Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H1-coyYY8_T7TWu6PqA7cN3_mrA.roa
File: H1-coyYY8_T7TWu6PqA7cN3_mrA.roa (raw, json)
Hash identifier: QkFOzV3VEooebZ6m7zwsuJeQcUmdXuR5dYmHtkPfzcw=
Subject key identifier: 1F:5F:9C:A3:26:18:F3:F4:FB:4D:6B:BA:3E:A0:3B:70:DD:FF:9A:B0
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01947CFB87DA3EDDC5239C4DA98B84C6104F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H1-coyYY8_T7TWu6PqA7cN3_mrA.roa
Signing time: Sun 19 Jan 2025 05:14:06 +0000
ROA not before: Sun 19 Jan 2025 05:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7c:fb:87:da:3e:dd:c5:23:9c:4d:a9:8b:84:c6:10:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 19 05:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f5f9ca32618f3f4fb4d6bba3ea03b70ddff9ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:8c:d2:0d:7b:dc:7c:8d:92:43:03:a0:6c:
f0:4d:02:62:69:19:54:5a:c8:16:e8:4f:04:ce:0f:
80:f3:7a:1d:bb:2b:9e:21:99:46:84:fe:3d:7a:64:
dc:4e:ca:bc:3a:c3:4a:85:c6:cb:fc:82:f8:5e:e8:
0a:8a:5f:b8:8e:41:0e:6e:3b:7e:22:a4:75:2f:df:
f9:6d:75:74:5b:5c:fc:d9:7a:38:5f:6a:b0:8e:19:
f3:8b:d1:61:f8:87:08:4a:17:2f:8f:00:81:14:a2:
48:51:ad:70:d9:e2:ec:1e:80:08:a2:21:f7:26:fc:
b7:7e:fc:bb:2c:f2:ad:7a:97:50:8b:d1:48:c7:dc:
2d:2f:ac:62:f2:b4:a3:5a:f9:77:92:0b:3c:6d:52:
c3:76:4e:76:69:7a:0c:7a:5a:3a:7e:73:cb:06:63:
e4:3b:10:f5:1d:e7:ca:45:83:3e:a8:c7:1f:02:46:
ee:a5:19:1f:ae:ff:e3:01:8e:77:a7:c6:e9:6e:33:
3e:85:70:89:4e:8e:f4:32:8e:79:39:8f:f1:94:8e:
c7:fb:03:d8:5c:71:14:98:aa:cd:05:4f:77:e2:c1:
31:9a:10:fa:bb:ac:47:c5:de:f9:fc:f7:cd:3f:dd:
0c:85:55:33:79:4d:b9:2f:e0:76:88:b1:8d:a3:43:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5F:9C:A3:26:18:F3:F4:FB:4D:6B:BA:3E:A0:3B:70:DD:FF:9A:B0
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/H1-coyYY8_T7TWu6PqA7cN3_mrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
41:7a:2c:72:16:18:ac:af:72:1f:88:4e:08:6e:16:b3:63:70:
5f:23:b5:f1:31:a5:c7:1f:76:e0:18:d5:fe:39:2c:65:5a:9d:
b1:bc:60:86:79:fe:cf:f6:e9:fc:eb:fd:1f:d2:cc:b4:b4:bd:
51:0d:b4:35:82:b1:c8:f8:4c:07:4f:45:a0:81:d7:ee:64:20:
33:53:85:d5:c8:1a:c5:4d:26:5d:1b:3f:c0:29:81:97:5a:53:
1f:8b:fd:06:e3:98:07:01:62:0f:5b:84:d4:bf:e5:7c:d4:ce:
8f:0f:49:fe:3e:7a:6d:51:cd:aa:20:4a:56:37:85:0c:48:c7:
9e:2b:8a:17:b3:2a:1b:1a:80:b5:c2:6f:70:ea:be:f7:33:6f:
60:6e:04:79:ec:73:5c:2d:fd:fa:d2:b3:fc:9e:c0:84:56:f4:
78:b2:2c:fa:72:d6:27:22:91:4c:b4:b2:49:68:d3:21:f8:86:
86:8e:c2:66:ca:44:61:03:c3:ef:eb:3c:d5:ab:83:85:b2:27:
4b:53:cf:83:76:94:90:f2:94:25:f1:48:99:38:a5:15:67:cd:
58:fb:8e:21:2a:6a:c3:4a:0f:74:7a:d3:f9:bb:03:d9:0d:95:
a0:7e:37:ff:3e:3c:dc:97:95:3e:c6:8b:83:54:a7:48:ae:55:
d9:9a:14:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:53 2025 by rpki-client