Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEiWNGh7W0TpGQApo2dgNzyClNA.roa
File: GEiWNGh7W0TpGQApo2dgNzyClNA.roa (raw, json)
Hash identifier: EDdLCzSrCtUr0OokthXxej8CzrO72C6Ysh6aZF/PW/g=
Subject key identifier: 18:48:96:34:68:7B:5B:44:E9:19:00:29:A3:67:60:37:3C:82:94:D0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019108E4E72297595A46342BDD51054722FB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEiWNGh7W0TpGQApo2dgNzyClNA.roa
Signing time: Wed 31 Jul 2024 13:05:04 +0000
ROA not before: Wed 31 Jul 2024 13:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:8e4:1ddb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:e4:e7:22:97:59:5a:46:34:2b:dd:51:05:47:22:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 31 13:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18489634687b5b44e9190029a36760373c8294d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:d9:90:07:5e:82:29:e5:a4:f3:7f:d8:2b:
f0:00:3a:1d:f2:0e:9f:8f:58:f5:fb:79:80:88:66:
3b:66:3f:2b:32:60:20:df:7a:54:e5:6d:9c:84:7a:
48:83:75:7b:a8:f6:50:9c:cc:ad:54:05:85:74:19:
d7:c3:5e:c1:0b:ae:0d:80:87:ce:a3:9e:6b:92:fa:
00:76:16:9f:ce:5c:c0:41:94:77:16:24:8d:8a:91:
f3:14:2b:c2:cd:b3:d9:82:df:50:b1:36:36:75:11:
0e:14:bf:3e:50:06:c1:11:6d:13:0d:aa:51:a8:ae:
3e:4d:97:9a:51:b4:ed:57:ab:52:14:53:1a:3c:c3:
78:4f:8c:3c:ef:5e:6d:07:87:77:d0:23:e0:61:17:
c0:25:12:4e:0a:32:9e:d2:c6:bc:a0:27:d8:55:4b:
52:a8:a6:6c:1e:f7:7d:50:f1:db:18:d0:74:48:8b:
3a:84:ba:11:79:ff:f9:12:1d:9c:0f:36:e8:8f:e3:
74:0d:db:35:dd:76:a2:08:6a:9a:2b:5b:84:3e:85:
7b:bd:ef:f6:d8:6a:bd:70:a9:4f:c5:8e:01:2d:88:
0d:32:43:12:7b:02:8a:dc:1f:24:9d:2f:0f:67:f3:
97:ba:74:c8:4b:9a:ed:1a:ed:c8:38:fc:c6:33:8d:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:96:34:68:7B:5B:44:E9:19:00:29:A3:67:60:37:3C:82:94:D0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GEiWNGh7W0TpGQApo2dgNzyClNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:8e4:1ddb/128
Signature Algorithm: sha256WithRSAEncryption
1a:cf:8c:e4:3e:29:21:5f:37:f6:8d:89:27:b7:cd:07:a0:c2:
41:0c:fc:bc:e7:79:d0:71:7a:89:39:44:5d:63:f4:1e:c5:8a:
9a:7a:c5:df:6c:ff:ff:4b:43:a9:2f:30:2a:53:68:98:73:84:
a9:18:52:0e:d6:5c:f0:af:62:8e:69:ca:2e:48:ff:3e:ec:ea:
e2:8c:b9:76:72:77:75:6e:58:66:d9:40:b2:4c:d2:03:09:f4:
82:b9:e9:90:d3:ef:de:12:5f:ee:18:20:0c:bd:4f:75:c8:87:
bb:e9:4c:f4:29:df:c9:bd:6e:63:9e:36:6d:a9:08:a6:6a:37:
c6:24:f7:2d:d4:9a:dd:be:21:d1:f5:a6:c9:43:e1:8b:54:24:
61:e1:f7:21:c5:df:fb:38:34:94:92:fb:0b:38:d0:18:67:be:
34:1d:89:af:85:d3:a4:ae:a9:cf:46:b4:d6:fa:ce:cb:86:a5:
1c:e2:ae:a0:2e:c0:f6:d6:0c:f9:3d:75:96:11:43:b4:72:ea:
1b:6c:a8:fc:8a:e4:72:d0:4b:df:d4:5f:d4:f5:9d:4b:ad:ad:
19:ce:fb:09:8a:83:b6:8b:ff:9e:da:1a:3e:ba:16:a3:55:62:
71:5a:65:a1:e4:bf:c5:02:da:b9:fc:de:6b:47:b7:26:fa:89:
19:e5:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:21 2025 by rpki-client