Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JNUrap1KdbZDXnpM6H3yu6MkSRc.roa
File: JNUrap1KdbZDXnpM6H3yu6MkSRc.roa (raw, json)
Hash identifier: YO68bdexjX9q8k9WbREGFKxhPhbvuFPC8NNdyZyFoXY=
Subject key identifier: 24:D5:2B:6A:9D:4A:75:B6:43:5E:7A:4C:E8:7D:F2:BB:A3:24:49:17
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01914A2673F7AC13B6A823F91F1B657D150F
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JNUrap1KdbZDXnpM6H3yu6MkSRc.roa
Signing time: Tue 13 Aug 2024 05:11:59 +0000
ROA not before: Tue 13 Aug 2024 05:11:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:26:73:f7:ac:13:b6:a8:23:f9:1f:1b:65:7d:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 13 05:11:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24d52b6a9d4a75b6435e7a4ce87df2bba3244917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:7a:c0:54:b0:d2:cf:d3:1b:65:46:43:f8:
e9:6d:32:24:e3:0a:f1:9f:3e:22:5f:49:2d:2e:e1:
f6:a6:79:3f:ef:c2:43:9e:b7:d5:63:24:3a:c6:c1:
ce:d0:84:24:a1:d0:9e:24:eb:56:59:10:86:25:10:
f8:54:8a:0a:3a:7f:da:cb:5e:4f:27:c9:31:57:84:
94:75:6d:b6:f7:14:4b:ea:2f:74:18:1b:d7:53:50:
25:01:98:ca:2c:74:9a:5a:74:33:89:5d:64:4f:81:
24:ef:51:1a:62:bb:87:a1:47:7f:15:c8:9d:f8:20:
c8:f1:e6:56:25:36:df:e2:a7:4c:44:94:73:44:c3:
82:fb:12:b6:be:4e:90:90:83:df:71:ee:40:a1:f2:
a2:f7:34:86:4f:fd:d3:da:94:a7:91:a2:1d:93:32:
fc:88:39:35:e9:ca:f6:3c:e0:41:f1:84:b0:99:75:
dc:aa:d0:e5:ad:f9:8f:cf:a9:50:8a:6a:82:5d:fb:
33:18:8a:f6:87:0c:5c:d0:81:ad:11:5e:af:e1:c4:
d9:10:27:ee:ae:b3:fb:ef:66:58:5c:e7:14:98:51:
20:27:e8:26:33:80:6e:c2:34:05:a7:02:0c:8d:a7:
24:f3:5c:7e:1f:0d:eb:fd:23:ae:32:60:19:7a:cc:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:2B:6A:9D:4A:75:B6:43:5E:7A:4C:E8:7D:F2:BB:A3:24:49:17
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/JNUrap1KdbZDXnpM6H3yu6MkSRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
14:26:ff:47:d6:c6:ae:1a:b1:64:6e:a6:2b:4e:c7:0a:4c:a6:
f5:07:16:e6:e7:f1:27:0e:c0:e8:db:02:2d:d5:63:ac:53:88:
24:19:9a:c6:f8:ab:2d:bb:e0:aa:8c:af:4b:5f:b8:83:a7:01:
f2:bc:83:66:28:fc:a1:b8:68:e9:3b:91:1d:e4:23:3b:b6:79:
bf:34:60:6a:1f:4b:95:07:b3:8c:50:67:bb:af:82:0e:77:36:
84:93:3a:57:ad:2b:ef:61:d4:22:ae:5c:af:a0:90:e6:74:07:
f8:0a:37:12:76:31:53:1b:17:3d:f1:c0:63:a0:46:68:6e:45:
03:68:0b:bb:6b:6e:13:56:d0:5b:70:27:c0:b3:da:db:48:cb:
d7:95:22:34:ad:ca:95:73:ca:74:0b:3d:a4:a3:a5:24:94:0a:
14:b3:ef:8c:89:ab:6c:bb:b9:aa:4a:7f:3d:13:cf:ab:a4:c3:
80:38:07:72:7a:ed:4d:3f:b2:13:12:00:de:ab:98:fd:4c:14:
f5:aa:86:ac:c4:46:37:3c:79:ba:4a:1c:0a:b8:28:22:4c:e5:
c6:f3:58:4a:9b:a2:e6:60:b2:f0:16:bc:37:5b:0a:4c:d0:99:
61:63:4d:e4:c1:e7:12:71:50:d4:f1:3c:0b:4d:5f:82:b9:33:
a6:68:d0:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:19 2025 by rpki-client