Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G66ncK-eM19w6C8MzIGafSjfl1M.roa
File: G66ncK-eM19w6C8MzIGafSjfl1M.roa (raw, json)
Hash identifier: xXNBc530pNI5hKT/nlByUR/1MUUr4SAQvMmdzo82Mo0=
Subject key identifier: 1B:AE:A7:70:AF:9E:33:5F:70:E8:2F:0C:CC:81:9A:7D:28:DF:97:53
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019413980BBC48B25F2FDE5A013002DC881D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G66ncK-eM19w6C8MzIGafSjfl1M.roa
Signing time: Sun 29 Dec 2024 18:05:18 +0000
ROA not before: Sun 29 Dec 2024 18:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:1397:2912/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:13:98:0b:bc:48:b2:5f:2f:de:5a:01:30:02:dc:88:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Dec 29 18:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1baea770af9e335f70e82f0ccc819a7d28df9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:45:97:c4:2e:96:cd:a3:2d:a2:95:69:61:
2f:c8:2b:a4:6a:c4:e2:b0:e5:cc:2a:13:83:43:20:
8f:13:a1:e6:2e:e3:83:ac:d1:71:65:a3:aa:4a:64:
6d:4c:1b:17:41:09:1e:34:42:48:8a:2d:7a:58:48:
21:45:71:3f:fb:b3:cd:d4:28:17:ef:17:4d:a9:1f:
3c:98:81:df:37:4d:58:14:8d:aa:de:b9:c4:d2:da:
7e:49:8f:87:2b:14:01:90:94:72:1b:e9:f8:8c:f3:
11:d9:5e:03:38:12:c3:e6:85:4b:f2:03:3b:f8:58:
59:25:27:9f:b7:54:91:fa:41:c7:81:2b:5d:70:f8:
90:f3:7d:eb:24:b2:1d:25:b2:80:3c:59:d1:6d:a8:
1e:00:cb:cc:4b:da:7c:6b:87:91:44:b8:80:fd:4d:
5f:d7:84:57:c1:b2:67:7f:90:b1:a4:13:a0:4f:ab:
6d:fe:cf:69:18:a0:79:ea:70:d5:e4:98:15:ac:e3:
e2:53:6c:d2:47:11:97:62:9c:f4:17:87:a3:ed:7d:
ce:40:37:72:c4:58:e8:7e:3e:9f:1d:19:80:a0:03:
1e:af:55:18:e8:2e:59:45:38:1e:73:46:f4:f1:3a:
df:dc:5e:b9:a8:91:ba:6f:ab:a5:e3:8d:c7:79:bd:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:A7:70:AF:9E:33:5F:70:E8:2F:0C:CC:81:9A:7D:28:DF:97:53
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/G66ncK-eM19w6C8MzIGafSjfl1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:1397:2912/128
Signature Algorithm: sha256WithRSAEncryption
21:34:ec:f1:90:bf:db:d8:12:de:59:4e:2c:72:50:6f:0f:7a:
e0:d7:26:33:13:fb:c5:12:62:72:39:ab:e0:8c:3c:5a:0e:bb:
81:57:1e:1c:bd:3a:75:7f:16:e7:8e:46:cb:e1:f4:d6:8a:b5:
af:d0:a2:53:72:47:17:eb:05:90:89:21:64:2a:b7:02:c2:0b:
d8:36:ba:b3:56:03:0b:e3:6f:8c:69:4a:89:64:b2:00:f2:15:
a9:85:98:00:06:58:5c:27:0f:76:8b:54:89:2a:43:07:27:4a:
77:47:69:c9:61:37:d3:86:86:98:c4:81:10:1b:ad:c7:78:65:
9c:15:aa:61:f0:5b:db:53:68:d1:6d:26:22:09:16:58:94:9c:
37:0b:d0:c5:78:ff:c6:7d:4f:1f:11:57:ac:d2:df:76:16:44:
dd:04:0d:2c:38:b8:b7:84:b8:86:5a:f4:59:4e:02:1c:c9:d9:
82:a4:31:f4:4f:bf:bd:9b:81:d9:14:60:5f:04:0b:48:ef:a1:
7c:41:32:59:d3:bf:12:fa:53:bd:9c:ed:14:70:8f:da:bb:cc:
8e:11:71:a0:23:4d:51:0f:30:9c:30:4e:ff:82:05:eb:70:4e:
20:95:b7:48:29:2b:a8:16:dc:21:bc:b1:17:ab:f7:3c:d3:7b:
2b:76:69:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:06:19 2025 by rpki-client