Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3405oFrCQJ7oxXwClPDNHrLObw.roa
File: J3405oFrCQJ7oxXwClPDNHrLObw.roa (raw, json)
Hash identifier: lPf2eEyE3zbTUkvq7no0WV/AymjQYU0dd884AfWRFxk=
Subject key identifier: 27:7E:34:E6:81:6B:09:02:7B:A3:15:F0:0A:53:C3:34:7A:CB:39:BC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A8FECA142FF616F7F350F09A141A7691
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3405oFrCQJ7oxXwClPDNHrLObw.roa
Signing time: Sat 31 Aug 2024 15:12:35 +0000
ROA not before: Sat 31 Aug 2024 15:12:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:fe:ca:14:2f:f6:16:f7:f3:50:f0:9a:14:1a:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 15:12:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=277e34e6816b09027ba315f00a53c3347acb39bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:5d:69:ce:95:d3:b3:d8:7e:88:62:a2:24:
74:7f:39:64:98:9d:36:ca:c5:3b:c3:23:31:96:59:
15:f6:42:b4:ae:df:68:c4:6f:0b:df:e5:45:5f:c8:
20:ab:4b:25:69:b6:2a:5e:a3:b3:4d:c3:54:d1:08:
5d:3b:fb:c4:3e:05:01:c7:26:50:fd:8b:9d:d5:ef:
25:38:15:b1:bc:e5:ee:31:bb:b8:cd:33:63:5f:5a:
d8:a0:b6:3b:fd:04:b7:47:17:f3:29:7f:e9:05:75:
1d:2a:8e:1d:e6:ae:77:36:b9:1f:67:ef:75:3a:ca:
be:69:28:cb:e4:39:5b:24:5e:12:55:2c:36:ad:6b:
85:1e:d8:0c:34:34:40:9f:cf:8f:a5:6e:7d:da:89:
c5:86:b5:a0:9a:50:e1:46:54:c7:77:47:ea:a7:ae:
c5:46:1c:4f:dc:73:8a:78:9d:18:86:6d:f4:e3:6f:
e8:26:95:60:02:d8:45:70:4f:69:03:4b:9a:d5:ce:
04:d5:46:18:23:d4:21:71:3a:d8:8c:14:7f:b0:9d:
f1:19:47:21:51:1c:67:0a:1b:5c:08:70:0c:b3:72:
27:7f:62:a3:bc:d6:c3:b4:93:df:a0:e4:dc:14:31:
69:c6:f1:d5:2c:70:c2:8b:88:27:49:eb:7a:49:68:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:34:E6:81:6B:09:02:7B:A3:15:F0:0A:53:C3:34:7A:CB:39:BC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/J3405oFrCQJ7oxXwClPDNHrLObw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
0c:1c:e2:42:09:69:9b:8c:ad:84:81:e9:07:a2:72:06:30:58:
8b:e6:28:14:f4:c4:a5:5c:b2:f3:75:a1:d0:db:5f:a2:ab:c5:
9b:83:5d:fb:17:e7:0f:4b:62:73:af:07:31:7e:cd:80:1e:63:
c6:ba:de:4a:fa:b4:16:1d:4f:55:c5:93:c1:15:38:06:ef:5a:
68:5c:f8:ea:2d:52:58:e1:5b:31:3d:92:65:68:98:72:74:68:
7e:8e:f8:52:a5:88:58:b3:44:e3:c1:f7:81:00:a3:13:e0:32:
65:53:77:91:16:31:a6:78:34:02:57:7b:6e:08:50:17:ea:77:
db:0c:38:b5:6a:c9:0a:b4:6d:5a:a4:bd:9b:cf:a7:5f:49:78:
45:22:65:56:78:e3:69:5c:94:ff:87:f3:2d:9f:24:2c:a3:38:
7d:d2:46:2f:04:8a:e1:45:f6:25:2b:c0:02:e7:4f:d8:f4:ed:
0c:0d:17:4b:93:4d:cf:fa:48:d0:4b:89:5e:3b:59:3f:3b:30:
32:97:25:89:2d:57:63:8e:63:0f:83:4f:66:32:3d:d1:80:8a:
7d:54:cc:34:19:ee:fe:a7:f7:03:89:67:f9:f8:be:08:90:ea:
9a:98:c5:8b:07:f8:b8:c6:10:68:f7:7d:bf:36:79:c2:08:91:
0e:37:03:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:54 2025 by rpki-client