Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fj2K8qeOmWXBiFafGhHT_RcLXeo.roa
File: Fj2K8qeOmWXBiFafGhHT_RcLXeo.roa (raw, json)
Hash identifier: GFXQwY1uIi9B2mDuhZn1NfFaIgWRJQ3esbJfjSkVkmU=
Subject key identifier: 16:3D:8A:F2:A7:8E:99:65:C1:88:56:9F:1A:11:D3:FD:17:0B:5D:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01922BA539DB36F32FD86847D30C9B06AD3B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fj2K8qeOmWXBiFafGhHT_RcLXeo.roa
Signing time: Thu 26 Sep 2024 00:05:01 +0000
ROA not before: Thu 26 Sep 2024 00:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:2ba4:926f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:a5:39:db:36:f3:2f:d8:68:47:d3:0c:9b:06:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 26 00:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=163d8af2a78e9965c188569f1a11d3fd170b5dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:37:a6:f5:7a:75:75:ca:c7:18:47:60:4c:
36:97:0d:8e:9a:68:a9:94:52:b3:bd:99:55:0b:16:
75:ea:d3:f1:2e:0b:f1:11:e7:6e:c8:5f:59:8f:59:
c8:4e:02:9a:b2:b3:42:7e:3f:20:9b:38:18:f3:29:
d0:ec:ac:10:85:51:80:7e:5e:4d:52:97:fb:f6:62:
38:c2:8b:b0:53:1c:aa:5a:d8:53:63:c8:10:3b:21:
02:6c:25:70:f4:46:5b:26:80:44:70:1c:0c:5e:1e:
26:78:3e:17:c1:cc:23:14:35:c9:79:cc:e5:d9:a0:
ac:2b:e2:67:73:55:61:39:ef:84:71:8d:73:cf:1b:
79:d6:9b:1b:fe:ad:3a:3b:7c:a8:36:4b:f1:03:d2:
ac:ca:55:43:6a:43:16:cd:05:61:99:55:da:be:cf:
1a:a7:a4:25:e1:7c:22:57:29:c3:45:15:9e:b9:78:
db:d8:1f:b5:a4:7a:bf:5c:ca:6f:2c:35:cf:2f:cb:
36:9e:ac:df:de:f0:21:a5:c3:52:6e:7e:a8:1d:8a:
b8:a0:00:f0:6a:95:38:a9:74:f9:09:d6:50:74:bb:
05:61:30:ae:a6:39:5e:79:26:71:df:4c:53:ca:15:
c8:97:be:3c:80:5b:ca:35:dc:1e:9c:b5:f4:45:60:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:8A:F2:A7:8E:99:65:C1:88:56:9F:1A:11:D3:FD:17:0B:5D:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Fj2K8qeOmWXBiFafGhHT_RcLXeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:2ba4:926f/128
Signature Algorithm: sha256WithRSAEncryption
83:0a:f9:fc:9b:f9:db:ea:22:0a:25:6a:af:9d:7c:03:45:f7:
9b:f0:ca:48:35:31:95:74:c3:17:19:b5:bc:8c:1e:7f:50:58:
ac:8c:ca:fe:ab:e0:c4:8d:df:71:8b:e9:44:1d:32:60:21:f4:
57:9f:70:97:4f:2f:9e:ad:60:2a:55:36:c3:ac:61:5b:05:84:
04:d2:90:ae:ef:c9:11:78:fa:b8:e4:41:a3:e5:95:57:c1:ad:
fd:cf:99:c2:d7:60:90:65:63:a9:43:ff:f4:57:8f:44:63:99:
1e:f0:55:c7:0b:fc:26:65:b4:a8:83:29:78:51:8d:ee:97:df:
39:18:2c:05:02:96:62:56:df:99:87:b5:f7:38:ea:5b:cb:7d:
f0:35:6d:fb:95:81:8c:2d:28:bd:1b:3c:cb:7c:09:5b:f8:28:
c5:7d:6f:82:67:ed:f8:2c:0a:fe:2e:23:2d:d6:4d:b7:77:42:
b1:c4:96:af:34:f6:63:a9:71:4b:a7:48:44:1b:04:4c:75:d6:
35:43:e9:e3:7d:87:3f:92:06:0e:92:97:3b:e4:70:08:c5:59:
8b:8e:71:36:b8:e7:a2:b2:d2:81:12:c0:c4:f1:6f:a1:b5:b8:
9f:09:04:37:a5:45:ac:0a:0f:55:66:e3:9e:ad:8c:47:a7:0b:
d8:75:df:4c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZIrpTnbNvMv2GhH0wybBq07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTI2MDAwNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjNkOGFmMmE3OGU5OTY1YzE4ODU2OWYxYTExZDNmZDE3MGI1ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJY3pvV6dXXKxxhHYEw2lw2Ommip
lFKzvZlVCxZ16tPxLgvxEeduyF9Zj1nITgKasrNCfj8gmzgY8ynQ7KwQhVGAfl5N
Upf79mI4wouwUxyqWthTY8gQOyECbCVw9EZbJoBEcBwMXh4meD4XwcwjFDXJeczl
2aCsK+Jnc1VhOe+EcY1zzxt51psb/q06O3yoNkvxA9KsylVDakMWzQVhmVXavs8a
p6Ql4XwiVynDRRWeuXjb2B+1pHq/XMpvLDXPL8s2nqzf3vAhpcNSbn6oHYq4oADw
apU4qXT5CdZQdLsFYTCupjleeSZx30xTyhXIl748gFvKNdwenLX0RWD/OQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBY9ivKnjpllwYhWnxoR0/0XC13qMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRmoySzhxZU9tV1hCaUZhZkdoSFRfUmNMWGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGSK6SSbzANBgkqhkiG9w0BAQsFAAOCAQEAgwr5/Jv52+oiCiVqr518A0X3
m/DKSDUxlXTDFxm1vIwef1BYrIzK/qvgxI3fcYvpRB0yYCH0V59wl08vnq1gKlU2
w6xhWwWEBNKQru/JEXj6uORBo+WVV8Gt/c+ZwtdgkGVjqUP/9FePRGOZHvBVxwv8
JmW0qIMpeFGN7pffORgsBQKWYlbfmYe19zjqW8t98DVt+5WBjC0ovRs8y3wJW/go
xX1vgmft+CwK/i4jLdZNt3dCscSWrzT2Y6lxS6dIRBsETHXWNUPp432HP5IGDpKX
O+RwCMVZi45xNrjnorLSgRLAxPFvobW4nwkEN6VFrAoPVWbjnq2MR6cL2HXfTA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:16 2025 by rpki-client