Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FzeHlAbXISDsZD6Yw372EiozTGw.roa
File: FzeHlAbXISDsZD6Yw372EiozTGw.roa (raw, json)
Hash identifier: ZE0eVCxe2PBraG28031nsvqF1ThkflOQBhwpXDE1Dh4=
Subject key identifier: 17:37:87:94:06:D7:21:20:EC:64:3E:98:C3:7E:F6:12:2A:33:4C:6C
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01928E90916633E527F656B42EF86A806FCB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FzeHlAbXISDsZD6Yw372EiozTGw.roa
Signing time: Tue 15 Oct 2024 05:04:51 +0000
ROA not before: Tue 15 Oct 2024 05:04:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:8e90:303f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:90:91:66:33:e5:27:f6:56:b4:2e:f8:6a:80:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 15 05:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1737879406d72120ec643e98c37ef6122a334c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:39:fa:d2:23:72:74:64:9b:8f:54:c6:30:
83:af:09:6f:a4:c3:d6:8e:e2:57:d2:fd:8f:ba:bd:
04:bc:9f:50:94:5e:6b:67:d2:02:d3:5e:10:77:41:
83:20:cd:5b:4a:2e:98:1e:73:b3:fa:64:bc:a4:6e:
e6:a8:88:d3:8f:ef:00:bb:63:6d:5d:52:fc:0e:6d:
df:30:f8:fc:ca:06:27:d9:81:a3:72:d9:7b:39:4b:
75:70:ed:4b:59:cf:02:bc:d5:13:e6:e1:b7:2a:d1:
64:76:34:38:4f:1b:fd:18:c8:e8:d8:91:03:79:7a:
04:37:e0:0c:fd:99:4b:8a:60:be:b0:e9:ef:e7:ae:
95:01:e2:ab:7e:b8:25:ff:fe:b3:84:3e:eb:39:ef:
17:d4:03:8f:55:cc:41:ff:7a:f1:55:b7:16:32:25:
77:c4:a1:ac:80:20:f9:20:fd:47:3d:ba:91:d3:90:
bb:30:84:19:b8:28:c4:61:8a:aa:8e:4d:70:f4:d0:
ed:38:ea:56:3a:90:70:90:60:b2:c3:4f:0c:91:3c:
91:d0:3d:f1:4e:e1:aa:c6:dd:a4:ed:0b:e3:39:70:
c7:16:b0:99:52:5e:d5:5f:01:b3:eb:5c:25:7d:69:
a2:27:a9:9f:a6:ad:96:ad:3e:b0:00:9f:90:5a:87:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:87:94:06:D7:21:20:EC:64:3E:98:C3:7E:F6:12:2A:33:4C:6C
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/FzeHlAbXISDsZD6Yw372EiozTGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:8e90:303f/128
Signature Algorithm: sha256WithRSAEncryption
62:f3:ce:55:be:ce:4c:64:ce:2c:bb:3c:4c:70:d8:58:16:df:
1e:60:a1:e6:f3:a2:ce:a7:83:ad:d2:9c:88:df:e3:69:2d:da:
93:6d:4e:5f:95:47:39:10:57:9b:84:e4:9d:69:2d:34:73:d8:
de:a4:77:dd:91:14:e7:d7:1d:1a:61:43:ad:9c:5a:29:1e:81:
eb:80:6e:48:8e:22:91:1d:2d:33:60:6b:19:bb:f1:61:ef:74:
da:fa:e0:4a:e3:6c:03:a8:56:14:b8:03:d8:39:03:cb:92:41:
b3:c0:18:61:6b:83:53:93:25:af:81:40:2d:10:66:60:a8:f3:
2c:f3:d2:ce:cd:b4:61:4c:0b:2e:f4:dc:af:d6:9f:e4:8c:23:
1f:cd:b6:4f:6f:32:c1:54:a2:02:6e:b5:dc:81:e8:cc:7f:71:
7b:5a:94:92:2c:14:7b:85:16:e6:ca:a4:7d:fa:b7:69:7b:ab:
f3:94:1c:51:fa:28:45:b5:86:b5:01:4e:cc:9f:7f:bc:cd:82:
ff:2e:af:65:0e:e0:91:9a:04:1f:40:07:b5:69:f3:42:35:13:
84:52:a7:01:31:91:1b:81:af:1c:de:4b:2a:92:46:22:4d:ef:
ed:45:89:5c:ca:f1:be:5b:fb:a7:89:61:7f:d3:0c:eb:ea:cd:
e2:5f:37:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:44 2025 by rpki-client