Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GffogEru4MRMw26V5a7-yWoihRc.roa
File: GffogEru4MRMw26V5a7-yWoihRc.roa (raw, json)
Hash identifier: CaZKMLcLT2VQDbjoV/gPN6fQd3u6Dc/C0cF/dB9mQSE=
Subject key identifier: 19:F7:E8:80:4A:EE:E0:C4:4C:C3:6E:95:E5:AE:FE:C9:6A:22:85:17
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019190B7FCEED4C3DB3228A5AD0D61B15350
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GffogEru4MRMw26V5a7-yWoihRc.roa
Signing time: Mon 26 Aug 2024 22:04:22 +0000
ROA not before: Mon 26 Aug 2024 22:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:90b7:f933/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:b7:fc:ee:d4:c3:db:32:28:a5:ad:0d:61:b1:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 22:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19f7e8804aeee0c44cc36e95e5aefec96a228517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bc:58:86:2e:78:07:a2:27:a6:21:e0:f1:73:
3e:80:30:a2:d2:82:5d:9b:0a:ef:3a:cf:7a:4c:7a:
21:cc:36:47:1d:cc:4c:70:39:47:cb:c4:1e:e4:e7:
7f:fa:e0:fb:31:1f:12:d0:a4:af:da:83:76:c4:5f:
21:6f:bd:b4:93:06:a6:d2:2f:8c:e9:f0:6f:0d:b5:
13:05:e6:00:99:79:1d:20:9f:a5:c7:ae:dc:7b:9e:
c3:19:40:9e:45:74:32:cb:d3:70:9f:1a:41:5b:79:
63:84:12:89:9c:31:14:66:a2:35:a8:e3:85:8a:a7:
6d:09:5d:ac:a0:39:b5:eb:aa:7c:b3:8d:53:df:1b:
67:47:b5:79:ad:ef:70:ee:f4:68:1b:1d:69:62:14:
41:ec:53:f9:24:9d:b1:bb:35:b0:29:81:11:c0:61:
68:f4:5d:a5:da:3d:a3:d8:f3:a6:86:cb:22:be:d8:
a2:6b:71:fb:68:fe:63:f7:6a:f9:15:7f:7c:19:93:
04:50:e5:cd:2d:1b:a3:fc:3a:cc:62:f9:b6:8d:e4:
0f:33:ad:cd:de:12:5a:a2:11:bf:89:ca:02:4f:9d:
5c:76:d1:e5:d4:a0:41:01:39:96:d1:8a:4a:23:83:
58:55:10:8f:5e:d2:10:da:db:8b:7c:7d:34:00:d7:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:E8:80:4A:EE:E0:C4:4C:C3:6E:95:E5:AE:FE:C9:6A:22:85:17
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/GffogEru4MRMw26V5a7-yWoihRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:90b7:f933/128
Signature Algorithm: sha256WithRSAEncryption
74:6c:81:f3:c6:c0:0d:70:7a:96:be:84:bb:8d:cd:79:63:51:
45:55:b7:67:85:2c:37:22:c0:d6:09:e6:ef:a8:61:8c:2b:a2:
f3:e2:29:b0:b9:d6:cd:46:ca:07:b6:81:f8:2f:8d:81:86:fb:
d9:0f:b0:b2:43:8f:e2:27:45:e4:7d:b9:11:12:25:a2:23:11:
f6:00:fa:93:9d:f3:be:d0:01:29:d5:89:dd:f5:32:e5:1b:91:
57:4c:1a:45:f1:39:27:93:2d:cb:df:9b:a2:42:87:82:3a:f1:
90:6a:a1:9f:ac:73:af:a1:75:4c:c5:39:97:e8:bf:25:e5:47:
d6:34:75:be:73:4e:4d:a2:3c:60:ca:d2:00:be:c0:fc:a5:44:
bc:76:f3:d3:89:54:fe:c1:f2:76:52:57:d4:ad:2a:b8:42:c4:
85:a8:5f:7e:cf:9f:9f:75:9a:14:9b:0f:43:73:ef:7c:bf:3f:
b7:46:2d:8d:7d:e0:83:5c:e9:3e:06:cc:a8:f5:c7:38:4a:e4:
ea:58:e7:ee:66:7c:9e:d8:db:24:9c:34:95:3c:c0:37:77:7b:
15:c6:bf:dd:34:4f:ca:9e:25:09:94:39:6d:1e:bc:87:18:db:
a1:b0:b8:d8:db:d9:7b:2a:94:9f:2d:32:79:68:c1:18:11:fd:
e2:dc:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:49 2025 by rpki-client