Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hav90OK9Lj_nttI_SBgPPWuOi70.roa
File: Hav90OK9Lj_nttI_SBgPPWuOi70.roa (raw, json)
Hash identifier: AlB8L+i+auHfyEyUQOcxXHG2Yuyif/Tx1KpFMp63YK4=
Subject key identifier: 1D:AB:FD:D0:E2:BD:2E:3F:E7:B6:D2:3F:48:18:0F:3D:6B:8E:8B:BD
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A39F771DFC3D0610A8E9450CFB4EB9D6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hav90OK9Lj_nttI_SBgPPWuOi70.roa
Signing time: Fri 30 Aug 2024 14:10:22 +0000
ROA not before: Fri 30 Aug 2024 14:10:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:9f:77:1d:fc:3d:06:10:a8:e9:45:0c:fb:4e:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 30 14:10:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dabfdd0e2bd2e3fe7b6d23f48180f3d6b8e8bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:9b:32:fe:97:dd:69:cf:af:46:b5:5e:8b:
f9:90:40:4f:57:cf:af:94:fd:5c:ea:3f:67:01:ab:
76:26:30:46:61:de:de:77:9b:ad:77:85:90:5e:2b:
68:e5:e6:df:e7:c4:ab:89:64:d8:a8:92:62:67:bc:
c6:90:c4:6f:b9:2d:ec:1c:61:cd:74:21:89:9a:37:
9f:28:10:41:de:83:20:9e:2b:17:89:61:57:9f:63:
61:b7:47:1b:54:c2:3a:01:8b:a6:21:01:77:06:91:
73:5f:28:52:57:a6:77:4e:85:33:8d:27:1e:5d:d9:
00:5a:92:84:5e:60:ae:79:66:21:eb:5a:70:1e:24:
43:bd:0b:ab:cb:d1:e6:4d:b7:e9:a7:7b:f2:e4:60:
95:c2:f3:7d:04:e6:34:96:07:6d:6e:52:cd:fd:33:
3a:0a:e5:58:0b:13:52:59:b6:0a:03:bf:a8:47:0f:
88:75:ef:e6:74:e0:66:09:8e:0b:c7:4b:68:96:62:
c5:d3:9b:43:c7:ec:3a:e0:ae:25:b4:88:af:81:e1:
ae:7a:bc:0a:d5:4f:5a:91:01:e1:95:6d:62:9c:94:
93:6d:71:7a:cc:3f:ee:a9:a4:9d:1e:12:c2:81:39:
15:ad:47:e7:98:d3:dd:ec:4d:2c:29:13:11:74:65:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:FD:D0:E2:BD:2E:3F:E7:B6:D2:3F:48:18:0F:3D:6B:8E:8B:BD
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/Hav90OK9Lj_nttI_SBgPPWuOi70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
62:c8:b7:b4:86:82:a1:82:c3:a7:b2:15:21:00:b9:4c:d6:33:
a0:3c:14:2f:77:33:ab:59:c3:2e:42:ee:58:39:f6:53:df:fc:
35:ec:e1:94:2c:a1:4a:6c:fc:c5:d8:67:1c:ec:11:9c:3b:26:
a3:24:12:0a:ad:2c:f5:a3:42:89:6d:69:d6:07:10:2a:11:51:
ee:04:0a:84:a8:a0:4a:f0:1a:14:2a:78:91:71:2d:ca:80:ce:
e5:1c:7d:b3:b1:54:38:f0:67:56:de:08:dd:91:62:a7:ab:da:
56:16:b3:2d:43:bd:eb:99:e3:14:62:5d:ba:dd:14:84:db:b5:
b8:86:be:22:3e:61:83:53:6f:9d:72:9e:5e:67:38:2a:03:94:
ca:22:c4:0c:39:d6:82:20:79:57:8f:64:38:c5:b1:73:2b:5c:
c9:52:94:b8:5c:2d:10:f0:e0:91:a0:5a:d2:98:4e:39:6e:dc:
4c:1c:1e:4a:eb:38:82:fe:7d:d6:4a:11:71:bb:ac:f6:06:1f:
ec:57:b1:df:dd:fc:f1:8f:46:2c:3d:df:f2:ed:e9:72:f5:d1:
21:4c:de:3b:ad:93:d3:31:ec:88:a1:15:73:6c:24:4a:06:87:
8e:cb:41:f2:f7:76:e2:29:43:88:d9:68:8c:68:ff:09:a7:23:
45:a7:cb:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:08:33 2025 by rpki-client