Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HmjgZZdWjylv8fYd-1KtrMOyQ1s.roa
File: HmjgZZdWjylv8fYd-1KtrMOyQ1s.roa (raw, json)
Hash identifier: 26NKWUnMNR3bLjGxWWBTJFwx72RFZp2Xoo5opPu66XU=
Subject key identifier: 1E:68:E0:65:97:56:8F:29:6F:F1:F6:1D:FB:52:AD:AC:C3:B2:43:5B
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191B9F145EFE6DF140EB0D64BE36FD08B4D
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HmjgZZdWjylv8fYd-1KtrMOyQ1s.roa
Signing time: Tue 03 Sep 2024 22:11:22 +0000
ROA not before: Tue 03 Sep 2024 22:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b9:f1:45:ef:e6:df:14:0e:b0:d6:4b:e3:6f:d0:8b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 3 22:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e68e06597568f296ff1f61dfb52adacc3b2435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:ff:49:65:f0:e3:f1:13:32:fa:af:5f:17:
9f:31:c4:ae:24:24:b0:01:8a:a8:b9:7a:af:18:a5:
f2:ba:22:d7:af:f8:49:cb:d3:44:83:38:d1:1f:d4:
cf:e6:c2:97:3f:a7:ed:61:69:24:3f:13:70:ad:bc:
3c:ac:99:e4:1f:b2:06:58:09:dd:f7:d4:04:33:85:
83:dd:08:c3:c9:b1:cf:b1:1e:29:00:5f:d8:fe:30:
37:2e:31:38:72:67:d1:e7:c5:30:4d:67:92:74:e5:
ff:ff:6f:14:d4:50:21:9b:92:3d:f6:e0:f8:31:2b:
54:ac:a0:45:9f:37:53:c6:14:4f:d3:21:32:b7:cd:
5a:b2:d2:49:29:33:6b:79:6b:b9:13:f5:3a:04:0c:
d5:fd:83:87:43:f2:2e:0d:9b:df:54:ac:33:d1:c1:
ef:75:78:86:b1:01:fa:10:0e:59:67:84:e6:db:f6:
e5:e7:45:ac:25:8c:06:4a:90:b5:c5:22:19:b6:04:
3e:3d:1f:6c:df:f1:23:04:04:84:17:fb:e9:aa:e0:
9d:b0:c6:3f:86:56:43:b9:a0:72:12:d8:b2:19:c9:
8a:62:ba:71:02:fe:cc:07:12:a8:b0:c1:33:87:9c:
eb:3f:e7:fe:75:e8:f4:68:c7:cc:29:d4:bd:81:d0:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:68:E0:65:97:56:8F:29:6F:F1:F6:1D:FB:52:AD:AC:C3:B2:43:5B
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/HmjgZZdWjylv8fYd-1KtrMOyQ1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0b:dc:01:44:23:b8:16:7c:83:7f:c4:3b:75:8b:a5:ad:39:bc:
cd:c9:c2:9f:9e:ba:62:fb:c1:29:ed:d0:96:c9:88:10:18:fb:
a6:fd:2f:41:15:68:0d:be:77:29:99:c8:83:c5:fe:6e:c0:2a:
df:e9:a1:5b:68:69:cf:f7:d9:96:c3:b0:60:5c:4a:f0:10:29:
97:1f:9b:fd:79:ca:ec:bc:15:cc:b1:76:e7:5a:fd:02:d3:cc:
43:10:be:96:6b:38:78:8e:56:6d:50:35:be:b0:15:91:49:54:
bb:e5:bb:35:f3:fb:f4:92:71:05:fe:25:f5:90:4e:4e:d2:65:
8e:09:95:9e:ad:4b:52:89:d4:ea:be:93:e2:a7:07:e1:91:f3:
a6:a8:fc:db:51:91:b2:cc:c4:86:34:c9:c3:cd:4c:dd:b8:17:
d7:03:db:1e:ea:f6:b9:91:cc:67:55:c3:4f:5b:90:1b:29:e3:
35:f3:5f:a5:78:64:12:d7:9f:b6:d4:30:db:90:96:82:7d:73:
50:e9:1f:73:99:6b:d5:c2:a5:e9:30:0c:21:a6:88:69:e0:0e:
9b:0b:93:f6:99:a5:d8:ca:c0:2f:9f:93:28:c9:18:22:a7:eb:
10:26:84:9d:67:0c:c9:f0:57:54:01:67:cc:de:46:b9:c9:10:
fc:32:a7:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:00 2025 by rpki-client