Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IWBNtSO4XIIDdxfgC-pL3e2KhhQ.roa
File: IWBNtSO4XIIDdxfgC-pL3e2KhhQ.roa (raw, json)
Hash identifier: BbwiICGcE/hh6N4r7QZzv8DOvTBQZHVqmryE5r5jnPU=
Subject key identifier: 21:60:4D:B5:23:B8:5C:82:03:77:17:E0:0B:EA:4B:DD:ED:8A:86:14
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019347F5C7F1C3E73B9AD3BA8517E4FD450B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IWBNtSO4XIIDdxfgC-pL3e2KhhQ.roa
Signing time: Wed 20 Nov 2024 05:05:10 +0000
ROA not before: Wed 20 Nov 2024 05:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:193:47f5:3f95/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:f5:c7:f1:c3:e7:3b:9a:d3:ba:85:17:e4:fd:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Nov 20 05:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21604db523b85c82037717e00bea4bdded8a8614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:81:c4:55:7f:0e:e6:9e:f1:8b:b4:f3:e9:
8b:90:f1:9f:37:ef:a8:78:f0:0d:1a:4e:ea:30:33:
91:ed:02:59:12:22:42:19:db:61:c4:c4:56:a5:51:
fa:53:15:3e:30:75:70:ae:c5:3b:09:f5:2d:ba:7d:
92:72:8a:b4:eb:c1:a3:35:d9:92:7d:37:44:14:2e:
02:47:6a:a0:90:6a:66:0e:d7:69:53:67:7c:a8:db:
c3:fa:95:00:48:08:e1:cf:55:37:64:e0:bf:64:52:
49:a0:16:67:f6:c1:70:5c:77:4d:26:ae:6d:52:8e:
e5:3b:e1:8f:99:8e:ec:79:e3:e9:a8:00:c0:d7:8c:
6b:79:36:62:4e:1a:61:d4:50:c1:c9:99:86:23:6c:
d6:18:f3:b5:27:84:ff:7e:fb:af:d1:29:e8:60:a0:
e9:aa:3b:ee:32:af:4f:bf:73:6a:c5:24:9b:bd:73:
bc:e5:ed:ef:d0:bb:08:1f:8f:ea:4b:ed:fb:53:83:
41:18:f5:a9:7f:ee:fc:15:67:84:be:ec:52:43:32:
64:12:fd:57:c8:79:c3:b9:83:b7:c2:ec:73:64:7b:
c2:db:1d:9c:cb:ff:a6:96:22:b9:16:35:ee:ce:02:
44:ea:0f:ce:94:58:d5:da:e2:3a:7f:ed:86:bd:60:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:4D:B5:23:B8:5C:82:03:77:17:E0:0B:EA:4B:DD:ED:8A:86:14
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/IWBNtSO4XIIDdxfgC-pL3e2KhhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:193:47f5:3f95/128
Signature Algorithm: sha256WithRSAEncryption
4c:57:ff:12:e8:33:1c:1b:12:1b:ed:e0:85:13:7e:9c:42:53:
d9:3e:51:38:2b:b3:34:26:3c:d2:94:d1:81:55:e6:f5:72:8a:
a9:3c:dd:f8:25:d8:e8:42:86:5e:ef:d1:62:e7:b0:ab:b0:b1:
cf:c1:c7:f0:15:22:88:63:ae:1b:76:7e:cb:89:18:29:19:cc:
77:86:a7:45:c5:b0:21:86:eb:48:93:50:e3:a5:11:03:d6:b4:
44:58:39:8b:a4:38:07:cc:64:60:66:b5:60:a8:ef:3e:e9:e0:
3c:32:06:74:1e:88:91:63:c9:b8:46:9f:05:e4:4a:23:20:cc:
42:c4:73:6b:a9:ea:07:3f:76:89:e3:c4:58:33:5f:22:a9:d8:
10:bd:71:b2:c7:78:b0:42:bf:66:b4:6e:aa:2a:a1:e9:a3:2f:
8c:a4:1e:84:ed:18:99:e0:f2:26:b8:72:d6:22:3a:ab:e0:a2:
fd:cf:47:1f:10:8e:b6:d4:39:4f:7f:23:23:33:c8:50:00:88:
6f:38:8c:92:c9:5b:a6:41:fe:33:f3:7f:df:0e:20:b0:2a:aa:
09:24:86:20:f6:e1:5f:35:ad:b7:ba:7b:57:4c:4a:c9:64:f0:
ba:09:95:e2:c8:eb:16:5a:87:41:69:f1:a6:d4:fc:4c:b3:a4:
c0:7c:3a:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:26:46 2025 by rpki-client