Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrxAj4uYZjFD8-0oLjaVm8uWy4I.roa
File: FrxAj4uYZjFD8-0oLjaVm8uWy4I.roa (raw, json)
Hash identifier: 26G7PgIh04c/fLYA+yZPLchksHqYHXCGQKgbCC3ruKk=
Subject key identifier: 16:BC:40:8F:8B:98:66:31:43:F3:ED:28:2E:36:95:9B:CB:96:CB:82
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191020C951BD2CA09BA8A1C28D09B91B9F5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrxAj4uYZjFD8-0oLjaVm8uWy4I.roa
Signing time: Tue 30 Jul 2024 05:11:04 +0000
ROA not before: Tue 30 Jul 2024 05:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:0c:95:1b:d2:ca:09:ba:8a:1c:28:d0:9b:91:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 05:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16bc408f8b98663143f3ed282e36959bcb96cb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:cc:ff:90:d5:ff:81:7b:3f:73:3a:52:03:
1f:94:8d:38:31:c3:c3:e4:0e:e9:1d:3d:16:3e:2f:
3e:b3:22:e8:9a:be:6d:63:bb:33:d1:48:1d:4c:93:
5b:5f:2a:3f:6a:bf:2a:0a:4c:f1:1d:69:87:26:8f:
0e:a9:c3:c7:f0:c6:25:d2:ad:a2:c5:35:97:a2:03:
ab:35:0d:c9:78:51:f2:ed:04:5e:b4:c5:19:a3:ea:
36:79:0a:26:9f:04:09:89:b1:bb:fa:c6:1e:c5:04:
94:79:48:1c:7f:40:5a:ae:bf:ac:8b:f2:85:8e:9b:
9e:a8:46:05:cc:67:d3:4b:9f:ee:f8:2f:86:f1:01:
f1:bd:c9:60:a3:a1:c9:65:6f:a1:e6:c9:45:50:d7:
ba:76:a3:0e:d7:96:90:7e:77:e7:ee:49:c3:f2:dc:
3a:4a:aa:d9:69:54:cc:ed:33:9a:c7:08:4a:c6:a6:
d9:1a:b3:95:84:d9:98:b9:5e:1f:22:93:ac:1d:eb:
65:c6:85:51:c1:f4:ba:66:d9:f0:12:82:a2:0e:22:
80:41:46:00:90:8a:1b:db:7b:fc:50:42:70:24:06:
44:53:1c:1c:b2:a7:fa:59:bc:a8:b3:70:74:83:12:
ab:33:05:15:fb:bb:c1:23:2d:7f:3c:d8:cd:fb:e5:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:40:8F:8B:98:66:31:43:F3:ED:28:2E:36:95:9B:CB:96:CB:82
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FrxAj4uYZjFD8-0oLjaVm8uWy4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
07:aa:7d:09:ad:41:63:b7:bc:1b:e4:ee:9f:8c:5b:75:84:c7:
61:af:fd:b3:e1:ba:44:45:5b:30:1e:12:46:40:a3:db:96:98:
3b:91:39:85:0e:43:bc:03:ad:33:d1:7d:4d:8e:55:e4:d7:8c:
3e:93:01:6a:3b:2c:ed:b7:de:bc:c8:37:d9:49:d8:e1:cd:db:
42:c5:9f:93:0c:ba:61:be:c6:80:57:d9:d9:eb:57:fc:b5:a0:
cb:71:af:92:e6:07:92:7c:dd:5c:64:88:77:74:66:0f:05:5d:
f4:68:cd:87:d1:44:00:b7:cb:cc:80:90:b0:8e:d2:2e:87:1b:
a9:06:b4:8e:09:9c:f1:ed:ee:1e:3e:2a:35:15:4b:06:e5:03:
4e:db:9e:06:92:78:25:f1:00:ad:79:8c:f7:03:f2:ab:e7:2a:
96:5e:54:d1:69:c8:54:f0:4c:ff:42:c0:e7:9a:8b:4d:2d:9a:
b5:1f:ac:7f:fa:c8:41:89:b7:f7:b0:c2:c1:2c:f9:10:c6:95:
12:bd:1d:57:c3:d1:05:89:a0:66:51:8d:00:42:b4:01:e7:c9:
6f:de:23:8d:e2:12:09:10:b4:f3:59:d6:0d:d0:6f:14:6f:5c:
cc:f1:63:46:1a:8e:0e:20:c1:d8:5f:87:4d:56:e7:a7:88:4d:
7e:af:0c:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:26 2025 by rpki-client