01:10:04 +0000
ROA not before: Fri 02 Aug 2024 01:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:10:a3:04:f0:0d:a1:ac:c7:ec:f4:ab:45:80:12:a2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 2 01:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a7351e28f95d04602c99be782b50c93bac6dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:17:0c:4e:36:67:e5:b6:35:93:3e:60:4b:
bd:37:04:71:c9:db:7a:89:1e:c7:1f:91:79:e4:aa:
2c:0b:a1:5e:c3:ec:01:03:21:ea:45:74:38:a2:31:
12:ee:02:dd:36:dc:8a:c6:8c:14:42:c2:52:cb:7f:
c0:bc:b3:05:aa:bb:77:f0:35:c8:7a:d0:aa:e7:bd:
0e:6e:23:ef:99:c6:92:69:1b:91:76:cb:8f:92:78:
69:15:62:a6:65:49:ea:98:2d:85:6f:2e:f3:63:32:
d6:e6:93:82:64:ea:b0:16:5e:75:19:27:8b:92:e9:
4b:9e:a4:a0:9a:c8:72:04:75:d5:e1:85:f2:11:55:
f9:4e:f9:31:e5:ce:eb:3d:2e:7e:d6:05:f4:aa:cc:
31:ca:b1:5b:4e:97:8d:ba:ba:6a:01:e8:f4:05:e3:
82:dd:bb:ea:91:5b:ad:b6:6c:5d:ba:ac:8c:fe:dc:
04:f9:39:c8:83:c4:dd:24:5f:d4:8a:5c:fa:b7:3b:
8f:5d:e7:4c:e4:b6:b3:12:fc:ce:a9:66:d4:e6:7d:
be:49:55:69:04:f6:e7:bc:2c:7c:c3:b7:b7:1a:c8:
5e:be:0f:ff:89:df:4f:2a:bc:93:6a:81:55:e9:65:
32:34:f3:8c:42:1f:95:55:cf:50:da:7e:25:48:2c:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:35:1E:28:F9:5D:04:60:2C:99:BE:78:2B:50:C9:3B:AC:6D:BA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fac1Hij5XQRgLJm-eCtQyTusbbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
95:60:b5:24:d6:de:24:1a:c4:35:21:15:76:eb:28:b2:d1:a9:
45:4c:9c:aa:1b:80:d8:e6:42:83:77:a8:34:96:42:ff:de:96:
e2:f1:59:ca:01:ad:e6:7a:09:b4:20:cd:9d:54:ed:8f:c7:8f:
23:27:f4:1c:b1:ba:cc:f3:f0:87:d5:a1:49:8c:1b:b0:cf:c5:
ea:b0:77:de:82:ac:2c:ab:a5:c9:e4:15:7a:2f:10:87:38:d3:
5d:94:05:84:e4:8e:ae:d7:c3:96:46:a0:88:75:70:e4:5a:b5:
cb:2a:59:11:bd:51:9d:9e:1b:6f:31:e9:c9:fa:c8:74:92:c6:
19:93:c9:bb:e2:bc:97:ce:af:e6:12:e0:89:42:ce:7d:2b:54:
2f:60:e0:4b:54:95:c7:f3:e9:5d:ce:22:f5:75:23:3d:8d:03:
eb:0f:c4:5c:b3:14:01:e1:35:a2:19:1a:1a:e8:f4:58:1b:9c:
47:58:f1:35:55:1c:a3:b2:2c:6f:68:fe:00:30:cc:73:eb:e0:
03:39:b1:7c:7b:1a:1b:4c:1a:9b:60:1d:c3:ef:18:1f:bd:b1:
db:b7:a8:de:3c:82:4a:2a:c8:2a:62:32:21:91:04:6e:a4:ea:
92:10:12:fd:31:e3:c1:70:dd:cc:6d:fd:f5:79:15:a4:f5:8b:
ac:38:46:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:44:01 2025 by rpki-client